Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier: dZz0X3aLC+CXomCgaRYXz0tjf60JfNrOzpvfwyydxzI=
Subject key identifier: CB:7E:CC:B5:20:EE:70:45:6E:D2:2F:46:3B:70:45:BF:96:35:C2:AD
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 019A52D1FB43B1E71FF8B67B1B5E87C5523A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=)
2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: UuJhVyOxvWUYrMpPIwytsXzoabGjVa4Oo51Il5/qJZg=)
3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=)
4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=)
5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=)
6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=)
7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fb:43:b1:e7:1f:f8:b6:7b:1b:5e:87:c5:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=cb7eccb520ee70456ed22f463b7045bf9635c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:c8:2f:69:e0:c6:83:85:1f:04:7d:52:91:
52:3b:4f:1d:c2:70:8d:0f:43:69:9f:1b:a4:ea:3e:
79:e6:c9:13:0d:b0:7d:ed:b4:c4:7d:80:88:d2:66:
53:35:01:0c:30:bf:35:4a:6e:8f:21:b1:35:8f:ac:
03:cb:a0:91:42:3a:3e:32:7f:46:84:42:cb:26:54:
fe:fe:c1:c3:51:24:93:f6:6e:09:da:f3:07:6e:97:
66:4b:2a:12:d4:29:ab:da:a6:79:95:a4:5c:8d:62:
46:60:0b:f6:1c:8f:aa:67:e5:fc:ab:57:6d:99:1e:
b9:bf:bc:1a:8d:ce:13:85:42:b0:65:e7:67:bf:2f:
29:96:31:53:ab:66:6d:42:b4:15:62:d1:ef:be:65:
49:e0:1d:7c:37:a2:2d:e7:82:c6:a5:09:4b:97:95:
61:3d:bf:ef:31:14:b3:e7:a2:82:1c:23:cc:dd:fe:
ae:df:c2:55:05:75:8b:db:75:ea:f7:e4:96:ca:e0:
cf:4e:cc:1a:e2:0f:f5:03:e2:4e:67:72:4b:ac:f5:
fe:6e:fd:95:2a:53:dc:f3:9a:ea:29:43:0f:f0:81:
c5:e1:19:87:94:30:15:81:e7:5f:60:5e:87:78:4f:
23:29:67:ec:2f:4f:55:98:33:52:07:f5:77:7f:94:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:CC:B5:20:EE:70:45:6E:D2:2F:46:3B:70:45:BF:96:35:C2:AD
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:d4:f2:36:ca:d6:80:3b:ce:a8:b2:f0:79:79:f9:ae:e0:
d4:ef:19:26:7d:f8:bb:5a:58:a1:19:fd:bc:64:1d:fa:84:81:
91:88:3b:3d:c0:5b:73:b9:85:14:64:14:c0:f7:e8:1f:ab:33:
b5:95:ea:cf:f7:45:c4:d4:a4:2a:fa:00:c0:56:3e:e6:6a:41:
06:e8:66:c2:55:7c:c3:18:c4:25:7d:79:2f:24:51:41:39:9d:
f4:be:e2:38:17:e4:90:44:1d:34:1a:52:34:bf:8c:d3:38:65:
99:f3:48:fa:1b:e5:f5:4d:88:4e:cd:96:8f:b8:ac:3a:c4:15:
77:3b:fe:b5:ce:01:a6:9e:5b:7c:24:f4:7e:88:b7:09:50:09:
97:d6:54:34:3b:0b:b3:47:23:09:0b:91:5e:90:cc:69:8b:12:
e2:60:f4:13:03:64:81:5b:43:77:ae:63:b5:9c:13:b7:94:6c:
25:f4:d2:6c:80:3d:be:d4:a2:1a:e8:48:3e:ac:64:b4:b3:02:
8c:3d:91:68:61:18:78:4c:b3:f3:1f:15:e9:1f:1f:53:35:c4:
10:00:8f:e9:6e:28:dc:96:d6:48:74:8c:17:75:69:3e:27:de:
0f:ad:24:c7:2e:03:28:c3:5e:de:66:50:58:92:45:88:f1:e3:
2e:44:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:14 2025 by rpki-client