Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: ceuIn+0u4kO34xpfUqD4JPYx26YN6m2kZV26jxteyT0=
Subject key identifier: 99:A8:28:73:91:D6:19:14:B3:DB:E7:04:10:01:3C:1F:58:53:B2:86
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 0197B745B4E4B9E01A6648444FFEC77D4711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: UkVaX6HJ0FPZTOwjVk6kKnXjMjF+QwTr0yIZHFHt7Tg=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b4:e4:b9:e0:1a:66:48:44:4f:fe:c7:7d:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=99a8287391d61914b3dbe70410013c1f5853b286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:68:06:85:1a:4c:c5:38:39:37:73:1e:12:
01:a6:09:71:bb:11:b0:54:b9:d4:db:0f:e2:03:69:
00:3c:34:79:13:84:70:2f:b9:84:54:c9:8b:75:d4:
81:04:e1:93:5a:80:a8:8a:1c:dc:8a:5c:0f:5c:67:
5b:aa:98:e0:d2:e6:c5:fa:3c:67:bc:47:bc:97:bb:
29:1f:bd:80:eb:54:71:f7:7d:6e:a2:67:32:5a:9f:
15:ba:08:bf:ce:35:1b:3c:86:e3:19:84:2a:c4:40:
bb:11:6e:c3:b9:31:32:17:0f:f7:3f:30:1a:1a:76:
40:6c:b9:e0:b1:11:df:56:42:61:3e:c9:56:20:92:
8d:68:46:71:1c:1c:78:7b:7e:b2:6b:59:a2:66:c0:
e6:e5:a7:00:df:15:76:b9:3b:3a:04:b3:67:45:cc:
e9:59:cf:30:e1:c2:95:e6:3d:9e:9b:15:a9:d8:c2:
b1:e4:a0:de:f5:fb:14:ef:69:54:1a:b1:ba:52:8b:
f9:fe:14:ff:33:63:b4:21:ff:e3:b7:35:9b:b4:da:
3e:c9:1a:2c:3f:ac:a4:aa:5c:03:ed:f1:26:37:4e:
4b:d9:20:e9:2c:17:21:12:7d:d3:44:58:78:ea:ef:
3c:e4:8f:b5:9f:e8:05:99:80:b7:47:09:e2:c6:be:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:28:73:91:D6:19:14:B3:DB:E7:04:10:01:3C:1F:58:53:B2:86
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:01:4b:64:6f:ee:58:c4:3a:68:85:79:6c:bd:78:47:6e:
76:85:a2:c4:0c:2e:f4:36:17:e2:0f:ad:9e:9e:ce:1a:1b:1a:
c4:74:29:d4:22:0a:62:77:9e:02:a9:29:a3:f3:55:b7:26:ab:
94:36:66:d3:b3:97:c2:ae:4d:c8:5f:9c:b1:d8:4a:25:38:e2:
ca:7a:ef:47:c8:f5:24:6a:38:01:0e:7d:fa:94:0d:f6:30:b4:
59:af:83:30:68:45:a0:cf:22:85:e9:bb:93:07:46:c0:a0:c6:
1c:d5:28:8b:f4:78:60:b1:c5:57:63:54:53:eb:c0:66:bb:c2:
f1:df:bb:04:bf:56:41:f4:4f:65:23:58:40:19:e5:b3:5d:e0:
0b:bb:50:3c:e4:d9:17:74:2e:e6:a0:1e:82:0b:8b:a1:72:5a:
00:30:52:56:06:b2:30:87:74:85:42:b2:8b:5a:4e:c6:07:09:
ee:72:bc:8f:9f:44:bb:b5:65:c0:94:0d:4a:98:21:48:2c:d8:
d4:63:a4:58:4d:92:68:10:06:99:c3:82:83:25:79:09:ec:21:
0b:44:40:04:42:38:4f:20:5a:f9:ba:7b:e9:84:0d:4c:56:db:
1c:d5:6d:49:0b:53:5c:44:68:e3:60:2b:3b:95:12:bd:e5:21:
81:18:31:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbTkueAaZkhET/7HfUcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0
OWU3YTAwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
Eyg5OWE4Mjg3MzkxZDYxOTE0YjNkYmU3MDQxMDAxM2MxZjU4NTNiMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMBoBoUaTMU4OTdzHhIBpglxuxGw
VLnU2w/iA2kAPDR5E4RwL7mEVMmLddSBBOGTWoCoihzcilwPXGdbqpjg0ubF+jxn
vEe8l7spH72A61Rx931uomcyWp8Vugi/zjUbPIbjGYQqxEC7EW7DuTEyFw/3PzAa
GnZAbLngsRHfVkJhPslWIJKNaEZxHBx4e36ya1miZsDm5acA3xV2uTs6BLNnRczp
Wc8w4cKV5j2emxWp2MKx5KDe9fsU72lUGrG6Uov5/hT/M2O0If/jtzWbtNo+yRos
P6ykqlwD7fEmN05L2SDpLBchEn3TRFh46u885I+1n+gFmYC3Rwnixr5tlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmoKHOR1hkUs9vnBBABPB9YU7KGMB8GA1UdIwQY
MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt
YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk
LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVsBS2Rv
7ljEOmiFeWy9eEdudoWixAwu9DYX4g+tnp7OGhsaxHQp1CIKYneeAqkpo/NVtyar
lDZm07OXwq5NyF+csdhKJTjiynrvR8j1JGo4AQ59+pQN9jC0Wa+DMGhFoM8ihem7
kwdGwKDGHNUoi/R4YLHFV2NUU+vAZrvC8d+7BL9WQfRPZSNYQBnls13gC7tQPOTZ
F3Qu5qAegguLoXJaADBSVgayMId0hUKyi1pOxgcJ7nK8j59Eu7VlwJQNSpghSCzY
1GOkWE2SaBAGmcOCgyV5CewhC0RABEI4TyBa+bp76YQNTFbbHNVtSQtTXERo42Ar
O5USveUhgRgxxA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:52 2025 by rpki-client