Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json)
Hash identifier: riB1G01vyITTx3rFbMzF3l7JKYLozG8gcPQ+9Wg7GX8=
Subject key identifier: 86:A5:59:DC:22:AB:16:0D:E4:76:ED:AF:BA:6C:23:2A:2F:E4:8B:5E
Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a
Certificate serial: 0197B6D765E50BE46883CD68C54618CFBDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
Manifest number: 0A96
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: qNq7m/NgK0KIiHoe3aYqgEQeghSU2zYqKWvNGqcJohk=)
2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:65:e5:0b:e4:68:83:cd:68:c5:46:18:cf:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=86a559dc22ab160de476edafba6c232a2fe48b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:3d:00:18:19:be:cb:c9:0c:a7:da:3a:0b:
45:cb:83:ef:b1:35:5f:e4:7e:98:c3:71:22:ac:6d:
85:ff:f6:62:d2:6c:c2:e2:35:bc:0d:7a:b3:11:e4:
0f:05:7d:e0:9f:ba:5c:16:10:95:56:e0:01:23:c2:
7f:cb:7e:5e:24:0b:6b:cc:88:34:b7:96:22:4d:8a:
71:8f:ba:24:06:7f:50:56:d2:6a:3c:58:71:19:5c:
ce:51:b5:2f:26:22:18:fd:07:bb:ca:8b:84:b7:d4:
e9:a5:4f:83:51:38:32:f1:da:e6:6b:87:ad:50:8e:
d3:2c:dc:9a:7f:33:2c:e8:cb:c9:28:13:f8:58:7f:
69:0e:cb:2e:c6:3d:e8:5f:28:ce:1f:e6:eb:7d:c3:
9a:e2:b4:6e:4a:25:49:46:3d:e8:29:59:5f:e6:a2:
a8:cf:2f:9a:72:a5:5d:1a:75:c1:f3:45:40:95:0a:
36:dd:04:f0:19:8b:f6:18:13:f8:bd:3a:6a:94:4f:
21:15:02:7b:d8:9e:af:a5:cb:4d:35:34:c7:4b:78:
85:62:14:48:45:97:e4:a1:21:87:db:50:e5:02:43:
4a:fd:cd:82:22:eb:7d:2b:d5:68:47:c0:8f:17:02:
1b:78:9f:78:2b:a2:42:54:ab:1c:ad:85:b9:7f:7c:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A5:59:DC:22:AB:16:0D:E4:76:ED:AF:BA:6C:23:2A:2F:E4:8B:5E
X509v3 Authority Key Identifier:
keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:15:84:3d:da:a6:7b:46:42:74:10:16:11:a0:c0:f3:f8:
36:f2:74:f5:59:93:d4:22:37:ed:bd:fc:0d:40:c5:29:b6:63:
eb:9f:75:7c:bc:0f:b8:ae:4f:08:4b:ee:07:d2:8e:7c:69:23:
51:75:4b:2a:f9:65:53:56:65:de:c4:a8:aa:b0:86:61:dc:3d:
f2:da:82:5f:f5:52:dc:95:e8:3e:77:50:9f:db:95:7d:aa:a5:
7d:7f:4d:73:61:9b:59:ae:5f:79:97:34:d0:b5:39:a4:35:d3:
b6:18:5b:48:84:a5:53:88:00:25:dd:2a:b1:1a:cb:da:75:19:
3f:0b:13:37:b4:3e:eb:ce:d3:34:6b:16:a9:2d:56:8f:a9:67:
82:78:60:40:46:13:73:11:26:d4:dc:50:49:c6:0c:a0:f1:7f:
ef:be:5c:fe:53:1a:e1:99:7a:a7:b2:5f:0f:00:33:9e:ab:2d:
9e:40:8f:1e:e0:83:8f:61:df:b8:aa:ea:d6:a8:7d:34:1a:13:
e2:bf:3d:39:ad:6b:3c:71:43:55:10:01:7f:d3:bb:a8:ef:f0:
50:53:7a:f2:b3:07:26:56:8f:d9:1f:37:71:9c:78:57:39:06:
c7:fa:fb:c2:4c:da:d2:0f:1f:3e:5c:0c:4f:dd:71:9f:53:c6:
b4:4a:a1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212XlC+Rog81oxUYYz73IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl
MzYyNmEwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
Eyg4NmE1NTlkYzIyYWIxNjBkZTQ3NmVkYWZiYTZjMjMyYTJmZTQ4YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjI9ABgZvsvJDKfaOgtFy4PvsTVf
5H6Yw3EirG2F//Zi0mzC4jW8DXqzEeQPBX3gn7pcFhCVVuABI8J/y35eJAtrzIg0
t5YiTYpxj7okBn9QVtJqPFhxGVzOUbUvJiIY/Qe7youEt9TppU+DUTgy8drma4et
UI7TLNyafzMs6MvJKBP4WH9pDssuxj3oXyjOH+brfcOa4rRuSiVJRj3oKVlf5qKo
zy+acqVdGnXB80VAlQo23QTwGYv2GBP4vTpqlE8hFQJ72J6vpctNNTTHS3iFYhRI
RZfkoSGH21DlAkNK/c2CIut9K9VoR8CPFwIbeJ94K6JCVKscrYW5f3zpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIalWdwiqxYN5Hbtr7psIyov5IteMB8GA1UdIwQY
MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt
NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk
LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpgVhD3a
pntGQnQQFhGgwPP4NvJ09VmT1CI37b38DUDFKbZj6591fLwPuK5PCEvuB9KOfGkj
UXVLKvllU1Zl3sSoqrCGYdw98tqCX/VS3JXoPndQn9uVfaqlfX9Nc2GbWa5feZc0
0LU5pDXTthhbSISlU4gAJd0qsRrL2nUZPwsTN7Q+687TNGsWqS1Wj6lngnhgQEYT
cxEm1NxQScYMoPF/775c/lMa4Zl6p7JfDwAznqstnkCPHuCDj2HfuKrq1qh9NBoT
4r89Oa1rPHFDVRABf9O7qO/wUFN68rMHJlaP2R83cZx4VzkGx/r7wkza0g8fPlwM
T91xn1PGtEqhRw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:48 2025 by rpki-client