Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: Ub5m4a2dZj8FDgcyoJw28JsJYMtd3sNO5XnWIM46MQ0=
Subject key identifier: B5:20:AD:7F:6B:2F:93:5C:09:38:C7:2C:20:90:04:2C:87:C0:80:0D
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 0198D65F2C7AAB9A4DC2325B3CEFA0E84ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 091D
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: CtSTVNEVNRtb4sDRVF3Xy2Pvk22GqmZieAP9wLa9SxY=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2c:7a:ab:9a:4d:c2:32:5b:3c:ef:a0:e8:4e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=b520ad7f6b2f935c0938c72c2090042c87c0800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:5e:ef:56:fe:1a:4e:7d:a0:5f:13:3d:2e:
c9:79:32:ac:40:5c:38:d6:28:52:30:f6:aa:68:02:
9a:f6:18:a1:d0:65:7b:9b:a9:24:d5:fd:ea:e0:0a:
81:06:e8:92:3a:a4:eb:41:ec:8d:d0:cb:e1:36:d3:
9c:96:74:79:95:95:b1:51:07:19:6d:c4:ae:46:ca:
e9:f2:c3:f4:2d:23:10:1d:d7:35:34:ee:95:af:c6:
0a:50:82:4d:b8:bd:4c:00:ed:09:9b:d2:e8:92:e4:
81:50:27:60:24:c8:7c:b0:3a:69:68:49:18:1d:b3:
5e:15:36:fb:50:80:35:0f:ad:e1:fa:0b:94:93:06:
36:27:e4:f1:95:73:de:ca:a5:58:de:db:1a:22:19:
61:d6:d8:c5:04:b1:39:8b:0a:50:db:22:26:5b:4a:
60:0f:14:1c:6f:4f:5e:06:d7:13:e0:eb:cc:59:ac:
d3:f1:be:7f:9e:50:e6:88:96:83:2f:a4:8d:54:b6:
f9:68:ad:b2:2c:21:19:59:6e:92:2d:97:13:8c:12:
88:52:2b:1a:0f:dd:ac:8e:90:10:fd:6e:09:bf:2e:
9e:02:ed:4b:82:0b:b1:d9:e3:7f:7a:1c:4c:ac:89:
bf:76:e7:f5:3a:41:c3:aa:7f:07:4e:7e:41:54:b4:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:AD:7F:6B:2F:93:5C:09:38:C7:2C:20:90:04:2C:87:C0:80:0D
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:56:65:16:ca:4b:d7:98:51:11:dd:22:16:cc:39:41:fa:
94:56:1b:c8:08:ff:11:e7:ff:a1:c7:4f:4e:86:8b:a5:e3:00:
fe:fd:78:12:79:94:39:6b:85:7b:0d:29:d3:46:66:1b:86:57:
7d:aa:f5:83:23:4e:70:3d:5f:b7:83:0f:1f:38:86:85:0e:05:
d3:3f:08:cf:d3:3f:be:8d:5d:ff:2f:93:41:ba:16:b1:66:1d:
df:b5:f4:4b:31:e6:d6:8d:22:40:ac:46:4e:93:a2:fa:86:b8:
a2:61:99:c2:a7:2d:f5:93:10:00:02:d4:2d:b9:7f:61:e6:52:
d9:08:8b:66:32:68:bf:bc:36:d9:18:b2:01:5c:05:2c:04:e2:
fd:40:ae:79:b3:58:52:3f:b9:79:93:ff:b9:e6:35:ac:e2:01:
7b:a4:21:56:b1:5a:24:f3:d6:9e:a6:7f:24:62:ab:be:8b:f6:
7d:35:e9:e1:0a:58:c2:8e:54:b9:18:0a:ee:f6:9c:35:69:f4:
69:cf:bc:3e:a9:cc:fb:89:08:76:50:12:9a:c8:3b:04:8e:2a:
43:cd:9f:17:40:94:d6:28:c5:85:b7:b0:32:bd:68:e3:02:4c:
d0:0b:8b:90:5b:b6:e5:b8:f0:ce:bc:3e:54:67:12:f4:a4:53:
49:52:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:44 2025 by rpki-client