Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: lDDlyN57WhPgtwrwYGIdnG4X4l08+Veta9KDUvDzY7c=
Subject key identifier: 39:EA:A8:D4:BE:79:F4:95:09:77:9F:82:62:01:97:58:0B:F0:5D:4A
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 0197B88E9E9B8C42AA94B45AF53D08CB20EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 0889
Signing time: Sat 28 Jun 2025 22:00:43 +0000
Manifest this update: Sat 28 Jun 2025 22:00:43 +0000
Manifest next update: Sun 29 Jun 2025 22:00:43 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: 5fNQir0BFkp3StQegN3ot+LLMThjv79eE5Aef8Rd5vM=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:9e:9b:8c:42:aa:94:b4:5a:f5:3d:08:cb:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Jun 28 22:00:43 2025 GMT
Not After : Jun 29 22:00:43 2025 GMT
Subject: CN=39eaa8d4be79f49509779f82620197580bf05d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:6c:2d:0c:d0:90:76:98:7e:2d:9e:cf:92:
5d:1d:5b:1c:14:1c:af:3c:2c:13:ff:a3:1e:ad:4d:
5d:55:ad:99:eb:f5:23:8a:ca:4a:11:16:40:2b:4b:
34:d6:24:31:3b:40:c2:af:dc:32:5a:24:23:16:85:
e7:f8:7a:91:4a:29:5b:79:e3:d9:1c:2e:f3:97:9f:
91:68:b9:d7:17:fb:6e:76:93:ae:38:b9:83:90:c0:
2c:be:6b:a9:2f:06:95:e1:42:6b:f6:7d:4c:6e:ad:
ae:84:83:89:1b:55:07:f3:fa:2a:f9:97:72:aa:ea:
ec:5c:7e:ca:c7:1a:8f:b9:c5:6d:9f:a4:2e:39:71:
ff:44:5b:ba:3f:1c:46:bd:a6:90:2e:16:fa:08:a7:
87:8c:fd:0b:8d:85:4d:26:c5:7d:d9:e1:40:90:1d:
80:0b:0f:d6:12:33:ec:26:9f:ae:53:a9:ca:cb:ad:
a6:57:24:5e:cb:b5:0b:62:c9:8a:05:f0:3b:65:b8:
81:78:92:d0:30:07:d6:6b:d3:13:6e:48:ce:7a:25:
56:f6:81:ba:3e:4e:5c:6a:ec:9f:5d:f1:3f:66:5f:
31:45:8c:6c:37:aa:e5:62:98:70:44:f8:49:98:ba:
8f:b6:10:f5:18:f9:9b:08:4a:86:91:5a:46:68:6a:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:A8:D4:BE:79:F4:95:09:77:9F:82:62:01:97:58:0B:F0:5D:4A
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6c:bc:9d:c4:76:bb:22:65:c9:4d:1d:a1:ba:31:7f:88:ae:
fe:50:75:8f:06:8b:57:fb:78:ad:85:8d:b5:cd:86:29:2a:08:
ee:32:4d:b4:ad:89:b8:ec:bf:07:49:f8:5f:7c:86:0b:f2:03:
46:11:9b:cd:1b:41:aa:18:51:33:01:b2:f4:04:42:40:8e:2c:
45:b6:45:30:9c:61:c5:7f:e1:84:36:28:f8:81:63:91:9c:ed:
a3:73:23:05:21:84:0c:6d:39:ba:f8:07:ad:b0:bd:88:e0:96:
cb:e6:89:d5:49:80:2e:12:7d:ec:ef:69:33:3b:29:54:75:fc:
27:ae:c2:ee:d5:85:e7:39:ae:8b:59:e9:bc:2e:d7:e4:97:5a:
e6:74:90:41:15:72:1b:32:f7:38:99:9a:16:4a:3f:b7:c6:cf:
64:df:3a:42:11:63:0b:21:02:6b:04:92:3a:b3:a7:ca:6b:50:
c9:a3:1b:d9:fe:76:2a:98:02:59:b2:c3:ec:ac:30:f4:be:b8:
58:df:23:de:d6:10:c4:f7:ef:ea:e5:ab:df:0f:ff:10:95:d9:
65:70:00:40:da:d5:f9:e6:91:bb:89:75:78:c3:e0:be:9a:cd:
35:8e:58:e8:ff:86:28:f9:ce:3e:b1:8c:d3:56:b0:a3:eb:e4:
7b:1a:52:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jp6bjEKqlLRa9T0IyyDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmFkZmUyOTFkZWZjNTZmOTQ3OWUyZTdkMjFiNTM5N2Nm
YTJiNjQwHhcNMjUwNjI4MjIwMDQzWhcNMjUwNjI5MjIwMDQzWjAzMTEwLwYDVQQD
EygzOWVhYThkNGJlNzlmNDk1MDk3NzlmODI2MjAxOTc1ODBiZjA1ZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/NsLQzQkHaYfi2ez5JdHVscFByv
PCwT/6MerU1dVa2Z6/UjispKERZAK0s01iQxO0DCr9wyWiQjFoXn+HqRSilbeePZ
HC7zl5+RaLnXF/tudpOuOLmDkMAsvmupLwaV4UJr9n1Mbq2uhIOJG1UH8/oq+Zdy
qursXH7KxxqPucVtn6QuOXH/RFu6PxxGvaaQLhb6CKeHjP0LjYVNJsV92eFAkB2A
Cw/WEjPsJp+uU6nKy62mVyRey7ULYsmKBfA7ZbiBeJLQMAfWa9MTbkjOeiVW9oG6
Pk5cauyfXfE/Zl8xRYxsN6rlYphwRPhJmLqPthD1GPmbCEqGkVpGaGoqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnqqNS+efSVCXefgmIBl1gL8F1KMB8GA1UdIwQY
MBaAFBL63+KR3vxW+UeeLn0htTl8+itkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTkt
YTM0NzE3NzQxNTdiLzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTktYTM0NzE3NzQxNTdi
LzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWy8ncR2
uyJlyU0doboxf4iu/lB1jwaLV/t4rYWNtc2GKSoI7jJNtK2JuOy/B0n4X3yGC/ID
RhGbzRtBqhhRMwGy9ARCQI4sRbZFMJxhxX/hhDYo+IFjkZzto3MjBSGEDG05uvgH
rbC9iOCWy+aJ1UmALhJ97O9pMzspVHX8J67C7tWF5zmui1npvC7X5Jda5nSQQRVy
GzL3OJmaFko/t8bPZN86QhFjCyECawSSOrOnymtQyaMb2f52KpgCWbLD7Kww9L64
WN8j3tYQxPfv6uWr3w//EJXZZXAAQNrV+eaRu4l1eMPgvprNNY5Y6P+GKPnOPrGM
01awo+vkexpStw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:58 2025 by rpki-client