
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File: Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier: jG9yzLUAbRHePBlZvfZBH18YgKi83OZngkSbGhQJX/8=
Subject key identifier: DC:1F:1F:06:EA:8C:DE:90:EE:23:F9:33:F8:CC:EB:04:77:57:78:C4
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer: /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial: 01987B9BCEE6CC55F8A26930D3B5DF3DCB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number: 021A
Signing time: Tue 05 Aug 2025 19:01:05 +0000
Manifest this update: Tue 05 Aug 2025 19:01:05 +0000
Manifest next update: Wed 06 Aug 2025 19:01:05 +0000
Files and hashes: 1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: 3Waw2W5S8RgQKhx6sfetz8L1Xj6sSBxYSKWplMgKXrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:ce:e6:cc:55:f8:a2:69:30:d3:b5:df:3d:cb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Validity
Not Before: Aug 5 19:01:05 2025 GMT
Not After : Aug 6 19:01:05 2025 GMT
Subject: CN=dc1f1f06ea8cde90ee23f933f8cceb04775778c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:ca:82:86:09:5d:76:8a:0b:9d:41:92:23:
80:06:ce:a8:a5:b8:00:bf:4a:a4:09:9a:e8:5d:64:
67:d4:cd:58:2b:d8:8f:db:b5:19:84:bf:b5:2d:35:
96:88:19:89:12:db:ef:5c:f4:99:e7:08:f2:64:87:
10:7e:0d:69:79:72:13:3c:c5:a7:14:82:ad:ae:32:
3d:06:bc:5f:de:51:8f:d2:4e:9e:fd:a7:b3:fd:47:
7a:9b:13:f8:02:56:9a:e1:0e:8e:48:b5:55:46:dd:
a9:de:e3:73:e0:93:68:c9:1a:4a:6c:d1:b3:06:a0:
c1:ff:67:94:80:ea:32:0a:73:81:b4:2e:19:6c:f1:
ff:da:1c:74:6b:8e:88:d7:2b:e5:39:68:92:7d:c9:
8e:7e:79:45:d0:bc:60:57:67:d0:e1:b4:c8:e8:6a:
79:77:65:8f:44:96:e6:a6:af:12:04:7a:2b:a9:31:
78:3e:ef:a6:cb:6c:93:22:99:fd:98:19:ee:3c:cc:
ef:20:da:1a:53:89:d1:75:52:fc:8d:03:d5:97:63:
65:81:86:09:1b:db:66:0a:91:02:8f:89:63:a2:8f:
f9:66:8b:46:bf:f8:46:87:dd:a1:2a:10:91:9f:c5:
8b:3f:98:22:9f:21:1d:71:53:33:56:1d:a3:df:62:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:1F:06:EA:8C:DE:90:EE:23:F9:33:F8:CC:EB:04:77:57:78:C4
X509v3 Authority Key Identifier:
keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:74:d8:5e:1f:c8:20:a1:cf:e3:7c:b1:9d:1e:32:b5:e0:
7d:2f:23:70:00:50:87:74:42:6b:c4:9e:b8:0f:d2:13:da:61:
82:81:89:c4:00:2d:96:a4:a4:8b:da:1b:5e:a8:d7:74:90:88:
b5:a0:1e:b4:08:1f:60:10:a3:4d:18:b0:4e:fe:c1:8b:68:31:
97:d1:1e:62:59:ea:5c:c3:42:de:c3:58:be:e6:94:13:dd:3b:
98:7b:86:4b:5b:c5:72:55:ee:e9:8b:ca:36:20:7a:04:b5:03:
2f:da:46:b7:52:ab:ef:8b:89:95:52:06:20:0c:e1:31:45:e4:
0e:aa:8e:48:f0:e3:bf:64:b4:c4:38:34:fb:83:c8:09:87:60:
b0:b3:fb:0d:bd:13:85:51:81:c3:c3:2b:fb:17:46:08:9e:05:
f3:40:73:86:6f:e9:d3:59:44:7e:ed:0c:4b:59:9a:7d:42:6c:
14:5f:1b:90:b2:47:37:c2:ed:38:ff:15:e0:a4:e3:a4:48:e0:
15:6c:15:e8:66:1b:b4:69:99:47:6a:86:91:1a:d7:ef:cc:8a:
cd:17:07:15:40:9a:14:b0:02:b0:f6:35:3d:92:5f:6a:7f:d9:
55:db:ed:eb:34:49:82:4b:41:27:82:96:bf:52:b8:73:02:c7:
23:ab:ed:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m87mzFX4omkw07XfPctPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmYzZWQ0ZmI1NzU5MmVkY2FmNWIyYjc2MzRhNTYwNTQw
NDNjNTAwHhcNMjUwODA1MTkwMTA1WhcNMjUwODA2MTkwMTA1WjAzMTEwLwYDVQQD
EyhkYzFmMWYwNmVhOGNkZTkwZWUyM2Y5MzNmOGNjZWIwNDc3NTc3OGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHKgoYJXXaKC51BkiOABs6opbgA
v0qkCZroXWRn1M1YK9iP27UZhL+1LTWWiBmJEtvvXPSZ5wjyZIcQfg1peXITPMWn
FIKtrjI9Brxf3lGP0k6e/aez/Ud6mxP4Alaa4Q6OSLVVRt2p3uNz4JNoyRpKbNGz
BqDB/2eUgOoyCnOBtC4ZbPH/2hx0a46I1yvlOWiSfcmOfnlF0LxgV2fQ4bTI6Gp5
d2WPRJbmpq8SBHorqTF4Pu+my2yTIpn9mBnuPMzvINoaU4nRdVL8jQPVl2NlgYYJ
G9tmCpECj4ljoo/5ZotGv/hGh92hKhCRn8WLP5ginyEdcVMzVh2j32IBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwfHwbqjN6Q7iP5M/jM6wR3V3jEMB8GA1UdIwQY
MBaAFBL/PtT7V1ku3K9bK3Y0pWBUBDxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0Yjct
YjBhMDA3YzIyNGQ0LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0YjctYjBhMDA3YzIyNGQ0
LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2R02F4f
yCChz+N8sZ0eMrXgfS8jcABQh3RCa8SeuA/SE9phgoGJxAAtlqSki9obXqjXdJCI
taAetAgfYBCjTRiwTv7Bi2gxl9EeYlnqXMNC3sNYvuaUE907mHuGS1vFclXu6YvK
NiB6BLUDL9pGt1Kr74uJlVIGIAzhMUXkDqqOSPDjv2S0xDg0+4PICYdgsLP7Db0T
hVGBw8Mr+xdGCJ4F80Bzhm/p01lEfu0MS1mafUJsFF8bkLJHN8LtOP8V4KTjpEjg
FWwV6GYbtGmZR2qGkRrX78yKzRcHFUCaFLACsPY1PZJfan/ZVdvt6zRJgktBJ4KW
v1K4cwLHI6vtPw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:51 2025 by rpki-client