Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: nyMEKRMc66qF5Bx55i68OnYNwxfovGl5RWOTfjkjFiw=
Subject key identifier: 8B:BF:83:3B:9A:F0:72:85:7E:A3:56:18:83:4C:E3:B0:3B:7B:EE:12
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 01977B6771F152DCEEE8BD0F7A76E8E33F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 01:01:06 +0000
Manifest this update: Tue 17 Jun 2025 01:01:06 +0000
Manifest next update: Wed 18 Jun 2025 01:01:06 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: wkV8haKwtcsED3jbGY07VggbGkN8DyKe4+PFfnULtVQ=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:71:f1:52:dc:ee:e8:bd:0f:7a:76:e8:e3:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Jun 17 01:01:06 2025 GMT
Not After : Jun 18 01:01:06 2025 GMT
Subject: CN=8bbf833b9af072857ea35618834ce3b03b7bee12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:12:49:f2:15:ba:cf:cb:63:a1:85:a1:88:
73:89:12:5c:1e:72:14:b2:dc:20:01:6e:49:d2:d3:
30:53:55:c4:41:2c:73:f1:e3:2d:50:3c:b0:a5:05:
fd:a8:61:4e:bb:9c:e5:85:da:47:e4:9a:65:56:47:
c3:49:6c:96:4e:5e:72:65:ab:63:70:b7:81:e1:29:
5c:77:5b:c1:92:5b:5a:fc:d4:e8:89:40:73:6f:5f:
96:1c:22:11:8b:7b:21:e4:73:ae:20:a9:cc:c7:9c:
1d:77:63:33:60:85:12:6f:1f:63:6b:bc:ae:ab:5c:
34:b6:5a:e2:5b:a0:cd:1f:31:00:cd:9f:5a:87:e7:
d2:b0:fc:08:6f:62:ef:b0:f3:41:f9:43:58:62:b0:
7c:94:35:78:46:77:26:26:77:fc:e8:31:6f:3c:48:
42:26:63:9c:bb:84:47:d4:3b:ff:d1:05:7a:3c:d6:
0d:56:83:dc:5e:56:94:0f:88:ad:9f:8d:fd:d7:82:
db:97:99:72:6e:cc:af:8c:c9:68:60:e7:78:5b:51:
35:e4:e6:5d:b8:ad:b2:11:a7:e1:a3:75:40:de:ba:
c2:df:d6:85:d1:92:bf:cb:6c:a2:a6:25:de:33:53:
4f:6e:d0:74:08:e8:27:fb:e4:7c:0c:ae:c3:da:27:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:83:3B:9A:F0:72:85:7E:A3:56:18:83:4C:E3:B0:3B:7B:EE:12
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0c:61:d5:a7:46:37:62:7d:34:24:aa:81:37:a5:1d:3a:76:
52:e6:ca:d2:03:95:a2:ce:da:2e:91:3e:38:f7:3c:4f:94:2e:
e5:c6:d7:c7:f2:14:33:cf:24:bb:de:66:10:7a:09:fa:8e:98:
46:97:3b:77:08:27:32:27:c1:27:5a:b2:da:43:17:86:09:33:
d7:04:c9:a7:ad:34:72:4f:28:a7:18:44:1c:8a:97:52:1d:0e:
9d:f5:84:df:ac:a3:83:7b:27:e8:0f:26:c0:87:46:22:a8:a2:
d7:b9:9a:32:cb:4b:ba:83:3d:b7:77:fd:eb:4c:0f:97:50:8e:
a6:e6:25:b1:cc:5b:37:d7:82:1b:b4:d4:00:d7:b4:d7:22:9e:
3b:c9:1a:df:47:9e:0e:6e:bb:6a:49:7e:90:3b:6c:e8:3b:f8:
ca:5e:c5:19:d9:52:11:3f:76:b0:06:25:00:4f:c3:62:7f:4f:
57:71:8d:da:12:a5:a4:24:90:f0:1e:43:5b:0d:65:77:ef:a8:
d6:20:1f:cd:ea:ac:fe:56:9e:47:16:67:ad:b1:c0:2c:ce:62:
9b:26:c6:7a:c3:17:c4:cc:51:d7:06:7d:dd:8f:41:fb:98:c0:
da:90:aa:f8:1f:8c:0c:0d:a7:4a:a0:e0:b9:00:87:94:0d:11:
59:c8:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:22:07 2025 by rpki-client