Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: GmfTEwr+4j/beSz+5RCAC+y44uUZ1Ye04wr7YrY2zEY=
Subject key identifier: 11:53:39:B6:7F:6E:9C:92:9A:15:7C:E3:D6:37:03:48:2A:85:B9:C5
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 0197688514BD647CA58ECCCDFB909B2FC8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 0620
Signing time: Fri 13 Jun 2025 09:00:41 +0000
Manifest this update: Fri 13 Jun 2025 09:00:41 +0000
Manifest next update: Sat 14 Jun 2025 09:00:41 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: /4dYJ6fEJJl4D8He0WnE1g4fEzmMNvvuf5ZWZfNL4E4=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:14:bd:64:7c:a5:8e:cc:cd:fb:90:9b:2f:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Jun 13 09:00:41 2025 GMT
Not After : Jun 14 09:00:41 2025 GMT
Subject: CN=115339b67f6e9c929a157ce3d63703482a85b9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:25:70:7c:b4:7f:30:d4:cc:c7:3a:1a:2c:
f3:f8:1e:dc:43:50:48:00:8d:3d:92:dd:8c:ee:c6:
9e:74:36:c4:d7:e4:35:e1:d7:fe:da:99:0d:e6:42:
7c:08:90:7c:0f:0d:9f:90:8d:16:e8:c2:35:96:ac:
58:7b:da:f4:dc:c6:c6:a1:f4:81:17:e2:e4:64:64:
a6:d5:d1:b7:75:bc:63:12:e3:f5:38:34:03:2d:02:
ab:d5:b9:ec:e0:71:de:8b:33:ed:8d:c6:93:ab:ca:
5d:d5:8c:0c:ea:94:e5:57:5f:0e:c6:f6:9c:63:ab:
45:6f:c9:0e:62:89:52:76:73:23:2b:2a:2d:5c:0e:
b3:d5:cd:2c:a1:b9:41:26:cd:08:c4:c7:b5:51:8f:
ef:e3:e1:65:29:a3:8f:1c:00:7f:86:05:04:85:b5:
ad:91:a8:20:83:bc:10:79:2d:7c:07:aa:9a:f6:2e:
52:c3:a8:3d:32:db:c3:28:6f:28:9c:d0:ac:36:fe:
cd:07:d8:9f:42:4c:e9:5f:9a:c8:6c:40:79:b9:ff:
b0:5a:4c:8d:31:94:54:ac:6d:d0:2c:63:51:b9:03:
38:99:a7:3f:64:41:49:1e:24:7e:27:50:b9:74:f6:
70:f6:ae:c8:ad:b7:aa:46:53:87:37:4d:f9:48:63:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:39:B6:7F:6E:9C:92:9A:15:7C:E3:D6:37:03:48:2A:85:B9:C5
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:da:13:62:96:e8:bf:0e:4b:4b:dc:50:59:37:e5:38:9d:7e:
1f:90:b8:51:c5:e6:83:b5:be:71:49:5d:e6:cc:a6:80:46:3f:
e7:00:af:84:ad:e0:8c:6f:fb:29:1a:08:0e:6c:73:4f:62:37:
a7:c3:32:da:72:e5:03:46:4a:24:82:84:13:6a:4f:a8:f4:3c:
77:d3:fb:e5:88:d5:65:61:39:99:33:43:47:25:dd:62:81:ec:
e9:1c:bd:92:28:9c:e5:c7:85:db:1c:bc:e6:82:b1:84:bf:04:
f1:1a:e3:e2:76:e8:fd:79:f0:13:93:9e:df:33:42:0a:53:ba:
6d:80:51:21:61:e5:be:e4:0b:4a:dc:91:69:8c:2b:30:03:d2:
df:76:0a:18:b9:bd:10:cc:6d:13:78:2a:71:47:f2:af:88:53:
0e:d4:88:38:f6:a3:c9:3e:c4:6d:67:ee:00:10:45:6b:36:c7:
3e:0c:34:11:9b:32:8f:2a:a4:85:01:cf:15:67:23:68:d9:ce:
8a:97:ce:1f:c8:30:4e:d6:b6:b1:9b:10:00:3f:d3:b1:4b:32:
04:29:d3:63:fa:f6:22:a6:00:fd:82:55:75:7e:8e:5a:17:dd:
ec:03:c9:1b:43:0d:9d:04:23:aa:76:0d:23:21:9e:e8:d6:5b:
80:c5:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:48 2025 by rpki-client