Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: rAT8rJ+kxcGH+/3FMg8HMiN9QXZXXdNfeyLr3eYAvQ8=
Subject key identifier: 57:F9:C9:37:71:9A:EF:06:28:4E:DD:22:47:D3:BB:C8:93:1A:AD:BA
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019775656D141B086BEFA430B5F4731D703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 21:01:10 +0000
Manifest this update: Sun 15 Jun 2025 21:01:10 +0000
Manifest next update: Mon 16 Jun 2025 21:01:10 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: HHM8h0KpNUqIUMesouURTbPrP5cxkzRZdgGbZtAnxQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:6d:14:1b:08:6b:ef:a4:30:b5:f4:73:1d:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jun 15 21:01:10 2025 GMT
Not After : Jun 16 21:01:10 2025 GMT
Subject: CN=57f9c937719aef06284edd2247d3bbc8931aadba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:54:f2:4b:25:f3:e7:76:a7:8f:3c:aa:1f:
08:5f:ea:e1:cb:ee:d8:97:af:a9:54:2b:1e:86:95:
68:bd:65:aa:02:a3:6a:d6:d1:3b:bd:94:87:d0:fc:
17:c0:91:9f:80:ba:e9:d0:3f:8d:fb:64:25:98:d8:
dc:e4:29:79:e3:7e:d4:b0:36:c2:c4:fa:c5:19:35:
c5:71:80:cc:07:03:fb:0e:a5:19:e6:e6:d5:56:f9:
bf:78:a2:be:86:f5:41:45:a5:89:3f:a8:39:e5:2a:
70:ee:03:de:18:03:36:7c:d6:1c:8c:53:f9:ce:e8:
9f:07:ce:17:80:d5:d1:99:bd:57:f9:3d:c9:79:d5:
7e:95:8e:66:59:69:4f:a9:ac:03:32:bc:0f:01:e2:
72:de:a4:f6:66:8b:c6:a1:3e:3e:65:4a:b6:a1:60:
5e:22:5f:6b:62:38:53:b5:93:d4:87:a9:ff:cc:0f:
a8:d6:ec:7e:f1:1a:14:f6:c6:62:80:a8:d6:04:7d:
1c:4f:f8:9f:99:08:aa:f8:cb:40:f5:9a:40:6c:18:
77:fc:9f:06:e3:42:ce:bd:5b:ba:e2:67:27:85:70:
12:d6:0e:36:42:ff:94:8a:11:58:27:27:a0:e5:ac:
0d:fa:d4:ef:b9:ff:cf:b0:4d:28:46:4f:50:75:7c:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:C9:37:71:9A:EF:06:28:4E:DD:22:47:D3:BB:C8:93:1A:AD:BA
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ff:77:e6:40:c6:86:0e:cc:79:60:34:89:48:97:76:1a:d9:
07:d4:97:13:b9:d8:b3:cb:a9:83:c3:ad:1a:6b:af:c3:9e:ce:
88:03:b0:02:df:dd:19:d2:7f:07:c9:ec:a1:8c:d4:51:ae:a0:
5f:d8:af:81:b9:64:81:84:f1:7e:3a:97:62:48:f9:af:43:b6:
78:f0:da:a8:1f:c2:b4:76:e9:a0:e8:f3:d7:ca:9d:2a:94:d4:
78:c3:ff:1e:7f:09:28:0d:38:0a:db:7c:27:db:9c:fc:f4:8d:
df:b1:c7:5c:44:66:af:76:89:dd:bf:a1:dd:25:f9:42:e2:a1:
ec:c9:ea:ed:c4:00:24:ba:c5:8d:c2:f9:51:f5:47:7e:b7:b3:
d5:3f:39:5a:6f:1f:5f:f0:3f:6d:4f:f4:be:22:3e:2a:eb:47:
62:f8:84:34:40:51:6d:81:e8:43:53:83:40:b9:74:87:34:35:
be:8a:82:3b:d7:b2:5e:34:3c:60:cc:74:e8:d5:fd:31:78:1f:
43:44:78:41:88:5f:da:8c:f5:79:44:81:52:99:cc:0a:8f:a0:
b7:5b:83:61:b1:5c:90:ef:ba:f7:20:10:02:52:02:dc:6c:29:
86:1c:74:65:c5:4f:77:21:9d:88:08:aa:bf:89:ab:b4:28:67:
90:59:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:45:24 2025 by rpki-client