Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File: EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier: QwUtRdpO0xF+nm2j+p7GfPgeWBjHpZolcyoenONI/0I=
Subject key identifier: AD:71:34:C1:AA:7E:F8:3A:DD:11:9C:A3:56:EC:8D:65:E7:23:A3:DF
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer: /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial: 01989780550EE33E5E9DDDE7E7FC6ED23002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 05:00:26 +0000
Manifest this update: Mon 11 Aug 2025 05:00:26 +0000
Manifest next update: Tue 12 Aug 2025 05:00:26 +0000
Files and hashes: 1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: xwd/kGU/DINr+wVn+gNI9Rw66CCvI1Qrt506/TmDORI=)
2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:55:0e:e3:3e:5e:9d:dd:e7:e7:fc:6e:d2:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Validity
Not Before: Aug 11 05:00:26 2025 GMT
Not After : Aug 12 05:00:26 2025 GMT
Subject: CN=ad7134c1aa7ef83add119ca356ec8d65e723a3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:f0:b8:89:0c:fc:88:67:04:f4:b8:e0:d4:
75:71:3f:94:c4:5b:e1:76:d5:7a:03:7f:b6:ab:4b:
25:b1:7f:b6:b9:22:d6:14:5c:ed:3d:be:09:5f:5a:
8d:f1:e3:08:e1:e4:93:83:99:b8:03:49:4d:fe:e1:
89:3a:70:dc:74:4c:03:96:8a:08:1d:62:ef:81:73:
77:cd:52:e0:b0:d7:90:fc:d5:13:ba:f7:9d:cf:6e:
e0:c7:cd:fc:bb:6a:b8:91:c5:de:00:83:a4:47:08:
76:e4:c7:b0:dc:4c:44:51:ed:bb:29:3d:63:c9:79:
cc:43:61:be:d1:3a:b5:3f:29:15:24:04:44:35:f7:
a5:2c:fb:ac:7e:34:0a:c3:5a:fc:d2:5a:42:73:a6:
d9:db:b2:c8:c8:07:9a:a0:bb:31:54:4f:da:69:7f:
1f:16:56:13:b4:c9:dd:ed:28:7f:27:d1:f5:94:b7:
83:35:dd:72:69:e6:18:22:cf:50:2d:a2:1a:07:b1:
6d:88:6c:c5:56:45:05:6f:bc:a8:b2:1f:f7:5d:e0:
1b:4f:52:f0:c9:45:b0:86:75:ea:ce:cd:da:dc:ed:
bf:c2:12:59:a9:65:d0:d7:a3:7f:dd:fe:2a:8c:28:
8c:ae:62:fc:46:bd:64:2d:93:d3:ff:a8:8d:5b:b6:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:34:C1:AA:7E:F8:3A:DD:11:9C:A3:56:EC:8D:65:E7:23:A3:DF
X509v3 Authority Key Identifier:
keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:0c:c6:80:8b:e3:a8:8c:36:81:d1:ef:a3:da:57:2b:87:
9c:ac:12:11:ca:11:4e:36:7d:91:19:6c:db:84:bf:7f:65:ba:
a5:57:a9:5a:d7:e2:27:cf:41:cd:58:d5:af:99:6c:67:01:5c:
7c:7f:74:22:ab:6c:5a:06:c7:2c:53:ff:e0:04:95:26:28:20:
de:d6:75:6f:4e:51:8a:ae:eb:5f:6c:88:89:6f:0f:53:e6:10:
82:02:2f:63:bd:5d:46:63:10:bd:8b:ad:af:ed:b2:48:20:5d:
df:d9:e8:52:e0:3e:b6:46:73:ce:6a:60:ae:64:84:94:1b:6b:
19:9b:b7:04:f5:35:41:8c:00:e5:9f:1a:25:1f:b4:18:2d:60:
4a:8a:dd:d2:a6:3e:56:6a:d0:8f:39:bc:6d:9e:15:af:21:e8:
f8:fd:4d:94:fb:aa:81:bc:16:8f:58:64:8e:09:bd:e2:ce:37:
de:12:c6:ab:ae:4d:f7:a2:47:47:29:fa:c9:f8:50:de:8e:dc:
6b:4e:77:dd:93:1b:21:2d:0e:9a:39:bf:aa:56:bb:9c:64:55:
2e:50:fc:8d:b8:c7:e1:42:56:c9:c4:af:13:7c:36:48:2e:fe:
ed:71:b2:0e:17:de:cc:a1:1f:ba:2e:5a:b0:01:74:98:b1:95:
72:d0:1c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgFUO4z5end3n5/xu0jACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTM1ZjhmYTRiNWY1MTUzM2Q3MjRlYWY5MGRiYTk5NzE1
ZmM2ZmMwHhcNMjUwODExMDUwMDI2WhcNMjUwODEyMDUwMDI2WjAzMTEwLwYDVQQD
EyhhZDcxMzRjMWFhN2VmODNhZGQxMTljYTM1NmVjOGQ2NWU3MjNhM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kvwuIkM/IhnBPS44NR1cT+UxFvh
dtV6A3+2q0slsX+2uSLWFFztPb4JX1qN8eMI4eSTg5m4A0lN/uGJOnDcdEwDlooI
HWLvgXN3zVLgsNeQ/NUTuvedz27gx838u2q4kcXeAIOkRwh25Mew3ExEUe27KT1j
yXnMQ2G+0Tq1PykVJARENfelLPusfjQKw1r80lpCc6bZ27LIyAeaoLsxVE/aaX8f
FlYTtMnd7Sh/J9H1lLeDNd1yaeYYIs9QLaIaB7FtiGzFVkUFb7yosh/3XeAbT1Lw
yUWwhnXqzs3a3O2/whJZqWXQ16N/3f4qjCiMrmL8Rr1kLZPT/6iNW7bSFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1xNMGqfvg63RGco1bsjWXnI6PfMB8GA1UdIwQY
MBaAFBFTX4+ktfUVM9ck6vkNuplxX8b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDkt
NWYyZWU1Y2U0NTgxLzEvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDktNWYyZWU1Y2U0NTgx
LzEvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY8MxoCL
46iMNoHR76PaVyuHnKwSEcoRTjZ9kRls24S/f2W6pVepWtfiJ89BzVjVr5lsZwFc
fH90IqtsWgbHLFP/4ASVJigg3tZ1b05Riq7rX2yIiW8PU+YQggIvY71dRmMQvYut
r+2ySCBd39noUuA+tkZzzmpgrmSElBtrGZu3BPU1QYwA5Z8aJR+0GC1gSord0qY+
VmrQjzm8bZ4VryHo+P1NlPuqgbwWj1hkjgm94s433hLGq65N96JHRyn6yfhQ3o7c
a0533ZMbIS0Omjm/qla7nGRVLlD8jbjH4UJWycSvE3w2SC7+7XGyDhfezKEfui5a
sAF0mLGVctAc6g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:44:58 2025 by rpki-client