Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: NKcd4Z6vU76hHp/7jvx6IncLAoeNl2EXOMh5oz4lwZ0=
Subject key identifier: D8:0F:D7:52:A9:59:FF:4A:A1:7A:14:9B:4D:CB:05:B1:90:17:9D:E4
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 019894B633A4DA8DDD4686D91839DDCDEC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 08FB
Signing time: Sun 10 Aug 2025 16:00:25 +0000
Manifest this update: Sun 10 Aug 2025 16:00:25 +0000
Manifest next update: Mon 11 Aug 2025 16:00:25 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: 5M8i92PeUZpIlbrQ86GWAuZcaAqrIUypflwh9weYvBc=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:33:a4:da:8d:dd:46:86:d9:18:39:dd:cd:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Aug 10 16:00:25 2025 GMT
Not After : Aug 11 16:00:25 2025 GMT
Subject: CN=d80fd752a959ff4aa17a149b4dcb05b190179de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:91:c5:0f:e2:54:56:82:c6:d6:bf:3a:42:
a2:98:b2:3e:bf:d4:fb:5f:e2:d6:7c:7a:a4:b8:d8:
1e:69:28:f8:82:4e:42:f1:a1:3f:6e:d0:24:79:f2:
4f:48:bd:42:55:ab:78:d7:c0:de:9d:13:d2:b6:9c:
9f:c5:6f:de:e2:be:42:1f:63:04:79:30:90:a2:9f:
84:ad:eb:09:c7:18:54:0b:fa:51:8c:db:ab:23:d6:
cf:b2:3d:7d:c9:e4:df:d2:48:f7:2e:37:d3:57:89:
05:54:b9:0c:af:81:86:ab:59:aa:de:1c:82:4b:ff:
1f:c3:af:13:3f:0b:f5:84:2c:6a:e1:17:c7:fe:67:
d4:24:99:32:b2:58:d9:a3:70:0b:95:de:ac:82:23:
b4:e9:af:25:4a:71:a1:5c:6a:02:07:ea:8e:b9:50:
ed:cc:21:b5:62:dd:fa:18:b7:3a:8c:df:cd:a6:30:
79:53:49:ce:cb:18:70:f5:9d:87:83:d3:97:f7:a7:
84:3e:4e:6d:57:92:09:3e:98:13:80:4a:39:f4:1a:
36:af:d5:56:f6:b6:2a:53:5f:8e:35:76:a5:16:9c:
c0:e0:52:be:d2:55:06:7c:1a:c6:ce:0b:f3:d2:a5:
fa:a1:af:bd:9b:70:86:4f:f5:b6:49:df:1a:cc:09:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:D7:52:A9:59:FF:4A:A1:7A:14:9B:4D:CB:05:B1:90:17:9D:E4
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:9c:d8:76:9e:a5:bf:38:64:4a:af:c0:94:4a:d1:25:df:
c0:ac:e7:0f:32:8a:19:f6:1d:6e:69:eb:64:b8:81:1e:f0:4f:
cf:0f:cd:3c:2b:01:00:35:b5:71:87:ef:98:5a:88:3f:df:b2:
9c:41:c4:56:64:5a:a5:e8:bb:42:05:af:dd:d9:e5:f1:40:ff:
f9:e8:81:b9:e2:2a:9d:7a:4c:0e:d0:fc:1b:4c:30:59:44:00:
06:a3:3a:50:67:32:6c:09:ab:6d:b1:bd:d5:e1:c0:a7:11:3c:
38:a9:20:1d:05:b5:84:96:ac:0f:85:d8:fb:8e:2a:cc:6c:d3:
9f:b5:c8:e5:d0:fd:73:a4:fa:49:c0:d6:a6:27:ba:44:9d:0f:
be:74:4d:48:2c:07:31:1e:22:cb:c6:c1:f8:87:fe:f6:8a:9e:
1c:50:f0:fd:f4:bf:20:dc:cc:ab:11:33:21:b4:84:e6:6d:2f:
25:55:d2:6b:37:cf:3f:fc:f3:1a:7e:f2:00:3c:65:fa:35:74:
5f:14:ba:b7:0a:35:c5:25:bb:02:c9:38:ec:f9:68:60:1b:0a:
a9:c2:43:cd:c2:87:87:3a:c7:7a:e2:71:26:f7:76:38:ff:58:
6e:0a:58:16:c8:46:52:0f:22:d5:1b:3c:13:bd:a5:f8:33:74:
8b:94:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:10 2025 by rpki-client