Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: bJFo4aTwJBNA+DPcL4hVnMtmzCtITly8tCUBEsvSUY0=
Subject key identifier: 6D:DB:8D:9E:4E:6D:79:F8:E0:1B:F4:F0:05:8E:1F:E5:40:BF:CF:BC
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 01976FD1237B0A85F1696966B78C2C2FA7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 0541
Signing time: Sat 14 Jun 2025 19:01:06 +0000
Manifest this update: Sat 14 Jun 2025 19:01:06 +0000
Manifest next update: Sun 15 Jun 2025 19:01:06 +0000
Files and hashes: 1: 3I2mGfHorPrDep9I0nPeIh65tkI.roa (hash: OLscXpyWIbrn1RcZqjdSr9XXKKiPI7j2rv0JHHPMEQI=)
2: dNzpUeScS40SGAakdE8EMOqK8-0.roa (hash: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=)
3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: LFcatH5be5tdecrsA7hN7NEretWyxap462gE5qsEbuA=)
4: y_1DokJhuMn6KiVy0_PFo2uwqL4.roa (hash: CyQURB7g+UVvvUP5P21dxzNPaEmL0tzfzogezhC6J2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:23:7b:0a:85:f1:69:69:66:b7:8c:2c:2f:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jun 14 19:01:06 2025 GMT
Not After : Jun 15 19:01:06 2025 GMT
Subject: CN=6ddb8d9e4e6d79f8e01bf4f0058e1fe540bfcfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:c0:d7:c1:bc:d1:a8:26:78:d2:47:ef:ac:
be:87:58:2c:a8:e7:4f:ef:0e:8d:a3:0d:13:8d:00:
db:19:2c:57:3f:c0:fa:77:20:95:63:6b:59:36:b7:
db:d1:49:b9:85:c4:cf:6c:81:ff:14:68:fa:88:9b:
05:20:ee:c6:07:35:e9:8d:53:3a:17:a3:ac:b8:d3:
2f:c2:cf:60:13:a3:5a:4e:d3:27:ed:d6:a8:af:86:
4f:1c:64:4f:e5:77:15:97:21:a7:f4:d5:fc:ba:76:
1e:77:bc:ab:79:3b:54:19:12:26:ee:0a:5f:99:41:
bb:c8:ae:26:f0:29:f3:4a:09:b4:3c:a4:f4:2c:cc:
aa:78:45:c6:59:32:8b:83:7f:9d:ce:3e:c8:a6:37:
83:d9:47:49:04:56:e9:7c:1f:f3:e4:b8:0e:2b:fd:
8f:1d:4f:c7:c3:79:c2:cc:a0:d8:3c:76:86:7c:b0:
10:d5:8d:11:ae:e4:53:99:2c:9f:d8:93:c0:bc:37:
b5:31:66:c3:be:c0:60:52:ea:b7:32:2d:73:51:81:
6e:59:4c:28:4f:7a:64:56:98:fc:ae:fe:eb:b8:b2:
48:b6:f3:fc:a4:b8:22:c3:52:cc:61:0a:9d:8d:b2:
66:ba:19:dd:25:9b:98:68:26:2f:57:93:f1:4d:92:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DB:8D:9E:4E:6D:79:F8:E0:1B:F4:F0:05:8E:1F:E5:40:BF:CF:BC
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:6e:8a:b4:94:a8:1f:32:9e:25:c2:9a:f3:05:fd:e1:5c:
4b:5f:e2:2c:ce:87:cd:a6:08:e3:a1:d3:c4:7a:64:ba:ac:83:
70:73:2c:04:57:24:66:de:e5:c1:44:90:10:15:15:a8:c7:66:
51:69:a9:5d:1f:19:83:56:ee:69:59:6f:ba:fa:81:89:f4:45:
4b:92:5c:51:33:7a:13:e9:37:51:bf:86:68:23:fb:c3:92:6d:
95:55:c1:6f:39:1b:f5:3f:32:ef:e2:a3:f2:6b:11:57:2d:68:
0e:01:32:2b:61:5e:77:5d:b0:cd:37:60:7f:2d:d0:51:13:d9:
4a:8e:81:f1:99:cc:af:65:c0:62:51:8a:61:22:5c:e4:54:bf:
ba:70:8f:20:74:4c:f4:7a:ed:d7:3f:c8:d3:35:5f:e5:34:ed:
bc:54:67:3b:5e:a7:39:bb:00:7d:e8:e9:c1:1f:c6:a0:31:9c:
16:da:97:c7:6c:6a:2e:34:3f:0f:1c:96:b4:a8:40:f6:12:5b:
a6:24:5c:dd:89:81:14:10:73:d5:03:aa:de:23:37:c3:e8:44:
5b:41:b2:3b:f7:ad:91:88:93:9b:c0:fe:7f:ee:8b:e5:a9:8c:
7d:b3:f0:d0:7c:78:10:dc:58:e4:b1:a9:b6:e1:f0:65:cd:c3:
80:2f:b9:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0SN7CoXxaWlmt4wsL6fRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh
ZWY3ZmEwHhcNMjUwNjE0MTkwMTA2WhcNMjUwNjE1MTkwMTA2WjAzMTEwLwYDVQQD
Eyg2ZGRiOGQ5ZTRlNmQ3OWY4ZTAxYmY0ZjAwNThlMWZlNTQwYmZjZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/A18G80agmeNJH76y+h1gsqOdP
7w6Now0TjQDbGSxXP8D6dyCVY2tZNrfb0Um5hcTPbIH/FGj6iJsFIO7GBzXpjVM6
F6OsuNMvws9gE6NaTtMn7daor4ZPHGRP5XcVlyGn9NX8unYed7yreTtUGRIm7gpf
mUG7yK4m8CnzSgm0PKT0LMyqeEXGWTKLg3+dzj7IpjeD2UdJBFbpfB/z5LgOK/2P
HU/Hw3nCzKDYPHaGfLAQ1Y0RruRTmSyf2JPAvDe1MWbDvsBgUuq3Mi1zUYFuWUwo
T3pkVpj8rv7ruLJItvP8pLgiw1LMYQqdjbJmuhndJZuYaCYvV5PxTZKbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3bjZ5ObXn44Bv08AWOH+VAv8+8MB8GA1UdIwQY
MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt
ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk
LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYduirSU
qB8yniXCmvMF/eFcS1/iLM6HzaYI46HTxHpkuqyDcHMsBFckZt7lwUSQEBUVqMdm
UWmpXR8Zg1buaVlvuvqBifRFS5JcUTN6E+k3Ub+GaCP7w5JtlVXBbzkb9T8y7+Kj
8msRVy1oDgEyK2Fed12wzTdgfy3QURPZSo6B8ZnMr2XAYlGKYSJc5FS/unCPIHRM
9Hrt1z/I0zVf5TTtvFRnO16nObsAfejpwR/GoDGcFtqXx2xqLjQ/DxyWtKhA9hJb
piRc3YmBFBBz1QOq3iM3w+hEW0GyO/etkYiTm8D+f+6L5amMfbPw0Hx4ENxY5LGp
tuHwZc3DgC+5gQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:34:27 2025 by rpki-client