Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: q4DUpVQ5bWOOMyGQK+9agKrfuBjb64wa2j3AlCnwie0=
Subject key identifier: C0:F6:CD:1B:D7:67:E2:36:7D:EB:34:C0:53:E1:97:4A:6A:04:0F:DF
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 0198892183F85DCDB668BCA98C3463863FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 035D
Signing time: Fri 08 Aug 2025 10:02:11 +0000
Manifest this update: Fri 08 Aug 2025 10:02:11 +0000
Manifest next update: Sat 09 Aug 2025 10:02:11 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: 2WxGlt3W8W3nf6B7ujN1wkCD3J5VYW/EDrNU5XbjbrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:83:f8:5d:cd:b6:68:bc:a9:8c:34:63:86:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Aug 8 10:02:11 2025 GMT
Not After : Aug 9 10:02:11 2025 GMT
Subject: CN=c0f6cd1bd767e2367deb34c053e1974a6a040fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:86:78:3e:b4:7b:9d:7c:ff:60:8e:ce:68:
af:f5:0e:1a:ba:87:4a:8d:08:01:42:0d:67:9b:ef:
55:44:be:4a:bc:b9:91:92:87:b9:a1:3e:b5:64:37:
60:47:bb:95:e5:67:8f:9a:04:12:a4:83:2e:73:d3:
00:fe:f3:02:fc:eb:f6:46:37:96:a6:a4:2c:51:a6:
a2:1c:80:f9:ee:1c:9a:72:9a:61:e7:db:ef:f8:34:
1e:01:5a:70:11:09:86:c1:1d:8e:13:46:b9:6f:b3:
12:72:02:07:08:a1:1e:da:d2:ab:df:7f:77:6d:3a:
03:9a:9a:f1:32:87:79:30:d5:8d:b8:3a:59:83:00:
77:46:a0:7e:8d:ff:ac:6f:ad:d4:60:3c:0e:4e:de:
93:5c:79:e1:1c:ba:23:6a:a2:59:4c:30:3c:9e:d5:
e6:b7:02:9d:2d:ad:12:e2:57:da:84:9e:c6:c1:b4:
6c:6e:8b:3e:ae:81:69:41:12:b0:52:8f:0e:f1:e2:
c6:72:ee:b8:3a:b3:c5:d9:5d:dc:9d:5c:61:57:af:
a0:d7:26:74:f1:ca:40:84:81:89:82:40:18:37:c0:
3c:d2:07:7f:6c:89:24:87:74:d8:7e:e1:e2:ff:40:
19:11:41:23:25:35:8c:fe:cb:ea:77:6a:dc:d6:15:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:CD:1B:D7:67:E2:36:7D:EB:34:C0:53:E1:97:4A:6A:04:0F:DF
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:70:06:c2:63:16:44:bf:10:dc:32:c8:61:e5:c8:ad:d2:
ed:5c:24:a9:67:c1:eb:dc:3b:da:60:de:05:94:9a:a9:f5:8a:
b4:7f:bc:22:64:57:12:b3:e9:64:34:6f:9d:0d:10:2c:37:7c:
fb:a4:c8:97:89:90:f0:2a:d7:90:77:fe:ee:24:e4:dc:87:98:
f6:36:76:3c:81:9c:e0:77:26:46:b1:3f:38:24:aa:38:00:49:
cb:30:73:d7:30:b3:11:17:3a:30:a6:05:a6:45:36:d6:c3:11:
21:a0:91:2f:47:e6:91:b1:f7:71:bf:b1:15:c1:d2:a7:8f:f4:
05:ef:bc:85:ba:39:ce:4d:ce:c7:77:99:bb:6e:d5:e6:39:b8:
da:2c:af:a3:d2:c2:92:db:dc:6c:60:cb:44:dc:d8:93:89:57:
2f:1a:f4:87:32:d1:1b:86:32:00:fd:f2:03:c6:78:61:c7:5c:
7a:2b:79:22:8e:99:8c:cc:bc:5f:c1:00:9d:1c:c3:ca:f5:27:
9d:b9:c0:22:ab:34:dc:cc:d9:6e:d5:39:4b:62:3f:4a:03:76:
fe:aa:61:57:ab:27:8b:c5:1e:55:aa:09:20:d7:d2:97:e5:84:
56:11:ef:71:83:aa:85:ca:1d:e0:03:36:02:48:e1:fa:3e:69:
62:96:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:44 2025 by rpki-client