Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: EoeK8S9VQOfiBraKkhWJ2mfkl8imgxymxXYtCOV2yVE=
Subject key identifier: FC:59:A3:BE:C3:8E:88:66:2F:11:01:5D:0D:DF:94:2D:EE:1C:05:84
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019881D48BDC76C7C891CA0CEBD0DCD9CB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 00:00:46 +0000
Manifest this update: Thu 07 Aug 2025 00:00:46 +0000
Manifest next update: Fri 08 Aug 2025 00:00:46 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: BCL4imY53fR6KGNhLyCVaWLj2XYy0p/zu39ANdylfbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8b:dc:76:c7:c8:91:ca:0c:eb:d0:dc:d9:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Aug 7 00:00:46 2025 GMT
Not After : Aug 8 00:00:46 2025 GMT
Subject: CN=fc59a3bec38e88662f11015d0ddf942dee1c0584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:75:f7:68:0c:3e:ab:7b:a7:04:9a:8a:c8:
ce:35:76:3a:f6:b9:b9:a3:ff:cc:1b:c9:87:e0:40:
35:af:fe:2f:17:c5:ea:06:19:13:20:be:91:10:11:
ff:66:56:7f:14:a2:05:53:38:21:09:ff:4a:ee:b7:
42:61:f1:90:8b:d1:87:ad:c6:f5:23:1b:ee:b6:4b:
2b:e9:04:e5:3d:4e:92:92:37:b3:2d:c6:df:59:a5:
68:fe:e5:e1:ff:55:93:d6:1a:e2:5f:cb:9c:77:b2:
e3:23:b6:cb:9e:20:fb:d4:50:e7:c8:5f:1f:9b:18:
44:da:1c:ca:f0:09:db:0c:25:21:fd:4c:7a:64:40:
f3:96:24:5e:92:e7:91:04:29:ca:90:74:14:85:c4:
bf:af:1c:63:2a:39:83:4b:c4:7c:e1:bc:c8:9d:c3:
a1:4a:bd:b4:4c:33:7f:3a:1f:3d:97:e8:73:82:ba:
3d:78:fc:0f:f2:9e:85:ff:ad:c5:6b:99:4f:91:79:
da:42:3c:c4:d7:7b:32:fd:8a:3c:74:4d:e6:71:de:
5f:ca:04:c8:04:c2:2f:3d:5e:35:50:72:c0:b5:9e:
01:e1:9b:fc:45:76:89:8e:e7:df:51:96:d9:9d:ff:
e9:2f:77:b3:40:5b:16:b3:dd:1b:d3:81:39:0d:ee:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:A3:BE:C3:8E:88:66:2F:11:01:5D:0D:DF:94:2D:EE:1C:05:84
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:f4:f7:6a:ea:c2:e1:55:d0:fa:03:a5:1e:c4:43:ee:43:
6e:f1:a0:cc:f3:1f:63:d6:ae:f9:a5:85:22:48:d9:9d:66:45:
b7:b6:8c:cc:c8:1c:20:41:3e:1e:42:54:d1:47:ea:26:0f:31:
a9:5d:b8:44:37:8b:91:21:82:66:01:8c:27:7d:86:99:2a:f0:
08:76:08:46:46:32:12:a2:ed:f3:7f:cc:a0:e2:9f:64:d8:4e:
53:dd:a2:12:01:f0:79:64:5f:c2:3e:e3:c0:00:b9:e1:c9:3a:
a8:0a:40:1b:d3:dc:5b:03:4b:5c:14:fb:b6:2b:67:e0:cc:24:
3d:e7:a2:c0:38:5d:e3:2b:54:09:e0:12:39:a7:17:68:b4:c6:
89:4a:d0:53:0a:cb:cf:19:40:78:0f:d5:54:e5:bb:40:07:e3:
5a:72:6b:fc:1a:11:8a:b4:53:b8:60:7a:f1:66:d5:00:38:64:
b6:90:2f:16:a2:01:69:64:3f:f8:c8:d9:fd:6e:93:99:7e:5c:
b5:a0:7a:12:fe:8a:22:12:87:9e:3b:c0:e9:d6:9b:3a:ac:69:
a1:24:42:10:60:b3:73:3d:50:48:fc:8e:a0:b2:76:46:1f:a1:
7a:fa:c9:0b:f5:c1:61:bd:16:3d:c2:75:3f:1b:07:ab:e1:7b:
35:f4:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:14 2025 by rpki-client