Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: /X46lMyTt9hDPH9299sCjemBdVVR9ubXYtbP2JNh2kI=
Subject key identifier: 9B:1F:B2:FA:1C:42:52:26:EF:5A:D4:43:2B:FC:E4:CB:B7:88:54:5D
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 0198D661874D4AABC1866D0C89F8815E6D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0385
Signing time: Sat 23 Aug 2025 10:02:52 +0000
Manifest this update: Sat 23 Aug 2025 10:02:52 +0000
Manifest next update: Sun 24 Aug 2025 10:02:52 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: 21ZrYROZso2V7ARFuonypeSDUB8Ec7N/cg2ARBXrx14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:87:4d:4a:ab:c1:86:6d:0c:89:f8:81:5e:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Aug 23 10:02:52 2025 GMT
Not After : Aug 24 10:02:52 2025 GMT
Subject: CN=9b1fb2fa1c425226ef5ad4432bfce4cbb788545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:a6:c0:05:e5:41:3e:41:93:a4:04:5a:d6:
10:1d:5b:81:a4:89:1d:60:fe:11:6b:fa:c8:78:b7:
c3:45:1f:35:ef:c7:84:39:e6:2e:3c:94:16:71:34:
cc:28:e1:79:d6:73:3d:d6:e4:4c:d0:79:4d:eb:c9:
23:04:33:72:5c:24:94:df:fe:1c:c4:3a:a5:5d:28:
df:92:20:81:c2:6a:a9:0e:35:e0:cc:3e:23:d3:af:
3a:5b:57:10:bc:72:65:36:87:f0:2c:2f:86:86:6e:
df:c4:76:17:6b:20:06:95:81:b6:fc:cd:12:28:44:
ae:aa:b6:17:ae:46:2a:38:2d:88:db:45:ac:4e:64:
e7:da:1f:6c:5b:ef:74:dd:34:7d:61:e3:fa:c3:72:
48:d1:4e:78:85:79:0c:7f:26:be:7b:d8:f0:63:33:
b7:99:f8:41:83:6f:12:18:f6:1e:41:e9:7a:cc:57:
8b:b2:22:87:5f:9f:05:72:66:ca:a4:20:a7:82:06:
7b:f0:b8:e8:19:65:9d:0a:eb:0a:b5:a7:0a:8c:3f:
2f:d0:b7:2f:d7:03:3d:0c:0b:ec:99:08:0a:70:e8:
3a:09:5f:c4:9d:44:f8:66:a3:f6:c8:aa:c7:10:e4:
ec:48:38:54:c2:b7:18:01:8a:4d:1a:c0:e1:46:39:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:B2:FA:1C:42:52:26:EF:5A:D4:43:2B:FC:E4:CB:B7:88:54:5D
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:26:9a:4f:ff:c5:92:75:5c:07:38:b9:20:a3:6a:e5:32:
fd:94:71:eb:2a:f3:9d:77:25:25:b6:4b:4d:c2:b2:21:e0:d8:
10:db:81:11:df:44:ae:34:81:9e:e9:d3:4d:1b:22:c3:5f:2f:
55:35:e3:15:83:62:05:cc:ba:fc:58:56:ac:5a:43:45:a7:f1:
3a:f2:66:3d:3d:1d:f1:23:e8:e2:5b:d0:49:d1:be:5b:2e:20:
eb:f1:e6:e5:99:4c:bb:31:da:32:6b:da:47:59:38:8c:c4:ba:
28:23:ba:7d:41:c8:7c:ea:18:5b:62:73:75:ce:e8:37:2c:2d:
95:68:b2:8e:2d:ab:73:e8:b4:88:ee:84:51:4f:f7:10:77:19:
ba:50:77:aa:c8:de:b1:8e:76:6d:60:33:c5:67:95:0a:1a:71:
de:ad:2e:fe:83:d4:a1:4b:66:90:85:04:9e:91:1e:9e:8f:ed:
d5:20:b8:c4:1c:87:28:40:88:b5:d1:af:21:5b:73:37:53:45:
52:24:58:6d:15:7a:1d:77:08:9c:58:5d:70:4c:7b:ff:47:3d:
49:65:bc:9f:fe:74:6f:0e:d9:1a:69:93:d1:76:6a:69:fd:a8:
c8:2c:a2:3b:b9:93:54:31:95:a9:39:8c:0e:25:22:a2:9c:bc:
52:84:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:49 2025 by rpki-client