Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File: evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier: Xc38+cohyRZBBAIZlNESR0Ao8ZgceEa8SWNZpxcUJEU=
Subject key identifier: 95:7D:BE:55:D7:27:0F:35:32:00:9A:CD:C4:01:90:AB:4D:56:1D:7D
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer: /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial: 0197C50119C8E600BCCF658F7B2837C4024D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number: 0420
Signing time: Tue 01 Jul 2025 08:01:12 +0000
Manifest this update: Tue 01 Jul 2025 08:01:12 +0000
Manifest next update: Wed 02 Jul 2025 08:01:12 +0000
Files and hashes: 1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: Km9A4YhU0+fcrxgnAltmyLpHK5pU1ZQaMHFsX16Fqqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:19:c8:e6:00:bc:cf:65:8f:7b:28:37:c4:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Validity
Not Before: Jul 1 08:01:12 2025 GMT
Not After : Jul 2 08:01:12 2025 GMT
Subject: CN=957dbe55d7270f3532009acdc40190ab4d561d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:55:5e:e2:50:1e:cd:7e:9f:b7:ed:a7:72:
40:0b:d8:3c:c8:62:31:a4:2a:21:9e:8d:23:bc:cc:
dd:97:68:8e:93:78:e9:fa:bc:56:18:4b:00:94:d9:
23:1a:57:46:3e:f5:e4:b8:c9:15:1c:d1:c6:11:6f:
5c:c3:dd:64:4c:28:cc:57:e6:90:d4:5f:75:4b:a6:
6f:53:ac:e9:1f:fa:81:e1:45:4b:c4:9e:6e:f6:ec:
52:00:a4:68:c8:8b:50:28:f0:da:39:0d:d0:2a:45:
18:ee:5d:dc:c3:1b:89:ff:9a:79:dd:20:00:5f:a8:
9f:33:8a:9a:5c:6d:4d:e4:6f:84:e5:60:2f:95:e1:
27:c8:77:cd:8f:a1:32:e1:5f:66:ee:a1:f9:68:d5:
d6:d1:8f:44:e3:b1:f9:ca:50:fd:70:c4:9d:53:ab:
ba:6c:31:70:d1:59:b9:93:0a:e2:72:54:2a:b2:5b:
37:41:b4:25:61:dc:00:f3:74:c8:98:f2:b0:30:8c:
dd:66:ec:f4:f1:47:c4:96:7c:c5:4d:bf:fe:ad:54:
aa:fb:f5:87:42:b7:b4:d0:30:3a:6c:3a:26:0d:ec:
c5:48:23:24:ff:2c:7f:b2:b0:5c:cf:c7:70:f8:22:
8b:c0:c4:ed:d4:96:8a:db:35:06:2a:41:01:3b:3d:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:BE:55:D7:27:0F:35:32:00:9A:CD:C4:01:90:AB:4D:56:1D:7D
X509v3 Authority Key Identifier:
keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:0c:a3:fb:43:e7:ad:81:58:37:98:25:9a:ce:39:0c:b0:
ff:4a:c9:c3:f5:f4:34:7a:a8:5b:df:90:46:5a:08:14:55:6a:
a7:65:19:df:73:40:90:7f:3a:ab:22:80:96:48:89:69:17:38:
a9:0c:db:62:6f:b6:85:37:22:50:c2:c7:1b:9a:4d:d0:e1:a3:
e5:72:0c:bb:bc:14:96:45:9a:4d:c4:54:de:10:a0:f1:11:17:
03:6b:16:9b:7e:f7:33:3a:56:e2:97:cf:4b:74:d2:aa:dc:53:
11:89:84:63:19:75:78:d6:d1:fd:5b:17:0d:a6:a2:61:06:95:
e6:55:66:1c:f2:d2:bd:f2:32:f9:fa:32:08:ef:09:4d:bc:d9:
fe:5b:6d:62:e6:8a:a0:b2:ec:a9:a3:4c:6a:64:cd:94:c5:11:
d6:98:a4:1a:92:f9:35:7e:d0:b5:36:0b:05:79:8e:4a:74:ae:
15:59:58:46:47:05:f9:3e:ca:cc:ac:5c:c1:a0:e6:1f:30:bd:
04:11:f9:36:05:5a:60:b8:4c:2a:09:9a:c5:b7:92:9c:fc:8b:
2f:6d:99:19:7f:36:a9:cf:2e:f7:23:54:28:ff:7b:5b:37:b1:
5f:fe:2b:5a:c3:87:d2:9f:1c:80:d9:e8:ed:07:5c:c7:28:a4:
2b:5d:63:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFARnI5gC8z2WPeyg3xAJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx
MTBhZTEwHhcNMjUwNzAxMDgwMTEyWhcNMjUwNzAyMDgwMTEyWjAzMTEwLwYDVQQD
Eyg5NTdkYmU1NWQ3MjcwZjM1MzIwMDlhY2RjNDAxOTBhYjRkNTYxZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBVXuJQHs1+n7ftp3JAC9g8yGIx
pCohno0jvMzdl2iOk3jp+rxWGEsAlNkjGldGPvXkuMkVHNHGEW9cw91kTCjMV+aQ
1F91S6ZvU6zpH/qB4UVLxJ5u9uxSAKRoyItQKPDaOQ3QKkUY7l3cwxuJ/5p53SAA
X6ifM4qaXG1N5G+E5WAvleEnyHfNj6Ey4V9m7qH5aNXW0Y9E47H5ylD9cMSdU6u6
bDFw0Vm5kwriclQqsls3QbQlYdwA83TImPKwMIzdZuz08UfElnzFTb/+rVSq+/WH
Qre00DA6bDomDezFSCMk/yx/srBcz8dw+CKLwMTt1JaK2zUGKkEBOz1buQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV9vlXXJw81MgCazcQBkKtNVh19MB8GA1UdIwQY
MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt
NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj
LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDIMo/tD
562BWDeYJZrOOQyw/0rJw/X0NHqoW9+QRloIFFVqp2UZ33NAkH86qyKAlkiJaRc4
qQzbYm+2hTciUMLHG5pN0OGj5XIMu7wUlkWaTcRU3hCg8REXA2sWm373MzpW4pfP
S3TSqtxTEYmEYxl1eNbR/VsXDaaiYQaV5lVmHPLSvfIy+foyCO8JTbzZ/lttYuaK
oLLsqaNMamTNlMUR1pikGpL5NX7QtTYLBXmOSnSuFVlYRkcF+T7KzKxcwaDmHzC9
BBH5NgVaYLhMKgmaxbeSnPyLL22ZGX82qc8u9yNUKP97WzexX/4rWsOH0p8cgNno
7QdcxyikK11j5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:15:06 2025 by rpki-client