Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: 4AGYM2zec/QA9/UbvPbaF1y9VQ/EmjpfjTH4/sI8Mtk=
Subject key identifier: 45:5E:CC:17:AA:92:2B:7A:DD:98:D2:8E:A4:2A:F3:A3:D0:9F:8A:5F
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019A50E40022518DD0C43F30942204DBB48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0449
Signing time: Tue 04 Nov 2025 22:01:50 +0000
Manifest this update: Tue 04 Nov 2025 22:01:50 +0000
Manifest next update: Wed 05 Nov 2025 22:01:50 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: zIJd1xpOBBEv4srkjjBH5Hcr3xJb4xA3Yzv9SDvjJEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:00:22:51:8d:d0:c4:3f:30:94:22:04:db:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Nov 4 22:01:50 2025 GMT
Not After : Nov 5 22:01:50 2025 GMT
Subject: CN=455ecc17aa922b7add98d28ea42af3a3d09f8a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:d9:2b:69:9c:c2:37:53:f8:8c:c1:d8:52:
0f:51:ff:24:fc:4e:31:74:89:70:26:eb:50:71:7a:
63:c7:ae:b2:3e:6b:64:bf:9e:36:e3:37:f6:c9:51:
d6:3b:71:6d:a6:78:a3:4f:0c:e0:6e:92:96:6d:c3:
0f:8e:ac:3a:79:f6:99:21:66:f7:ea:7a:06:5d:fc:
ce:b9:61:ed:99:d5:ee:16:79:03:65:f1:f9:03:2e:
bf:2a:72:84:ac:75:88:73:6c:c1:4a:8c:3f:05:dd:
41:2e:ff:4e:e7:ae:0a:9a:d7:91:c3:0d:03:c5:a6:
f4:4c:e5:c8:9a:94:3c:28:3e:35:70:de:ae:25:5f:
c8:b7:20:41:02:98:e6:4f:48:36:35:f6:fa:b6:f6:
2f:f3:ec:ec:71:f9:88:02:b1:dc:14:9f:de:11:a0:
dc:bb:99:f3:52:d0:0b:63:ba:7d:a7:a0:ec:cf:bd:
ce:06:c9:fb:1d:6a:61:09:49:f3:4e:65:72:5b:29:
5d:55:01:f1:6e:02:4b:bc:77:ec:07:78:59:e8:a9:
ac:c1:12:41:f0:2b:4e:62:d1:22:ce:3e:ca:94:81:
22:7e:bb:86:6b:81:16:35:2e:b7:2d:7f:93:bf:4e:
50:0d:21:fd:ae:da:9d:d3:96:1c:3a:be:30:bb:d8:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5E:CC:17:AA:92:2B:7A:DD:98:D2:8E:A4:2A:F3:A3:D0:9F:8A:5F
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:09:38:b8:8e:a2:05:7d:d4:80:3c:c9:f9:8f:b0:be:9e:
a0:20:7c:e1:34:ff:9a:28:1e:ae:2f:3d:fd:14:ad:a2:94:32:
cd:f5:29:96:72:4a:25:42:12:e6:e1:08:18:24:d6:6d:12:3a:
06:e8:46:01:5f:73:a8:96:b4:21:6b:7e:b3:12:38:23:b0:19:
03:29:ee:b1:27:3a:ad:f0:1f:59:fe:b1:e8:2d:68:f9:b1:7d:
84:9d:93:21:99:fa:79:d2:1d:3d:33:88:e0:ec:a0:51:f9:da:
ac:62:ce:24:87:23:ae:c2:42:cf:f4:f2:08:3d:4f:e7:0b:db:
b8:8e:42:8a:f9:cb:fc:e5:b7:31:93:70:6f:ea:89:c5:bf:39:
80:40:8a:a3:f0:aa:89:a1:c2:9e:b3:8d:55:a2:7a:67:21:9b:
ad:c5:73:23:9b:a7:4d:62:fe:53:3d:f5:e1:7e:c2:2f:e1:ee:
66:58:b0:04:61:17:04:c9:bd:97:32:7d:01:58:9d:5e:f0:26:
5c:cd:82:e8:e3:cd:47:8e:b8:c1:22:cb:5f:b6:dc:ea:de:3e:
97:d9:49:3d:8c:76:aa:53:e0:ed:ea:c6:ff:22:eb:dd:10:73:
8b:dd:9d:de:31:81:2a:4b:ce:2f:2b:75:6d:3a:fb:11:0f:30:
05:5a:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:53 2025 by rpki-client