Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: VnDOgjAxBstuSfhiQJWw0+oQUlaWYQLAfNjDHXWg1ow=
Subject key identifier: D8:97:7C:B1:E3:89:8A:4B:0C:51:78:36:D9:06:FA:1E:5A:38:73:F4
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 019A500765C2F14A41E45CDB779D88D25D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 07A1
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: +ewI2gw8y+yxCSI6k027G9UD48D/EGLIIm19v89HTt8=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:65:c2:f1:4a:41:e4:5c:db:77:9d:88:d2:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=d8977cb1e3898a4b0c517836d906fa1e5a3873f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:a3:37:51:4b:43:5a:1e:e1:d1:a5:fb:7c:
bf:b2:cd:e1:f8:77:89:49:29:65:a0:50:5a:d4:f0:
8d:3c:c4:a4:3f:8a:14:28:6c:e4:e3:69:8c:e1:f0:
f0:9a:6a:63:90:93:1a:6b:8f:f4:a0:e1:df:30:bf:
bf:52:7f:c1:8d:32:d5:e8:44:b6:e5:a4:aa:45:b8:
42:8d:78:7e:27:1e:23:8f:1b:19:71:fe:52:b2:bd:
ff:cf:58:c6:1b:75:e2:17:51:2b:9f:ee:1b:a6:95:
3c:fc:05:96:5e:6b:4a:d6:00:36:e3:d6:f8:f0:c3:
46:61:9d:89:9f:8b:9b:52:23:46:14:46:57:ed:51:
8f:81:24:df:1a:8f:57:93:3f:35:14:a4:f7:c2:38:
45:09:a1:1d:a3:06:56:94:41:ae:aa:33:af:80:94:
65:b4:97:8e:e5:95:2c:a6:3a:6d:af:f5:da:b3:21:
b7:e8:2d:65:2d:25:3f:eb:a7:ba:60:c8:26:7f:36:
ab:2d:ba:67:9e:91:d7:88:15:af:13:c7:8e:54:c3:
55:d0:86:bf:ae:77:82:42:8a:f8:6f:9e:bc:3f:49:
8f:c4:73:34:1b:03:a8:4c:bf:a8:02:7d:a4:e7:ee:
35:91:83:c4:14:e7:16:a0:8b:c1:cf:7d:4c:e9:65:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:7C:B1:E3:89:8A:4B:0C:51:78:36:D9:06:FA:1E:5A:38:73:F4
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:76:6c:89:6a:ac:42:97:ee:ef:34:a1:18:7e:6a:38:ef:
46:d6:35:42:09:0e:b8:85:40:3e:10:dd:fa:4c:8b:4c:8c:00:
3f:2e:c6:e3:86:b6:5d:7c:d3:81:14:07:67:c0:5a:8e:0e:db:
4d:38:c1:8d:59:c4:82:4a:2a:fb:43:df:7d:a8:e1:65:d2:c8:
53:eb:22:88:af:78:7e:0e:5c:2d:3f:ac:f4:1c:5f:4c:ff:68:
ae:93:f0:71:77:c7:ba:4a:b6:7e:77:f4:24:e6:cc:7a:47:20:
a5:5f:d4:f9:42:09:18:c0:7b:58:be:bd:c9:b0:81:12:56:4e:
9e:3e:e2:7f:64:fb:53:d3:5b:57:74:d2:63:15:7c:be:4b:47:
2f:73:2a:8a:d6:c8:14:bb:61:8c:6e:11:28:f2:57:df:65:e3:
b6:4f:83:16:04:83:fa:6e:b9:9b:54:af:8b:36:e5:39:08:4f:
e7:72:2f:a3:95:4b:43:16:4f:cf:63:14:14:66:1b:5c:b4:4f:
14:1a:80:c0:c6:ca:c2:8e:8b:73:7a:a5:ad:59:23:ba:8b:27:
56:ae:62:e9:f6:24:01:5e:6c:87:e3:f2:b3:96:af:9b:56:02:
f9:eb:74:b7:23:cd:4b:e9:50:56:b9:5f:bc:74:6b:1e:ad:d5:
63:2a:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:02 2025 by rpki-client