Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: EeTdqF+lEtSkBHaGFF+V2h90j4CPOtK3KuyjLc5t1uM=
Subject key identifier: 87:72:F7:CF:AE:98:2D:E0:A0:A2:2D:3B:A7:EA:38:0E:31:21:15:7A
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019A4F2B697C8A954FEDDF6B063FA4ED0079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: yhbo+ketwZjdUFVqW9lCWjTDAaIMJ24Kk6uBkMNM3RQ=)
2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:69:7c:8a:95:4f:ed:df:6b:06:3f:a4:ed:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=8772f7cfae982de0a0a22d3ba7ea380e3121157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:51:cc:33:65:42:5a:89:8b:7b:f7:7a:21:
d0:c2:61:ca:c2:aa:d1:f3:91:b6:e0:68:79:f3:a9:
7d:d2:63:97:61:25:f4:4a:7d:da:48:44:ae:41:e2:
50:74:f7:b8:23:eb:6e:a7:ad:27:fc:df:52:eb:c7:
83:f3:0e:07:66:cc:38:a3:a1:39:ab:71:c1:4e:1a:
33:48:63:8a:c9:58:26:3a:c7:19:23:73:c6:1e:17:
8e:60:c4:e1:15:85:b1:21:89:da:ac:e6:e9:14:bc:
49:38:97:16:56:d1:0d:e0:7a:60:cd:3c:5a:7e:32:
1a:cd:a7:6e:6d:20:14:c6:25:c2:86:81:55:ab:2a:
c4:9c:5b:e0:98:c9:52:13:f8:2b:bf:82:67:45:b9:
75:66:f2:24:d9:b0:c5:fc:76:2a:a8:0d:89:c2:32:
01:d7:1f:36:a9:c0:6e:23:46:9a:46:d6:ac:13:b3:
5f:d9:19:c6:1a:4e:36:a6:61:8d:49:dd:e5:19:10:
30:b1:b6:14:64:b4:10:c3:32:0f:9b:f0:35:5f:0c:
43:18:5e:3f:3d:5d:ea:d8:2d:60:d7:dd:cd:95:89:
63:9e:e5:8e:88:a0:c6:70:d0:d9:cf:33:19:35:a5:
0b:83:d4:05:bd:9d:ea:bc:7e:be:21:e9:c2:07:72:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:F7:CF:AE:98:2D:E0:A0:A2:2D:3B:A7:EA:38:0E:31:21:15:7A
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:5c:65:82:43:7a:6f:93:54:9b:45:92:2a:08:66:1b:02:
ad:7d:be:d9:15:a2:50:d7:84:79:84:82:11:4b:47:42:b3:96:
af:3a:c8:52:1f:8f:57:af:d7:51:ef:ed:1b:42:8b:85:38:d9:
67:ee:45:b3:f9:7f:37:b5:88:f0:b3:a9:b6:00:25:62:55:4f:
db:2c:3d:a2:f4:e5:98:5c:18:1c:8c:0a:11:16:3f:f1:b7:a0:
30:91:29:f0:da:40:de:3d:4b:d7:b5:2b:d1:2f:fd:50:a1:3e:
3f:a6:51:91:73:a1:44:bd:19:de:85:ed:ee:3f:b9:14:39:bf:
d4:4d:9c:e0:5b:78:a3:c0:3b:06:03:a0:83:5f:e1:fa:7a:42:
10:52:8f:e2:fd:cc:a7:d4:14:59:da:ff:b3:74:fc:12:fc:6b:
6e:ff:5e:ff:14:c0:73:e5:ef:16:b3:9c:22:ee:c4:3e:4a:c1:
c3:7e:9e:44:b9:6f:cb:70:9e:e1:45:1b:39:fd:bf:9b:2d:58:
47:42:3b:97:de:ae:63:8a:41:35:04:78:55:52:1b:48:33:6e:
61:28:0f:00:6e:d1:0f:16:28:f7:76:6b:43:5e:66:ab:55:8e:
a7:4e:fc:29:ed:10:3b:3c:2d:fb:a7:a6:14:80:ac:92:27:74:
05:f9:cb:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK2l8ipVP7d9rBj+k7QB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZjFiYjYxMWYyYjdhMzc4MDBmNDljNmMxMjVjNWVlOThi
NzE5YzUwHhcNMjUxMTA0MTQwMDM2WhcNMjUxMTA1MTQwMDM2WjAzMTEwLwYDVQQD
Eyg4NzcyZjdjZmFlOTgyZGUwYTBhMjJkM2JhN2VhMzgwZTMxMjExNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bZRzDNlQlqJi3v3eiHQwmHKwqrR
85G24Gh586l90mOXYSX0Sn3aSESuQeJQdPe4I+tup60n/N9S68eD8w4HZsw4o6E5
q3HBThozSGOKyVgmOscZI3PGHheOYMThFYWxIYnarObpFLxJOJcWVtEN4HpgzTxa
fjIazadubSAUxiXChoFVqyrEnFvgmMlSE/grv4JnRbl1ZvIk2bDF/HYqqA2JwjIB
1x82qcBuI0aaRtasE7Nf2RnGGk42pmGNSd3lGRAwsbYUZLQQwzIPm/A1XwxDGF4/
PV3q2C1g193NlYljnuWOiKDGcNDZzzMZNaULg9QFvZ3qvH6+IenCB3Ii7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdy98+umC3goKItO6fqOA4xIRV6MB8GA1UdIwQY
MBaAFBLxu2EfK3o3gA9JxsElxe6YtxnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgt
NTJhMzY4Y2FjNDAzLzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgtNTJhMzY4Y2FjNDAz
LzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQZcZYJD
em+TVJtFkioIZhsCrX2+2RWiUNeEeYSCEUtHQrOWrzrIUh+PV6/XUe/tG0KLhTjZ
Z+5Fs/l/N7WI8LOptgAlYlVP2yw9ovTlmFwYHIwKERY/8begMJEp8NpA3j1L17Ur
0S/9UKE+P6ZRkXOhRL0Z3oXt7j+5FDm/1E2c4Ft4o8A7BgOgg1/h+npCEFKP4v3M
p9QUWdr/s3T8Evxrbv9e/xTAc+XvFrOcIu7EPkrBw36eRLlvy3Ce4UUbOf2/my1Y
R0I7l96uY4pBNQR4VVIbSDNuYSgPAG7RDxYo93ZrQ15mq1WOp078Ke0QOzwt+6em
FICskid0BfnLlA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:01 2025 by rpki-client