Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: uJnWF5/d53QH5RjK7ztFnfInyGR+uAWYm11qwJ51rMY=
Subject key identifier: E1:2F:E9:AA:6F:BE:A7:5D:EF:D1:D5:D1:1C:EB:1F:6A:B7:5D:9D:E3
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 01988957823C5E348582264BB52A8D51F58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 11:01:10 +0000
Manifest this update: Fri 08 Aug 2025 11:01:10 +0000
Manifest next update: Sat 09 Aug 2025 11:01:10 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: 61oQSqx6zG3np9yy79I5cHYshGW5/CDURpo1Z3xbfBE=)
2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:82:3c:5e:34:85:82:26:4b:b5:2a:8d:51:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Aug 8 11:01:10 2025 GMT
Not After : Aug 9 11:01:10 2025 GMT
Subject: CN=e12fe9aa6fbea75defd1d5d11ceb1f6ab75d9de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:83:1f:97:e0:2c:c1:ea:09:78:9e:a3:6c:
69:aa:30:5b:00:4d:cb:b0:6a:c6:95:c7:d2:3c:d0:
46:c2:28:77:01:8a:c5:95:48:1a:59:5e:94:76:aa:
ca:33:01:e4:21:a0:a3:a2:09:9d:4b:b1:02:f5:c4:
52:e8:eb:85:8b:85:7d:86:51:0a:f6:9d:44:d2:93:
e9:be:98:8d:76:d9:17:7b:7c:d5:2f:05:b7:8f:75:
02:08:d8:db:2a:29:05:5b:4a:89:19:fc:03:cc:5f:
4e:40:6b:4e:6c:7f:fe:2e:75:f1:8a:2a:25:bd:3a:
f7:1b:3d:31:c3:a3:ab:b4:ae:41:8f:29:31:f6:1b:
b8:e3:1d:31:45:17:83:a5:42:0b:99:e2:b6:22:56:
c7:96:37:0d:a1:b9:df:39:57:d3:7d:fc:d4:cd:35:
8b:91:00:a3:86:2e:5b:c5:ef:57:af:c8:0d:1e:d2:
f6:29:40:d1:ad:bd:fa:94:6a:97:3f:0d:99:e1:79:
96:ef:27:d7:40:f4:32:91:91:60:93:47:ac:3f:bb:
52:46:59:10:3e:0d:b0:8b:d7:47:10:44:64:d9:f1:
16:b5:e0:e8:90:63:01:6b:7f:39:f1:f9:59:0a:19:
91:2b:01:12:8b:6a:ef:8f:13:31:ac:8f:4e:67:79:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:E9:AA:6F:BE:A7:5D:EF:D1:D5:D1:1C:EB:1F:6A:B7:5D:9D:E3
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:2d:9c:d5:eb:6c:74:5b:51:60:0e:36:4c:99:f6:7b:29:
2b:20:d5:0a:9e:77:2f:1b:a0:28:91:88:53:3a:4c:48:0b:e0:
2b:28:52:dd:7a:e1:c4:2d:80:2d:86:1a:2f:10:d1:4c:73:51:
c1:0d:f2:ab:77:e6:d1:6f:b4:0a:7b:59:4e:8f:90:fd:d7:38:
6a:dc:72:e7:87:21:82:5a:81:07:d9:92:e6:1a:8a:70:7a:f2:
a3:95:0e:15:3b:b7:0e:57:4e:37:9f:35:d6:75:1a:34:1c:73:
a1:83:a2:94:a6:e0:fc:7a:f5:64:d1:c1:34:87:2f:f8:e2:6b:
7d:34:b1:bd:20:0a:61:99:81:0b:fc:d7:74:2f:e9:25:c7:25:
ef:11:70:40:cb:71:62:e6:d0:a2:be:1c:f2:ec:b6:04:2c:d1:
08:08:a3:4e:49:0a:17:eb:1a:a0:3a:f0:fa:6b:b1:67:5d:07:
52:bd:b6:f4:81:93:35:09:cb:f5:fa:d4:be:ea:77:39:44:c1:
af:34:c4:db:4c:43:7b:60:b5:b5:52:6d:3a:8c:5c:d8:5a:d3:
e3:02:d9:24:30:56:67:76:b5:a9:a4:0e:98:66:13:14:3c:94:
27:3d:6c:46:8e:fc:2e:5a:2c:77:7c:3f:0a:55:c3:48:b2:7e:
51:f2:d4:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJV4I8XjSFgiZLtSqNUfWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZjFiYjYxMWYyYjdhMzc4MDBmNDljNmMxMjVjNWVlOThi
NzE5YzUwHhcNMjUwODA4MTEwMTEwWhcNMjUwODA5MTEwMTEwWjAzMTEwLwYDVQQD
EyhlMTJmZTlhYTZmYmVhNzVkZWZkMWQ1ZDExY2ViMWY2YWI3NWQ5ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2KDH5fgLMHqCXieo2xpqjBbAE3L
sGrGlcfSPNBGwih3AYrFlUgaWV6UdqrKMwHkIaCjogmdS7EC9cRS6OuFi4V9hlEK
9p1E0pPpvpiNdtkXe3zVLwW3j3UCCNjbKikFW0qJGfwDzF9OQGtObH/+LnXxiiol
vTr3Gz0xw6OrtK5Bjykx9hu44x0xRReDpUILmeK2IlbHljcNobnfOVfTffzUzTWL
kQCjhi5bxe9Xr8gNHtL2KUDRrb36lGqXPw2Z4XmW7yfXQPQykZFgk0esP7tSRlkQ
Pg2wi9dHEERk2fEWteDokGMBa3858flZChmRKwESi2rvjxMxrI9OZ3n0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEv6apvvqdd79HV0RzrH2q3XZ3jMB8GA1UdIwQY
MBaAFBLxu2EfK3o3gA9JxsElxe6YtxnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgt
NTJhMzY4Y2FjNDAzLzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgtNTJhMzY4Y2FjNDAz
LzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSstnNXr
bHRbUWAONkyZ9nspKyDVCp53LxugKJGIUzpMSAvgKyhS3XrhxC2ALYYaLxDRTHNR
wQ3yq3fm0W+0CntZTo+Q/dc4atxy54chglqBB9mS5hqKcHryo5UOFTu3DldON581
1nUaNBxzoYOilKbg/Hr1ZNHBNIcv+OJrfTSxvSAKYZmBC/zXdC/pJccl7xFwQMtx
YubQor4c8uy2BCzRCAijTkkKF+saoDrw+muxZ10HUr229IGTNQnL9frUvup3OUTB
rzTE20xDe2C1tVJtOoxc2FrT4wLZJDBWZ3a1qaQOmGYTFDyUJz1sRo78Llosd3w/
ClXDSLJ+UfLUvQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:51 2025 by rpki-client