Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: PJGilPNlEDQEk8tDKRYOpZrxh93Yn997rtJUQFd+YjI=
Subject key identifier: EE:D2:C0:A3:A4:DF:B5:28:EE:76:43:D1:BB:51:62:38:82:22:63:12
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 0199FDD9B13220E1475F5F4839303B506A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 041E
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: vslPv/okW7o4k+TW1HT36gRgdd29oDmOOdGsoozs7OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b1:32:20:e1:47:5f:5f:48:39:30:3b:50:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=eed2c0a3a4dfb528ee7643d1bb51623882226312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:ab:df:b0:ff:0e:2c:1e:b4:4b:78:11:9d:
fa:2a:d7:c7:35:61:ac:48:eb:de:5f:64:05:45:ef:
9a:e0:97:51:de:60:7f:b1:3b:d6:77:05:16:e5:74:
70:57:4d:a3:54:9c:59:39:75:67:19:5e:93:fb:f5:
a8:3d:6d:46:32:4f:6d:79:2f:35:6b:82:c3:b3:91:
52:44:71:d7:54:fe:a8:65:2f:ac:69:f1:e4:e9:c4:
38:55:52:27:d3:e5:be:bc:e8:72:30:8f:35:ec:8a:
84:b9:77:b6:92:66:3f:4d:f4:6a:69:55:17:eb:f8:
6d:d7:22:9b:67:c8:fb:5f:03:74:20:23:f9:a4:83:
f8:a8:50:51:f9:d9:fa:c7:b0:af:90:f0:95:1b:4d:
23:92:db:4f:f0:18:bf:4c:f9:6f:97:07:25:90:9e:
07:6b:43:07:49:99:39:2a:1f:87:fb:3f:a3:f2:10:
16:ce:49:c3:b1:c1:72:d8:00:a7:92:f8:96:02:af:
02:24:8b:92:77:57:5f:03:35:35:38:97:63:d9:df:
34:7e:7e:58:fb:dc:c0:ad:82:0c:a4:29:af:21:c6:
b7:9f:d8:c6:66:ed:44:ba:01:66:6a:43:4a:3d:4b:
db:55:da:e6:01:86:37:3a:1a:fd:12:5e:82:94:e2:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:C0:A3:A4:DF:B5:28:EE:76:43:D1:BB:51:62:38:82:22:63:12
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1a:8c:19:a4:a1:00:b1:ed:d2:96:dd:78:db:c0:3a:3c:61:
c7:7c:cb:46:70:a7:81:ac:98:95:c5:38:f7:4e:b3:a5:d8:b4:
fa:8c:ff:08:e1:fb:d0:ee:fe:76:bf:b6:ba:09:70:42:de:77:
ca:68:d2:7c:c8:3f:6d:9d:22:17:17:aa:54:ea:e5:20:5f:26:
34:00:f6:74:9d:59:dd:e7:d5:43:ff:bd:53:e5:05:b5:01:a5:
74:94:37:93:a7:5c:9e:23:92:96:af:e6:44:0b:f3:6f:b8:1b:
16:7b:d1:db:57:bf:51:f9:ce:9e:fa:87:de:69:bb:f9:c9:35:
1c:9a:fe:f5:18:03:b0:06:5c:ab:87:ec:76:8e:0b:95:bb:4f:
3f:16:bc:37:29:09:5e:24:f9:73:28:42:99:76:47:de:50:90:
59:5d:da:3d:f3:1d:ab:ed:71:38:5f:fb:6e:c6:0d:22:27:ca:
79:8a:05:2e:ce:c5:19:2f:8f:df:b2:fd:05:c3:d0:1a:73:c3:
f1:cf:3f:76:0a:54:d0:1e:b8:ec:17:09:5b:eb:a9:71:1e:22:
a6:5d:49:e5:c2:15:2c:fb:4f:01:d7:17:b6:d4:1b:83:62:8c:
33:96:03:a3:5d:6b:5b:79:7c:a2:52:28:8b:39:c1:2c:bb:71:
00:49:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:53 2025 by rpki-client