Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: 873EVvQD0OKkzFjGld6cK8rLV+UxwvxlURkC5nHYlII=
Subject key identifier: 4C:DD:4C:36:46:76:3E:A5:B2:94:C4:78:0D:C7:1C:E2:9C:D8:05:9E
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 0198D5162E5D52EE9D2C2D98DADB26845998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 05FA
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: 3I2mGfHorPrDep9I0nPeIh65tkI.roa (hash: OLscXpyWIbrn1RcZqjdSr9XXKKiPI7j2rv0JHHPMEQI=)
2: dNzpUeScS40SGAakdE8EMOqK8-0.roa (hash: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=)
3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: 1kZ5R6VZz5KJXSCdYY1NncP5D1luguGfnMEQBggU+T8=)
4: y_1DokJhuMn6KiVy0_PFo2uwqL4.roa (hash: CyQURB7g+UVvvUP5P21dxzNPaEmL0tzfzogezhC6J2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2e:5d:52:ee:9d:2c:2d:98:da:db:26:84:59:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=4cdd4c3646763ea5b294c4780dc71ce29cd8059e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:3a:b5:6c:f2:0c:46:0b:5a:f9:f6:c9:d1:
1f:2c:52:6b:78:b2:6f:1d:cd:b0:c9:7e:78:cc:97:
51:86:29:d3:88:48:44:51:54:19:2d:9a:20:ab:61:
61:38:c3:2b:2c:39:35:41:dd:16:76:d4:98:8d:00:
d8:50:60:46:9b:84:93:78:bb:b3:14:f2:e0:3e:db:
85:70:ff:1e:d2:b1:01:b7:d0:d4:49:74:24:dd:65:
f2:c4:74:c3:60:24:63:7b:58:e3:4d:9a:ad:78:24:
49:8c:00:7c:59:2f:0e:c3:63:03:c7:26:c1:25:1e:
e5:b9:a4:93:91:d2:4d:fd:c5:9f:60:4f:d0:d1:7f:
0f:4b:1c:0b:93:cc:1c:2e:99:40:2f:88:b2:e8:dd:
6d:5f:47:8f:35:ed:71:da:70:23:43:80:c1:84:77:
88:c8:50:4d:76:ec:c0:6c:41:ae:d3:4a:2e:35:c9:
54:54:3a:40:ca:be:72:57:dd:bf:4b:8b:df:e1:1a:
6c:4a:cb:0a:e0:92:47:27:20:db:b1:e9:99:3d:0b:
c4:a3:54:eb:9d:60:ae:1b:8b:aa:c6:ce:fc:b6:97:
29:e0:73:0d:bc:6f:46:2f:86:9a:67:42:34:03:b1:
f3:13:32:29:52:86:fd:b7:a6:1a:23:48:76:f1:21:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:4C:36:46:76:3E:A5:B2:94:C4:78:0D:C7:1C:E2:9C:D8:05:9E
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:0b:1c:30:07:5f:8b:5d:aa:5b:12:9f:73:94:bd:0b:69:
1b:86:09:73:71:3d:a1:f4:d3:73:d9:5c:f8:e8:7e:2a:f8:0e:
50:63:73:e5:a7:71:b4:e6:da:8d:ae:c4:02:7d:64:d1:94:3b:
97:2a:59:09:2d:23:36:a1:d3:17:a1:ce:7e:84:79:74:c4:ad:
3f:87:9d:32:e0:0e:4b:09:06:75:c5:46:4d:6e:df:6b:9d:f1:
07:d9:96:51:3f:b1:38:4e:68:06:a3:49:8a:5e:39:94:5c:01:
56:63:65:c7:47:97:3a:c5:29:66:bb:9b:74:61:aa:ec:02:22:
c0:b7:fd:d5:03:66:6d:78:57:7d:c7:77:8a:da:62:23:4d:4a:
3b:0a:0c:80:21:a0:e6:33:8e:d5:b5:e6:d2:75:7e:d2:30:26:
9b:90:0e:d9:1d:55:e3:5d:43:33:0e:64:ee:72:11:78:85:04:
0f:f7:83:46:c0:54:96:ef:30:11:fa:8c:7c:71:cf:3e:bb:4e:
ea:ab:db:be:23:93:df:b1:df:06:6f:26:59:e2:cc:84:3c:bf:
6b:9a:14:4a:94:e7:55:f4:c1:33:2e:fd:b0:78:63:e2:a1:ca:
2a:e3:ad:2d:ae:ac:60:16:1a:c3:60:76:f8:a5:de:13:62:06:
27:aa:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:13 2025 by rpki-client