Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: JHom08kaxqRCp8f/TgIjv5dby1V/YIDvNlJQhZnZoY8=
Subject key identifier: D8:42:AD:48:DE:F7:46:E5:EF:C6:CC:E9:86:F7:B0:BA:77:80:BB:9E
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 019A4E4FD138940A04C554FEA3DA248FFA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 06C0
Signing time: Tue 04 Nov 2025 10:00:44 +0000
Manifest this update: Tue 04 Nov 2025 10:00:44 +0000
Manifest next update: Wed 05 Nov 2025 10:00:44 +0000
Files and hashes: 1: 42xVzUIyXqfXVqxZnWJdy4Kwupc.roa (hash: /mxwpkDKFasvyEn1G6AJvfMW6ypxk1g4AfmWIHKbxAc=)
2: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: fSRIQNb1JDVYLLsVfKoNRKf21QLM0xYqzeYrskth1fo=)
3: lCQM-dF_EfVVshXvOqwqsYBxL9s.roa (hash: Usok67enDyHQBWMZLz8dOpfnx0UzcTG68uUFl9pEmns=)
4: p7VinBT544pt3EXzTm1pwPGpSC8.roa (hash: jv8ZfoxnroW+DzcSODN0QV7hQMtZttPbI/HcF/GyoG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d1:38:94:0a:04:c5:54:fe:a3:da:24:8f:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Nov 4 10:00:44 2025 GMT
Not After : Nov 5 10:00:44 2025 GMT
Subject: CN=d842ad48def746e5efc6cce986f7b0ba7780bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:0f:4f:78:ad:11:d3:5a:30:69:cd:f7:28:
0a:27:f3:d7:f0:ec:c1:74:26:67:e2:0e:dc:4b:90:
b1:63:17:49:24:9c:76:a8:b5:79:b8:c8:bc:ee:e9:
8d:ab:12:45:c3:98:b8:be:0b:55:cb:09:f1:70:79:
77:29:5d:76:11:79:64:4a:3f:a4:22:14:f4:ed:54:
a1:71:93:22:cc:81:37:13:0b:19:fe:e8:cc:b3:70:
1b:e3:ff:af:47:b7:58:56:5c:b4:20:82:7c:06:36:
ae:66:52:2f:c4:20:b8:4d:6c:f2:38:75:a1:fd:31:
9a:2a:b4:4c:b0:5a:d8:0e:7d:6f:63:28:d8:1e:d3:
f5:6b:0c:af:2f:b4:66:f5:49:e6:65:f8:40:13:cb:
7f:b8:e4:29:03:78:0e:6d:b1:32:6a:ad:f3:cf:89:
76:d5:6c:94:b6:9a:ad:43:09:bb:c4:77:11:df:d2:
2f:72:a4:d6:15:58:67:dc:76:41:18:a6:0f:fc:c6:
1b:4a:3a:a4:d8:cd:9d:c0:76:59:cd:ca:c8:87:dd:
cc:c4:2c:3f:02:bf:2b:1e:92:d1:2b:31:ac:94:cb:
23:76:40:22:38:99:53:da:f8:cf:0f:9e:28:04:fa:
70:7c:5f:e8:71:64:0b:10:2d:d1:3f:6d:eb:1d:dc:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:AD:48:DE:F7:46:E5:EF:C6:CC:E9:86:F7:B0:BA:77:80:BB:9E
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:27:a5:36:22:b6:6f:8c:46:5b:17:04:02:35:02:a7:5c:
3e:ce:64:03:28:c3:72:5e:cd:35:2e:9e:b6:be:24:88:ed:57:
e0:1a:00:dd:16:aa:9d:28:f8:fd:5d:af:84:0d:e8:47:b9:0f:
6a:12:b3:1d:9c:18:e9:c0:f4:b3:cb:d9:8b:f5:9b:03:7f:38:
75:88:4e:ce:39:04:05:32:6c:b0:e9:bc:d4:49:b7:71:f6:b9:
6d:c1:2f:44:b2:77:06:22:1c:f8:ee:12:f8:e9:f8:f4:88:5a:
dc:c9:74:e3:fe:ae:ed:11:cf:73:84:57:bc:69:25:c8:46:dd:
8f:af:54:ff:7c:18:a6:d4:55:6c:02:7b:d3:ca:99:71:a0:c2:
a9:b5:38:21:e4:ff:83:1f:8e:c5:04:3b:dc:0b:53:f9:f9:5c:
c1:27:11:b2:31:e1:2e:14:60:e6:43:26:c7:eb:c7:1a:37:95:
5a:53:17:af:72:76:ab:18:78:dc:06:44:62:ee:38:6e:df:5b:
c3:57:d1:59:43:78:6c:a9:7d:bf:0f:3e:7f:b6:e5:18:f6:3c:
33:51:1a:5b:cd:ef:a1:f2:1a:00:15:fc:36:ad:73:5e:a3:0b:
6e:c8:01:6e:d3:4d:43:e6:5c:21:89:34:84:a8:a4:4e:74:89:
64:8a:11:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT9E4lAoExVT+o9okj/piMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh
ZWY3ZmEwHhcNMjUxMTA0MTAwMDQ0WhcNMjUxMTA1MTAwMDQ0WjAzMTEwLwYDVQQD
EyhkODQyYWQ0OGRlZjc0NmU1ZWZjNmNjZTk4NmY3YjBiYTc3ODBiYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kYPT3itEdNaMGnN9ygKJ/PX8OzB
dCZn4g7cS5CxYxdJJJx2qLV5uMi87umNqxJFw5i4vgtVywnxcHl3KV12EXlkSj+k
IhT07VShcZMizIE3EwsZ/ujMs3Ab4/+vR7dYVly0IIJ8BjauZlIvxCC4TWzyOHWh
/TGaKrRMsFrYDn1vYyjYHtP1awyvL7Rm9UnmZfhAE8t/uOQpA3gObbEyaq3zz4l2
1WyUtpqtQwm7xHcR39IvcqTWFVhn3HZBGKYP/MYbSjqk2M2dwHZZzcrIh93MxCw/
Ar8rHpLRKzGslMsjdkAiOJlT2vjPD54oBPpwfF/ocWQLEC3RP23rHdyubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhCrUje90bl78bM6Yb3sLp3gLueMB8GA1UdIwQY
MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt
ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk
LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnwnpTYi
tm+MRlsXBAI1AqdcPs5kAyjDcl7NNS6etr4kiO1X4BoA3RaqnSj4/V2vhA3oR7kP
ahKzHZwY6cD0s8vZi/WbA384dYhOzjkEBTJssOm81Em3cfa5bcEvRLJ3BiIc+O4S
+On49Iha3Ml04/6u7RHPc4RXvGklyEbdj69U/3wYptRVbAJ708qZcaDCqbU4IeT/
gx+OxQQ73AtT+flcwScRsjHhLhRg5kMmx+vHGjeVWlMXr3J2qxh43AZEYu44bt9b
w1fRWUN4bKl9vw8+f7blGPY8M1EaW83vofIaABX8Nq1zXqMLbsgBbtNNQ+ZcIYk0
hKikTnSJZIoRHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:24 2025 by rpki-client