Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: p6C6ukcSsOg7HDrs6ECjiC5gYjDMTDMFgW0ZVAN+Tzc=
Subject key identifier: 83:CE:50:1D:F3:C6:ED:0D:18:82:F4:01:5A:AE:DC:42:DF:D3:99:EE
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 019A4EF415C5E8765C4AB4D12917F4FF2D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: 5dJlijto5ExCVnf0Rj56GFlbzCq8bIdSl7V+LgHnvDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:15:c5:e8:76:5c:4a:b4:d1:29:17:f4:ff:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=83ce501df3c6ed0d1882f4015aaedc42dfd399ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:77:07:f0:03:79:db:1c:5d:ca:bc:47:a2:
7d:ba:a0:24:fa:cd:61:b9:6d:3d:f3:60:10:64:4b:
df:d4:4f:e0:96:07:09:4e:0b:e1:d7:25:32:a1:11:
8e:90:01:f4:1a:d7:e5:b0:f9:d2:79:af:4b:b2:77:
fb:f3:2f:f4:b7:79:f7:b3:ae:78:7a:a9:90:bb:a9:
25:eb:d5:73:4f:0e:ad:39:0f:33:04:6c:fd:b6:43:
49:65:28:00:8a:1f:7e:59:65:4a:77:4f:b4:22:a7:
8e:b8:5a:a4:c4:42:76:cf:35:d3:66:72:c6:21:2c:
fa:99:61:e0:f4:87:7a:21:9b:7b:54:89:ca:0c:de:
38:7f:0c:91:d1:54:6f:6c:1b:1e:c6:a9:4e:0a:ee:
84:00:e0:a3:51:a4:77:cf:27:b9:af:cd:88:00:e1:
ba:84:4d:cb:28:c6:96:e5:cf:03:ee:c9:8a:67:e1:
d1:d9:52:91:f2:eb:56:17:de:66:b7:35:9b:e2:30:
11:f3:c8:07:98:3f:c6:ca:92:b1:bc:6f:5b:16:5b:
37:7b:66:ef:21:2f:57:b9:c0:61:4e:3f:e8:25:c9:
12:60:fe:54:0b:94:11:23:ed:c0:d9:ab:f4:8d:db:
e0:42:80:a9:8c:13:5a:c7:ff:b7:b1:98:23:77:1d:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:50:1D:F3:C6:ED:0D:18:82:F4:01:5A:AE:DC:42:DF:D3:99:EE
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ca:b9:50:f6:96:4a:bb:f2:e6:d8:a5:26:99:89:c7:74:93:
4f:c5:30:1c:3a:e9:00:fe:3c:f9:88:74:b7:7e:61:32:fc:ab:
0e:e8:19:0f:c3:ab:4a:bb:dc:31:25:36:1a:92:69:6e:18:5f:
4d:61:01:68:30:e7:94:bf:ce:e8:7e:c0:f5:1d:2f:d6:04:3e:
de:cb:39:34:73:56:6b:ea:cb:b6:87:1d:16:91:50:59:72:95:
1a:be:22:e5:53:04:34:9a:62:02:ed:4c:f0:63:93:c0:f1:74:
6d:6a:ed:41:33:ff:eb:f9:06:e1:9e:1f:22:a8:6a:2e:65:b5:
58:7a:cd:0c:5f:e8:1f:d0:8f:db:68:ae:76:21:60:f4:f6:1f:
c8:72:93:04:95:ef:92:2e:fa:3a:9b:09:a2:a9:a6:ca:cf:69:
f6:1f:d6:9e:84:a0:4e:28:6c:39:27:5c:74:c4:27:bd:16:55:
7a:f5:e9:23:40:a3:cc:bb:a3:62:d0:9d:db:48:ee:00:aa:7b:
ff:a0:28:11:0a:5b:cb:fe:dc:38:a5:b3:1f:36:7c:24:98:ec:
08:53:47:55:e6:1c:c6:81:20:ed:d3:0b:9f:d2:c8:fd:9a:21:
aa:c3:e9:43:95:0d:c5:ba:e3:45:ad:a9:d1:4e:22:ec:b8:a8:
d4:88:9b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BXF6HZcSrTRKRf0/y1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTFhNDgxMTE0OGY3ZDA1OThmNWZmMDIxZGFkZDNhMTBl
NWYyOWMwHhcNMjUxMTA0MTMwMDEwWhcNMjUxMTA1MTMwMDEwWjAzMTEwLwYDVQQD
Eyg4M2NlNTAxZGYzYzZlZDBkMTg4MmY0MDE1YWFlZGM0MmRmZDM5OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNV3B/ADedscXcq8R6J9uqAk+s1h
uW0982AQZEvf1E/glgcJTgvh1yUyoRGOkAH0GtflsPnSea9Lsnf78y/0t3n3s654
eqmQu6kl69VzTw6tOQ8zBGz9tkNJZSgAih9+WWVKd0+0IqeOuFqkxEJ2zzXTZnLG
ISz6mWHg9Id6IZt7VInKDN44fwyR0VRvbBsexqlOCu6EAOCjUaR3zye5r82IAOG6
hE3LKMaW5c8D7smKZ+HR2VKR8utWF95mtzWb4jAR88gHmD/GypKxvG9bFls3e2bv
IS9XucBhTj/oJckSYP5UC5QRI+3A2av0jdvgQoCpjBNax/+3sZgjdx1EfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPOUB3zxu0NGIL0AVqu3ELf05nuMB8GA1UdIwQY
MBaAFBFRpIERSPfQWY9f8CHa3ToQ5fKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZHa2dSRkk5OUJaajFfd0lkcmRPaERsOHB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZDBkYWUtZDJiYy00OWQxLTgxMTUt
MzRjYjlkNWM5NDMyLzEvRVZHa2dSRkk5OUJaajFfd0lkcmRPaERsOHB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZDBkYWUtZDJiYy00OWQxLTgxMTUtMzRjYjlkNWM5NDMy
LzEvRVZHa2dSRkk5OUJaajFfd0lkcmRPaERsOHB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8q5UPaW
Srvy5tilJpmJx3STT8UwHDrpAP48+Yh0t35hMvyrDugZD8OrSrvcMSU2GpJpbhhf
TWEBaDDnlL/O6H7A9R0v1gQ+3ss5NHNWa+rLtocdFpFQWXKVGr4i5VMENJpiAu1M
8GOTwPF0bWrtQTP/6/kG4Z4fIqhqLmW1WHrNDF/oH9CP22iudiFg9PYfyHKTBJXv
ki76OpsJoqmmys9p9h/WnoSgTihsOSdcdMQnvRZVevXpI0CjzLujYtCd20juAKp7
/6AoEQpby/7cOKWzHzZ8JJjsCFNHVeYcxoEg7dMLn9LI/ZohqsPpQ5UNxbrjRa2p
0U4i7Lio1Iib9g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:45 2025 by rpki-client