Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: 7EZTdJlSn1t8v2zW3ZA7NEgGuk3YEVyYT1f6jUYe4Zc=
Subject key identifier: 44:D7:26:FF:7C:F9:DA:96:36:D3:FE:A5:84:F2:11:B9:53:4F:F5:07
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 0199FBEB3FB91949C07FE5AA023E06FCA601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 09B5
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: XgukXmc3WtlT+TlOMyssKJOQ74OCmeAyfcCvH4rQ6rk=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3f:b9:19:49:c0:7f:e5:aa:02:3e:06:fc:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=44d726ff7cf9da9636d3fea584f211b9534ff507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:bf:fe:9c:b3:50:74:f5:b3:6b:7b:c7:f0:
6a:07:60:3d:ea:e3:fa:62:95:e7:4e:1d:84:4e:68:
b4:ef:45:5d:31:0c:8a:62:41:9f:49:53:b1:4a:1e:
d4:46:3d:25:16:5d:ca:ec:f4:a9:10:2c:44:41:68:
c2:f7:91:74:c9:39:1b:05:65:b8:bd:c5:df:2f:8e:
27:92:f3:e9:c8:a8:28:1c:c5:39:19:f0:72:64:37:
ca:5a:6b:94:be:33:eb:cd:39:9b:41:02:4d:5c:ee:
17:d0:08:9b:48:a7:fe:40:92:9b:b9:62:e5:e2:53:
01:4a:97:d6:ea:b4:e3:ff:8d:29:56:de:fb:ff:37:
90:46:df:00:9e:2b:3c:8b:91:ef:8d:2f:3c:26:b5:
8f:59:21:10:68:b6:c5:69:11:16:3d:bf:49:40:95:
92:ad:3e:41:56:6b:09:85:73:57:3e:19:03:1c:66:
cb:fb:77:ed:50:09:5a:88:57:32:fe:39:e1:ee:c9:
5d:0c:3a:2a:35:cb:be:b5:3a:f1:c3:36:55:df:d5:
a7:fa:de:6e:4f:ae:31:f0:06:0e:c5:81:6d:f7:49:
48:cb:07:92:31:6a:c8:c8:dd:f5:d3:9f:7a:7e:de:
c9:5e:8f:ec:49:16:e1:dc:e2:6b:75:b0:9f:4b:00:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D7:26:FF:7C:F9:DA:96:36:D3:FE:A5:84:F2:11:B9:53:4F:F5:07
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0f:e6:b9:23:35:c5:fd:34:ef:14:be:3f:c0:91:e4:85:e3:
0b:66:66:f7:ee:5c:31:5d:bd:fb:b3:0a:63:59:69:68:96:75:
c3:6e:a2:32:51:ea:d8:97:da:d5:7e:4b:0b:75:19:e5:57:b4:
84:da:ce:10:40:33:b6:81:ff:3d:8e:7c:c2:26:d4:1d:62:14:
25:d9:d7:3d:0b:f2:c0:9c:29:2f:8e:b3:e1:dc:bb:67:61:6c:
0a:d6:c9:ce:1a:ff:d6:49:a3:17:4d:ec:78:08:ad:01:ff:65:
63:1f:e3:46:8d:a3:68:d9:36:3f:57:07:4f:1c:f9:6d:25:a0:
95:78:73:a7:4a:04:fe:da:17:fc:10:5d:b7:ec:04:d5:68:c8:
bd:7a:6a:65:56:0a:96:89:cc:92:42:b2:d5:54:c6:dc:39:06:
b8:25:98:50:95:00:cf:d1:1f:a5:f4:de:8a:8c:58:59:5e:f8:
8d:2f:80:f0:7b:7b:95:ba:5a:44:5f:6b:02:2f:06:f5:45:e7:
e2:8e:3f:5f:49:1d:7d:3a:21:1a:21:21:dc:a8:a8:2e:7d:eb:
47:8b:16:96:69:04:5e:02:ae:df:49:23:27:6d:67:62:91:e8:
40:bc:17:6e:74:e3:8e:a7:b8:b0:1e:14:78:0d:4c:ca:11:41:
e7:cd:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:39 2025 by rpki-client