Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: MN2S45IPBgGADWI875GTKS6KLTdzSaEp4hyR425j/YI=
Subject key identifier: A4:23:48:D5:9B:7A:22:80:73:4C:68:57:F7:60:FC:65:A7:2C:62:14
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 0197B70EB3BA1DC71299FCFB84D1DDDE68EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 0FAD
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: vfRmJkQekAE5zPKQlfJzAdx32ZL83CDQpKL+nVyKQg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:ba:1d:c7:12:99:fc:fb:84:d1:dd:de:68:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=a42348d59b7a2280734c6857f760fc65a72c6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:e1:a5:44:8d:9a:bc:1c:48:63:40:c2:04:
89:76:a1:3c:32:47:3b:94:d2:8c:27:97:15:9b:6c:
a0:9e:b7:03:c7:cc:62:87:9e:0d:59:16:cb:0e:64:
a9:aa:4b:f2:53:41:85:85:57:4a:37:66:26:0e:a8:
ed:71:61:97:c3:1d:02:54:86:8d:13:80:6f:21:ec:
12:0c:25:5a:88:ea:2c:14:f6:2d:10:11:c6:7c:2f:
30:4e:a6:01:77:81:19:fc:fb:f4:00:c5:31:cb:c5:
9f:bf:e2:1f:b6:59:d0:04:cd:79:50:66:0b:27:a2:
03:c3:ad:88:5c:a3:f0:64:6f:ac:74:d0:f4:b9:77:
af:1c:f4:2f:55:c7:a7:63:bf:f6:56:f8:3b:27:24:
34:08:ad:34:a4:27:3a:db:00:13:f4:fc:49:8f:9f:
62:35:ed:87:18:a0:8e:72:f4:da:af:b3:72:fc:80:
b2:7e:f8:a1:23:ec:de:2b:cb:3c:9b:d9:01:3b:4f:
cb:62:23:b1:c3:63:aa:7d:3e:a1:5e:07:cc:44:58:
7d:ae:46:f3:aa:5f:3f:40:b1:00:26:13:1e:4a:f6:
83:b4:23:e2:3e:2a:82:3a:5e:a7:cd:73:c0:43:43:
a2:61:35:9b:53:a9:21:34:71:39:c1:a8:65:b5:7b:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:23:48:D5:9B:7A:22:80:73:4C:68:57:F7:60:FC:65:A7:2C:62:14
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:31:2e:5e:15:b3:e1:ef:8d:a0:6c:db:8a:3f:ba:e1:7d:
cf:f3:df:45:e9:32:72:85:49:e3:fb:a7:f4:35:98:69:57:52:
c2:21:46:d4:7e:62:f1:62:a9:e7:be:ab:f8:cd:57:18:0f:bb:
28:3c:d4:af:75:90:91:1a:9f:b9:44:16:b8:28:d9:ab:3b:b2:
23:a1:91:19:0e:d0:44:02:dc:56:a5:83:7d:83:23:b9:f7:6d:
20:0e:3d:73:ec:e5:8a:4a:fe:d1:b0:b1:ad:e7:1a:85:62:f8:
d7:8f:7f:9d:58:b8:60:f3:ae:06:1e:71:c0:6d:49:f8:ee:e7:
03:b9:cb:01:7f:8a:ba:42:03:30:ea:c8:5b:e8:3e:ac:ab:ad:
61:b6:60:f4:13:c5:1b:50:23:73:2d:f7:65:8e:70:21:65:44:
76:c6:b5:f4:9f:6e:c8:80:ba:da:f6:cd:3f:97:1c:68:da:09:
32:39:28:25:6a:a0:a0:1b:4e:fa:04:40:40:1e:8d:ca:27:29:
85:4b:5e:20:42:b0:35:b9:f7:c1:a1:2e:b5:76:6d:e6:c6:f5:
02:03:24:23:52:78:b7:67:69:6d:70:13:08:1f:54:5b:a6:fb:
04:a0:fc:ef:cd:f7:5c:eb:61:48:88:3c:76:d7:0d:08:40:5b:
30:f2:7e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrO6HccSmfz7hNHd3mjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTViMTZmYTlkYjdiY2VlY2NiODlkMWZlMjUyNjMyYzA5
NzI1MTQwHhcNMjUwNjI4MTUwMTIzWhcNMjUwNjI5MTUwMTIzWjAzMTEwLwYDVQQD
EyhhNDIzNDhkNTliN2EyMjgwNzM0YzY4NTdmNzYwZmM2NWE3MmM2MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYLhpUSNmrwcSGNAwgSJdqE8Mkc7
lNKMJ5cVm2ygnrcDx8xih54NWRbLDmSpqkvyU0GFhVdKN2YmDqjtcWGXwx0CVIaN
E4BvIewSDCVaiOosFPYtEBHGfC8wTqYBd4EZ/Pv0AMUxy8Wfv+IftlnQBM15UGYL
J6IDw62IXKPwZG+sdND0uXevHPQvVcenY7/2Vvg7JyQ0CK00pCc62wAT9PxJj59i
Ne2HGKCOcvTar7Ny/ICyfvihI+zeK8s8m9kBO0/LYiOxw2OqfT6hXgfMRFh9rkbz
ql8/QLEAJhMeSvaDtCPiPiqCOl6nzXPAQ0OiYTWbU6khNHE5wahltXtr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQjSNWbeiKAc0xoV/dg/GWnLGIUMB8GA1UdIwQY
MBaAFBFVsW+p23vO7MuJ0f4lJjLAlyUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTZjZDQtMWJiMy00YzEyLTk2YTAt
MjgzZjQ0MjQwYjY3LzEvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOTZjZDQtMWJiMy00YzEyLTk2YTAtMjgzZjQ0MjQwYjY3
LzEvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtExLl4V
s+HvjaBs24o/uuF9z/PfRekycoVJ4/un9DWYaVdSwiFG1H5i8WKp576r+M1XGA+7
KDzUr3WQkRqfuUQWuCjZqzuyI6GRGQ7QRALcVqWDfYMjufdtIA49c+zlikr+0bCx
recahWL4149/nVi4YPOuBh5xwG1J+O7nA7nLAX+KukIDMOrIW+g+rKutYbZg9BPF
G1Ajcy33ZY5wIWVEdsa19J9uyIC62vbNP5ccaNoJMjkoJWqgoBtO+gRAQB6Nyicp
hUteIEKwNbn3waEutXZt5sb1AgMkI1J4t2dpbXATCB9UW6b7BKD87833XOthSIg8
dtcNCEBbMPJ+4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:12 2025 by rpki-client