
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: 8nwJpl01Idbl04B+9ACphUX1pu2aaimQWIPHvNlhQuQ=
Subject key identifier: 1D:DC:8D:F9:B7:D6:0A:C6:32:27:DA:AC:5E:32:11:2E:7C:88:4E:C6
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019884319C0C3A6030F63643B2A848B1D77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 153D
Signing time: Thu 07 Aug 2025 11:01:40 +0000
Manifest this update: Thu 07 Aug 2025 11:01:40 +0000
Manifest next update: Fri 08 Aug 2025 11:01:40 +0000
Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: H28yvEabKFASd6loXcW3F8CtxfMY0zOFmgOAW8/cREI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:9c:0c:3a:60:30:f6:36:43:b2:a8:48:b1:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Aug 7 11:01:40 2025 GMT
Not After : Aug 8 11:01:40 2025 GMT
Subject: CN=1ddc8df9b7d60ac63227daac5e32112e7c884ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:80:f5:8c:9d:67:3b:b7:63:b2:be:eb:d6:
1f:eb:9c:20:73:25:5a:a1:de:9b:b9:4f:03:4a:50:
c4:c2:13:d6:0d:4d:ef:3b:1e:95:fa:da:2d:6f:c9:
f3:19:65:19:00:63:c7:0e:b0:12:e4:f0:6d:b9:c0:
19:3c:c8:06:68:fd:35:65:1e:78:67:3d:d7:01:9e:
02:25:83:38:66:ed:d2:8a:72:40:e2:0b:b6:1d:9d:
8d:6c:f6:4d:26:f3:be:be:82:b2:8e:51:c4:9e:db:
e2:f7:68:ca:d9:f6:6f:f9:f8:e6:fa:80:f4:c5:e9:
95:ac:a4:17:ef:fe:99:26:ce:1f:af:e1:09:34:24:
d6:0a:ba:f6:9f:13:ec:c3:d4:63:e6:29:0d:10:69:
74:8d:ea:e7:9d:39:32:cc:79:48:c0:db:ce:66:d0:
da:fd:87:c9:5d:af:01:9e:e3:09:eb:bf:48:2e:0f:
2f:a8:eb:d7:68:90:7a:a2:f2:a4:79:4d:ef:fb:79:
c6:23:ac:35:e3:4f:4f:aa:78:5d:01:fd:fe:23:83:
f1:f9:fa:96:54:45:55:59:0f:ac:1b:c1:94:76:c9:
f9:b0:87:98:98:5d:c8:2c:1a:88:4f:47:bc:df:40:
29:ba:c3:58:61:96:01:90:f1:44:65:8e:ae:68:9c:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:8D:F9:B7:D6:0A:C6:32:27:DA:AC:5E:32:11:2E:7C:88:4E:C6
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:66:c8:13:6f:d0:b2:76:7e:9d:bd:6e:3e:d5:07:c3:34:26:
d3:bc:cb:13:dd:48:49:d2:ee:e1:8a:25:d0:71:60:69:4a:c8:
37:ab:b0:36:57:46:c7:ef:06:b1:ad:fe:05:cc:6a:00:24:d5:
40:71:b6:af:48:7b:ef:ab:0a:ee:f4:b3:b7:99:67:37:cf:1b:
e6:2f:37:c6:a2:c4:24:91:4c:c5:f2:8b:23:dc:4d:1e:90:26:
06:9d:f2:e4:d5:95:0a:17:0e:d3:22:6a:a7:5f:f4:a7:e5:f4:
7c:9a:4c:7e:45:a2:05:58:81:f2:0e:79:46:2c:75:cc:45:b3:
ab:45:fa:6d:a6:61:c2:b3:31:17:5c:34:60:f5:5b:9a:68:9a:
d2:e7:90:c4:95:5e:9d:42:77:c1:1b:f2:a3:19:f7:a8:64:b1:
08:28:22:74:16:99:c9:94:fa:fb:d3:ee:1c:ee:76:33:9d:58:
cd:05:4c:af:10:6c:c0:ea:09:01:fc:0e:f0:25:b6:a8:10:97:
d0:e9:59:51:ad:1c:d5:dc:d4:6a:9c:14:09:ac:0d:35:28:49:
1f:84:94:b1:f8:b6:50:f2:40:ee:49:a9:e0:f0:ba:87:46:4c:
9d:be:bf:f8:9f:9c:1a:1a:b0:e1:ed:ab:2b:ca:6e:65:3c:1e:
22:09:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:35:54 2025 by rpki-client