Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: Ffa1lpFpxZ9VkuS1n98jUwyBbDbsckAKISjqAPKh9vU=
Subject key identifier: 06:0D:B3:8D:61:A2:2D:A7:00:D8:73:C4:5D:9B:BF:3C:B0:58:81:3E
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 019A4DAB07DDE67CB9C984C4E8281541732C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: sxCj4qZXk+j8aA74nWAQELbMFBhA1QFPKWOVDDsNC6A=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:07:dd:e6:7c:b9:c9:84:c4:e8:28:15:41:73:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=060db38d61a22da700d873c45d9bbf3cb058813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:3d:6e:18:04:99:48:6d:f3:a0:19:cd:8e:
da:82:29:e8:0d:9f:2f:98:32:fe:8e:4c:25:c5:59:
18:63:a2:0e:72:f1:93:c9:91:97:47:8b:c9:c7:01:
99:3f:00:03:5a:ca:0b:b4:12:0d:74:b8:c3:a6:13:
8a:e1:e9:89:d3:bf:f9:d1:06:c1:63:e6:ec:3a:10:
dd:ce:c9:f1:12:c5:c6:6a:b1:48:b1:9e:7c:1f:fe:
89:55:91:85:1b:95:38:92:c4:f9:07:fa:ad:86:fe:
52:8e:cb:15:b8:ab:75:88:75:d1:93:17:54:84:9f:
3a:c2:7a:8f:23:56:80:61:0a:87:36:39:03:9e:29:
96:dc:28:a0:7f:12:41:a2:cb:ff:94:f1:40:59:c6:
6c:82:36:bb:0f:4e:c3:65:3b:83:f6:8a:51:9e:62:
67:8d:83:87:14:11:37:29:e7:95:6f:da:94:fa:18:
36:d9:41:22:ae:2a:d2:b1:81:ca:27:69:6e:7d:1f:
26:e4:12:c6:c3:f4:96:e7:14:f3:12:66:0e:56:6f:
1a:0a:a6:a4:1f:8a:b1:8d:76:a8:ad:44:38:05:a3:
0e:08:7b:24:94:c5:f2:ba:19:49:a8:21:e3:e5:f2:
db:11:66:56:34:23:d1:df:17:9a:d3:73:07:2d:48:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:B3:8D:61:A2:2D:A7:00:D8:73:C4:5D:9B:BF:3C:B0:58:81:3E
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:79:a3:26:ec:37:45:d5:57:17:9b:16:dd:0d:44:5d:c9:
8c:a0:2c:e3:33:58:ab:6d:7f:d1:c6:78:0f:f5:9e:28:fa:07:
0c:78:0b:d1:c0:65:78:6f:ee:96:79:bd:69:b1:d1:5f:ab:f9:
c6:2a:01:69:67:e9:ae:21:75:f6:69:5f:77:92:83:53:30:9b:
f0:fa:7b:d6:29:65:36:34:94:41:76:ee:fd:67:dd:e7:0b:13:
b8:ab:20:f2:6e:75:2c:96:65:38:13:3b:05:6c:b0:78:6a:b5:
61:7c:dd:a3:6c:5d:31:38:43:ea:39:03:51:d8:5b:e0:28:29:
d2:ef:cf:7d:64:a4:d6:2c:a8:bd:e2:6e:35:be:cb:cb:cb:8e:
bf:4e:56:5f:e7:21:e4:cf:c7:50:a1:dd:48:ac:f7:d2:09:9e:
a7:63:36:e3:16:55:b5:bc:3b:03:ae:03:cc:6d:8c:a7:be:ea:
bb:ae:8f:78:25:7e:03:c4:ea:00:be:e5:cd:5a:73:58:4e:01:
4f:4d:ec:e0:c4:62:e4:3d:e9:b2:9a:6d:fa:c0:bd:76:ce:33:
87:17:09:f9:0d:11:5d:76:ee:e1:59:ff:f9:88:32:9e:5d:29:
b7:45:08:5a:37:fa:e8:4b:70:29:87:d6:93:e9:43:02:ba:7e:
b6:7e:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:10 2025 by rpki-client