Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: +7VqHqOPe/6KIScN0gdRA7JXFsgTdwZZRmAzh0N/g48=
Subject key identifier: 02:80:A6:D5:D8:59:9B:82:93:58:3B:13:39:85:02:A4:9B:23:8F:4A
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 0199FC58D44F830D7F658C527ECF89BFC4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: VFz56XPWHPI+JOYZ5pRK0Pl5dlCr3n9ec6PwecSFpKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d4:4f:83:0d:7f:65:8c:52:7e:cf:89:bf:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=0280a6d5d8599b8293583b13398502a49b238f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:5d:d0:93:a7:c2:30:b0:4d:d8:a8:4b:85:
ea:7c:98:fe:55:e0:03:db:c8:f7:95:98:a5:34:23:
76:88:98:eb:16:7e:c5:90:a4:a7:57:24:1e:00:dc:
29:45:57:a4:97:09:a9:db:b6:90:4a:ff:ff:95:98:
57:12:de:0e:fc:a0:8d:60:89:70:ec:ed:9d:da:1f:
21:35:95:e1:62:fc:32:6e:e0:23:ee:67:6b:29:0d:
dd:67:ee:0b:14:46:b4:a3:68:57:0c:a3:7c:10:fc:
39:45:8a:90:fe:b2:5a:d7:12:2e:ee:08:fa:98:e1:
2e:f9:5a:7c:22:63:e0:7e:65:af:f5:26:ef:05:ec:
39:63:8e:5a:b5:20:c7:70:1b:7c:e4:3b:1d:d2:6d:
4a:c7:25:35:f6:b6:f4:9c:9c:70:8f:1e:be:66:18:
19:37:61:5f:ac:17:c2:a6:b1:64:1d:88:30:8e:ad:
7d:aa:53:ce:aa:db:ec:30:bf:49:80:f1:2d:37:e2:
43:81:c1:76:35:35:93:bc:0d:55:75:97:65:dd:45:
b3:7f:31:c4:f6:b6:df:44:a6:7b:89:aa:ba:a2:d1:
68:ed:a8:c4:c4:dd:0e:94:78:70:5b:72:99:81:77:
a9:02:f8:29:30:22:b1:d4:3e:42:21:76:18:af:95:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:A6:D5:D8:59:9B:82:93:58:3B:13:39:85:02:A4:9B:23:8F:4A
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:0c:a6:97:41:aa:be:c6:81:26:00:93:24:c0:0b:8d:3d:f6:
a4:68:55:59:88:be:f5:f2:24:b7:c9:e6:cb:52:7d:14:f7:b1:
a6:b7:b6:53:9c:27:d2:70:ca:29:39:86:9f:93:1c:ef:37:35:
58:29:ee:19:d2:f1:54:7b:31:3b:8b:32:81:26:bd:c2:db:61:
c9:bc:e6:4e:86:4c:b6:03:71:37:e0:2f:37:eb:17:62:d5:2e:
11:6e:d4:e9:41:fc:70:8b:03:a7:00:ae:24:81:02:29:aa:8a:
d8:b7:d3:da:19:5b:07:d2:d2:c0:9a:e2:40:0f:06:05:d4:fb:
52:be:6f:5a:24:a2:30:99:93:fe:06:63:af:5f:a7:c7:4f:f9:
96:a6:43:87:27:72:cb:38:e5:8d:1d:df:5f:db:51:f4:83:40:
7d:8f:82:2d:d7:13:4d:43:91:eb:2a:87:fb:06:97:3f:00:7e:
d5:75:f0:c8:c7:0c:38:d0:56:a8:c8:14:51:d2:ec:6b:89:38:
d0:79:c0:9f:67:58:ec:81:96:40:c1:1c:d9:c6:75:92:9a:26:
07:c7:e2:70:a7:30:51:2b:0c:5c:21:4a:b3:03:c1:d5:3a:3b:
2a:18:4f:82:01:bc:f5:79:67:2a:ae:52:a6:84:72:56:f8:0e:
a9:00:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:59 2025 by rpki-client