Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: Qws91iwsNDO1sGvdDrukrMhPx7CH0yTBOw05ei3qP90=
Subject key identifier: 02:0B:E7:57:3F:7D:B7:B6:35:A5:12:D7:F0:C7:09:68:A6:66:3E:BD
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 0197B745655416317C18AD1B809A1E818132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 0566
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: 3I2mGfHorPrDep9I0nPeIh65tkI.roa (hash: OLscXpyWIbrn1RcZqjdSr9XXKKiPI7j2rv0JHHPMEQI=)
2: dNzpUeScS40SGAakdE8EMOqK8-0.roa (hash: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=)
3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: JbiFe9yE7RPSmSN2/r1UfO/QfzGfOvl4KzSHfaf0UvA=)
4: y_1DokJhuMn6KiVy0_PFo2uwqL4.roa (hash: CyQURB7g+UVvvUP5P21dxzNPaEmL0tzfzogezhC6J2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:65:54:16:31:7c:18:ad:1b:80:9a:1e:81:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=020be7573f7db7b635a512d7f0c70968a6663ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:94:44:48:39:27:bf:43:ea:cf:97:ea:8f:
84:97:29:5b:39:54:8e:b7:6b:88:43:c2:ff:a1:ad:
22:53:be:36:f3:53:8f:db:6d:a0:c9:e0:ec:fc:22:
0f:3f:6e:36:12:ba:34:af:ee:1e:ca:3a:8f:e3:f4:
b1:44:bb:25:c2:4f:f0:1a:0d:05:2a:ff:92:96:a8:
bb:ec:3a:87:15:3a:3b:b0:ad:4e:c4:64:0b:27:27:
75:b0:d8:49:cd:7f:9f:89:f1:e9:d0:00:74:a5:e2:
f7:03:08:0d:db:35:f0:d0:db:08:20:1d:a3:99:9d:
47:85:6b:b7:c8:b1:e6:a8:bc:f9:8b:b5:85:85:1e:
dd:31:71:40:78:fb:a7:b7:b8:56:d1:e9:d7:39:0c:
18:af:e8:67:0c:91:42:96:67:72:a0:2b:97:df:86:
a4:9b:68:b3:35:4f:62:ac:12:4c:a8:8c:0f:db:e3:
f8:86:4e:a9:e2:f0:ff:4c:fb:83:07:fc:dc:f8:2c:
72:dc:79:64:1c:bd:83:78:3d:c3:1c:5a:0d:b3:03:
10:7a:4a:56:18:7d:06:b1:bb:3c:18:0f:aa:d3:78:
59:78:2d:be:06:49:d1:49:ce:4f:0e:c4:0b:5e:a9:
d7:a0:af:c0:51:f7:8d:e0:d0:95:2f:60:d8:aa:9a:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:E7:57:3F:7D:B7:B6:35:A5:12:D7:F0:C7:09:68:A6:66:3E:BD
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:f8:1f:c8:cb:62:6a:b5:38:71:fc:69:b1:24:9b:5c:41:
f0:51:66:48:51:9c:67:61:c7:ca:3b:e9:21:d7:cd:fc:54:b4:
b8:d4:8e:19:18:f8:b8:fb:b6:8d:4e:23:46:e3:c2:af:fc:1d:
c6:07:94:f1:e8:fa:d7:61:2a:53:f6:50:86:e0:16:59:56:91:
a0:11:c9:94:74:b4:01:cd:e4:5e:07:8e:48:84:4b:b5:e2:93:
d9:1e:3c:75:ae:ef:d0:a6:59:d9:ad:fa:16:db:cc:8e:53:f3:
e0:08:a2:1c:1d:f6:84:79:48:fb:bc:6b:a7:5c:00:43:bc:8d:
50:d9:1c:aa:56:cd:aa:e1:b4:73:6e:f4:30:f7:38:36:ad:7a:
57:c9:61:07:10:3f:82:03:ee:60:61:d6:cf:53:08:fa:66:31:
d9:a7:a1:09:a0:28:f7:4b:b7:e9:b5:24:fc:f3:b6:f9:48:7a:
da:9e:5f:98:19:2f:4f:0e:24:63:29:ea:9f:76:77:16:dd:37:
5a:d6:b8:cd:e4:5d:c3:fe:53:4e:4b:5c:24:06:14:74:9a:43:
6d:fd:f8:6e:74:09:84:a9:55:82:61:35:21:8f:e4:03:71:80:
19:dd:c1:62:91:db:c5:52:74:c8:58:56:5f:19:7c:39:ef:99:
a4:af:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:00 2025 by rpki-client