Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: J7xnHUTbpFVGVk/OFGVylrvAd7TdtnMbYwhjyYe0cf8=
Subject key identifier: B1:AF:42:6C:57:80:F8:94:7A:D6:3B:83:3E:DE:3D:8B:37:B4:61:84
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 0197B70EFF658612100838ACF29ED0B4DEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: SKTlOv+G0NXdvBvE9XRcvDE7hCwKLcwr4Vq7r+4gdYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ff:65:86:12:10:08:38:ac:f2:9e:d0:b4:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=b1af426c5780f8947ad63b833ede3d8b37b46184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:59:dc:d1:41:28:0d:56:84:99:86:2a:b1:
fe:d6:7a:22:ff:64:a3:07:07:88:94:5e:65:2d:af:
80:10:0d:fd:67:45:4f:5b:5c:eb:4a:93:0f:06:af:
4b:a5:0e:db:f2:2d:9e:a6:4f:c7:1a:6e:f3:0c:76:
bc:d2:fb:2e:63:19:2d:5d:8b:a8:44:09:1e:46:1a:
e3:86:8e:b1:f9:13:f2:b7:ab:8b:9e:03:24:5f:a9:
b5:3e:d7:f2:b6:d6:96:5f:7c:dc:2d:27:fe:e3:ad:
28:dd:0d:b6:e6:57:b5:cd:84:0c:29:ce:cb:dd:d7:
bc:a2:b6:29:61:c7:41:ec:27:a7:4f:fc:e4:1e:b4:
a0:c4:b8:30:e9:f1:8b:43:cc:00:7f:c7:f8:41:b4:
70:e4:b2:04:16:57:46:84:e6:85:f0:95:03:02:63:
44:44:03:d5:eb:34:b9:05:13:fe:98:86:50:59:20:
ba:e5:bc:55:86:cc:fe:14:76:e1:ba:b0:49:8d:f0:
87:14:6d:48:4d:dd:3e:5f:bb:c8:62:26:67:a0:3b:
cf:19:3c:09:47:8b:b2:25:2e:f0:e0:d8:8f:56:cf:
6d:ae:35:a3:d5:67:ee:08:77:b8:50:72:2e:11:95:
36:fe:2f:d6:cd:96:4b:d6:c5:8a:53:94:a4:32:70:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:42:6C:57:80:F8:94:7A:D6:3B:83:3E:DE:3D:8B:37:B4:61:84
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b8:8c:af:23:37:54:19:cc:96:d7:82:ae:8d:33:85:a2:84:
67:21:1b:99:9f:41:76:82:8a:7c:18:85:3f:80:e6:11:73:10:
49:ba:de:36:50:cf:81:0c:8a:00:21:4f:a4:f0:c1:69:38:8b:
74:7e:99:04:c4:b5:6e:7e:61:02:c3:3a:3f:d2:a3:c2:dc:50:
59:d2:f5:61:94:81:9f:f4:b0:a0:06:ed:df:df:1c:5a:b2:eb:
89:f7:e5:19:64:2d:0a:44:39:d4:27:9b:b1:49:16:ed:d1:40:
6f:e4:09:cc:88:92:12:0c:d1:4a:f9:6b:1a:c2:02:7b:85:93:
05:a0:6e:a4:ba:af:12:e6:59:7f:83:a7:7a:9d:4c:79:4f:c4:
be:b9:f4:57:af:ba:8a:b8:8a:7d:a6:3c:ee:6c:6d:c7:25:14:
cf:50:d6:c6:06:31:f3:aa:2c:aa:30:fd:19:05:66:23:08:14:
56:3a:19:9a:99:ce:aa:09:36:70:9e:be:ed:11:99:4f:66:e7:
cd:eb:d0:d0:c4:e7:96:84:ed:3e:ad:fe:52:f6:74:9a:e0:1b:
bb:89:07:62:e4:32:d1:2d:8e:92:9e:16:45:23:02:80:c2:a2:
6c:f5:4e:be:c1:eb:36:60:79:09:e7:2d:fb:54:04:3b:6b:e9:
d0:76:8f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dv9lhhIQCDis8p7QtN70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm
NmUxMDgwHhcNMjUwNjI4MTUwMTQyWhcNMjUwNjI5MTUwMTQyWjAzMTEwLwYDVQQD
EyhiMWFmNDI2YzU3ODBmODk0N2FkNjNiODMzZWRlM2Q4YjM3YjQ2MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyJZ3NFBKA1WhJmGKrH+1noi/2Sj
BweIlF5lLa+AEA39Z0VPW1zrSpMPBq9LpQ7b8i2epk/HGm7zDHa80vsuYxktXYuo
RAkeRhrjho6x+RPyt6uLngMkX6m1PtfyttaWX3zcLSf+460o3Q225le1zYQMKc7L
3de8orYpYcdB7CenT/zkHrSgxLgw6fGLQ8wAf8f4QbRw5LIEFldGhOaF8JUDAmNE
RAPV6zS5BRP+mIZQWSC65bxVhsz+FHbhurBJjfCHFG1ITd0+X7vIYiZnoDvPGTwJ
R4uyJS7w4NiPVs9trjWj1WfuCHe4UHIuEZU2/i/WzZZL1sWKU5SkMnBd5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGvQmxXgPiUetY7gz7ePYs3tGGEMB8GA1UdIwQY
MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt
NzkwNzc1Yzc3OWM1LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1
LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLiMryM3
VBnMlteCro0zhaKEZyEbmZ9BdoKKfBiFP4DmEXMQSbreNlDPgQyKACFPpPDBaTiL
dH6ZBMS1bn5hAsM6P9KjwtxQWdL1YZSBn/SwoAbt398cWrLrifflGWQtCkQ51Ceb
sUkW7dFAb+QJzIiSEgzRSvlrGsICe4WTBaBupLqvEuZZf4Onep1MeU/Evrn0V6+6
iriKfaY87mxtxyUUz1DWxgYx86osqjD9GQVmIwgUVjoZmpnOqgk2cJ6+7RGZT2bn
zevQ0MTnloTtPq3+UvZ0muAbu4kHYuQy0S2Okp4WRSMCgMKibPVOvsHrNmB5Cect
+1QEO2vp0HaPWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:26 2025 by rpki-client