Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: 8ElJdQkjb64LVAM0yqE+b/zv17YwM75VDKtWmyGxMOw=
Subject key identifier: 97:31:90:6D:CA:0F:5F:D4:4B:83:62:2C:15:73:29:82:64:FC:B3:37
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 0198D6CD38A07C9AE13CA220ACBEC8265A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 1042
Signing time: Sat 23 Aug 2025 12:00:30 +0000
Manifest this update: Sat 23 Aug 2025 12:00:30 +0000
Manifest next update: Sun 24 Aug 2025 12:00:30 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: p6eGoySYRvEDpDwnjJ1D5OC1341GO23mKId5ortsZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:38:a0:7c:9a:e1:3c:a2:20:ac:be:c8:26:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Aug 23 12:00:30 2025 GMT
Not After : Aug 24 12:00:30 2025 GMT
Subject: CN=9731906dca0f5fd44b83622c1573298264fcb337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:c8:5a:56:df:dc:7a:26:fb:03:99:90:7b:
5e:ed:c3:0b:a5:3e:d2:a5:4f:8b:76:59:0b:18:6a:
03:c6:44:94:5d:16:a1:e4:d9:d4:cc:30:f5:dc:5a:
37:bb:9e:c9:15:98:91:d6:03:35:7f:13:a3:cf:a8:
8c:58:dd:97:fb:c6:d8:93:72:f9:61:b7:4b:6c:01:
62:75:af:80:4c:6d:20:61:fb:95:b1:c7:21:bc:06:
25:81:18:79:ed:fd:95:d4:b1:a4:26:ad:36:31:71:
7d:56:12:40:72:fe:c7:22:25:b0:a8:45:bf:aa:83:
da:8e:db:c9:50:b0:3e:63:0f:8e:d0:09:3f:d9:db:
ba:08:84:86:1f:35:0d:7b:d7:20:55:77:a4:b1:c6:
5a:f4:81:a2:8e:0a:d3:eb:51:9d:19:5b:dd:76:b5:
5b:bf:73:c7:ff:be:82:83:0b:6a:a6:2a:06:53:14:
3d:4f:e7:95:04:40:73:9f:cf:e6:97:a3:b4:74:c8:
35:f6:f6:72:e4:5b:ac:a3:5a:f3:87:59:b5:0e:68:
fd:e1:ce:28:0c:5a:11:37:0e:1c:26:74:c2:2c:0b:
23:cf:71:c4:58:d6:d3:63:bd:e6:71:60:33:24:21:
b2:49:61:68:26:8d:3f:62:23:ed:1a:e2:72:f5:ce:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:90:6D:CA:0F:5F:D4:4B:83:62:2C:15:73:29:82:64:FC:B3:37
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3b:7e:d8:53:0d:3b:0c:85:d2:be:a2:a0:50:b2:6f:c2:b2:
90:0b:61:b8:76:d4:19:e3:89:31:20:35:dc:9d:90:c8:c6:c6:
96:7b:e6:b6:0d:b8:c2:d7:6f:e1:22:e7:da:58:04:03:a3:30:
c2:72:22:73:6b:1c:7d:b8:47:99:46:4c:d9:3d:74:1b:91:20:
f3:56:42:c6:47:5f:52:67:1b:3a:44:c1:d8:06:fc:47:0d:59:
60:52:70:4b:8e:4d:8a:9a:18:7c:d9:d0:2f:8f:75:e8:b6:54:
d0:22:fa:2c:8d:30:f9:db:ca:63:22:c4:c3:25:20:f9:0f:c3:
1d:66:b4:c1:b8:0c:5f:06:4a:47:aa:c5:0b:a2:25:97:59:fd:
70:b2:64:cf:a8:1f:33:02:72:f0:e5:15:a5:35:63:25:63:53:
f5:74:73:cf:e2:d8:f8:4f:05:95:72:b8:28:f8:bf:c7:0b:ca:
ed:c3:24:f0:05:8a:42:0e:51:ee:e0:4b:1e:a8:d7:d5:5a:70:
c5:12:c3:f3:62:13:6e:24:ca:35:3b:9e:74:9f:89:7e:81:86:
04:e6:5c:04:e1:a4:73:92:96:a8:06:46:38:06:03:4a:b6:1f:
8c:66:76:23:cf:d2:74:40:17:23:44:1e:b8:41:87:53:54:5a:
fb:53:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:04 2025 by rpki-client