Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: 5UN1aPWitM+y2lIApCvYcZEu5SfYsi54/5vOxPExvwU=
Subject key identifier: AE:6D:B9:45:5F:13:97:C6:51:DD:77:91:48:12:DC:91:66:0D:A1:F8
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 0198D4DFFC96896A301C19A7C3C7F6A48BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: eunerZk1k92NfxXXG5zEtVH5sCVOrvfgIF20gzqfqTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:96:89:6a:30:1c:19:a7:c3:c7:f6:a4:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=ae6db9455f1397c651dd77914812dc91660da1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:f3:04:e3:bc:bb:e8:c0:90:93:0b:4c:3a:
30:cf:c4:0b:00:57:20:8e:b5:44:8f:e1:70:8e:53:
8c:08:9e:2a:a3:e9:b1:4d:8f:71:ce:73:8c:5f:b5:
dc:52:a7:d6:c9:b5:82:3b:1e:26:2b:69:78:da:b3:
8b:6c:47:43:61:4e:91:8e:b3:45:e9:14:bc:25:30:
e7:85:1e:b1:d5:e2:9f:0d:78:b1:f0:9d:30:b4:58:
b0:61:c0:7b:ca:ad:59:01:29:b9:9f:af:fc:11:63:
2f:64:dc:dd:98:ef:fe:06:a8:87:4d:db:94:42:1b:
9d:65:ed:31:6e:cf:8e:cc:6a:c1:12:f0:4c:0d:ac:
7e:00:ec:48:54:62:72:4b:11:96:4b:0a:05:f1:8a:
70:c3:86:0a:cb:e4:19:bd:0a:85:86:29:1a:26:29:
78:c4:09:65:9e:1a:22:fd:41:4f:37:ab:1c:95:46:
b3:ab:56:53:2d:87:cb:3c:9c:03:d8:66:9f:40:8e:
b1:db:78:c3:aa:ab:c4:3f:0c:7f:c8:16:d4:57:61:
8a:21:7c:0d:bf:26:3f:e4:5c:65:a4:9a:9b:17:ed:
41:bf:6f:1e:29:7f:67:ff:65:e2:70:ea:0c:bf:3f:
b3:4a:6d:d6:f4:22:55:e8:40:ff:ad:cf:5b:55:9f:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:B9:45:5F:13:97:C6:51:DD:77:91:48:12:DC:91:66:0D:A1:F8
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:4a:b2:78:37:7a:96:3f:22:df:91:f1:2b:43:c1:fb:9a:
e8:0b:84:2e:98:d8:fa:31:35:fe:02:00:35:fe:c6:05:c6:70:
ce:07:40:35:16:d3:f4:c7:6b:36:f6:f5:c7:67:de:e6:33:81:
f5:1e:0a:e7:56:a3:a8:98:b4:6d:a2:0d:29:8c:a0:3b:76:fa:
32:94:1d:6d:64:89:c7:56:ee:51:e0:8d:58:36:59:3c:60:56:
26:84:f9:58:0c:ba:06:d9:0a:db:45:ae:e6:f6:02:71:97:09:
fc:2d:29:72:80:f1:73:f2:33:51:c7:42:a4:62:84:c4:a5:db:
d7:a0:6d:29:5a:76:34:af:cf:b0:30:72:d4:a0:6a:d2:3c:34:
ed:30:51:91:f3:48:dc:25:aa:b2:52:a9:50:76:ed:6a:09:7d:
cc:c8:4c:96:f2:05:04:20:c1:60:63:9f:e3:a8:79:72:62:9c:
00:82:f7:ac:12:b3:2c:ec:4d:4d:ad:fa:c0:ea:a5:62:1b:4b:
56:ca:ed:4c:b6:f5:3a:9e:45:2d:5c:b5:cd:e0:36:6d:95:e8:
71:72:e1:27:94:7d:28:da:03:25:c7:cb:c6:1a:7f:46:15:19:
93:90:b8:fb:9c:81:0d:f6:05:30:88:fe:1e:85:5e:1d:54:30:
b6:92:a9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/yWiWowHBmnw8f2pIvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm
NmUxMDgwHhcNMjUwODIzMDMwMTQ1WhcNMjUwODI0MDMwMTQ1WjAzMTEwLwYDVQQD
EyhhZTZkYjk0NTVmMTM5N2M2NTFkZDc3OTE0ODEyZGM5MTY2MGRhMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6vzBOO8u+jAkJMLTDowz8QLAFcg
jrVEj+FwjlOMCJ4qo+mxTY9xznOMX7XcUqfWybWCOx4mK2l42rOLbEdDYU6RjrNF
6RS8JTDnhR6x1eKfDXix8J0wtFiwYcB7yq1ZASm5n6/8EWMvZNzdmO/+BqiHTduU
QhudZe0xbs+OzGrBEvBMDax+AOxIVGJySxGWSwoF8Ypww4YKy+QZvQqFhikaJil4
xAllnhoi/UFPN6sclUazq1ZTLYfLPJwD2GafQI6x23jDqqvEPwx/yBbUV2GKIXwN
vyY/5FxlpJqbF+1Bv28eKX9n/2XicOoMvz+zSm3W9CJV6ED/rc9bVZ/5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5tuUVfE5fGUd13kUgS3JFmDaH4MB8GA1UdIwQY
MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt
NzkwNzc1Yzc3OWM1LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1
LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbZKsng3
epY/It+R8StDwfua6AuELpjY+jE1/gIANf7GBcZwzgdANRbT9MdrNvb1x2fe5jOB
9R4K51ajqJi0baINKYygO3b6MpQdbWSJx1buUeCNWDZZPGBWJoT5WAy6BtkK20Wu
5vYCcZcJ/C0pcoDxc/IzUcdCpGKExKXb16BtKVp2NK/PsDBy1KBq0jw07TBRkfNI
3CWqslKpUHbtagl9zMhMlvIFBCDBYGOf46h5cmKcAIL3rBKzLOxNTa36wOqlYhtL
VsrtTLb1Op5FLVy1zeA2bZXocXLhJ5R9KNoDJcfLxhp/RhUZk5C4+5yBDfYFMIj+
HoVeHVQwtpKpzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:24 2025 by rpki-client