Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
File: ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json)
Hash identifier: xuFbnX7D7sS1WFYo6bEtjcnAeWP1a2kv3XGoGo6calM=
Subject key identifier: 90:C1:EF:D8:C2:29:F6:41:8E:2F:47:E6:7D:25:34:CD:A1:86:8C:CB
Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Certificate serial: 01987486DE14A3916B198D0BA9D2F6E19EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
Manifest number: 1F
Signing time: Mon 04 Aug 2025 10:00:52 +0000
Manifest this update: Mon 04 Aug 2025 10:00:52 +0000
Manifest next update: Tue 05 Aug 2025 10:00:52 +0000
Files and hashes: 1: dxY0xMgnrZPFPdIhvpK7XNi03Bw.roa (hash: TWZjpr/lUtZY8GDwW5uWh6y9SEA92i+QvT7Y+hDT3YI=)
2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: VNTCpWeIX9P8nZ/qnAzw+FA+iy/IbVGlUuaPvPUpCao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:de:14:a3:91:6b:19:8d:0b:a9:d2:f6:e1:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Validity
Not Before: Aug 4 10:00:52 2025 GMT
Not After : Aug 5 10:00:52 2025 GMT
Subject: CN=90c1efd8c229f6418e2f47e67d2534cda1868ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:e0:6a:0b:c5:f9:a8:aa:3f:21:16:96:17:
55:81:fb:85:bc:f3:c5:07:b2:b1:2b:bc:5e:bd:8b:
b7:17:f7:73:7f:0b:e3:20:6f:07:ca:76:43:d1:16:
51:54:76:01:e5:f1:61:e8:cd:f6:a0:fc:ae:dd:59:
e1:c6:b8:f9:43:4e:ed:57:ac:d5:78:67:3b:f5:11:
09:6c:61:7d:e2:c5:b2:13:bf:8c:cf:21:2a:48:f1:
c1:bb:60:61:be:13:99:20:b8:d4:3f:16:38:20:d7:
c9:01:70:52:66:66:e0:d8:00:4f:a9:00:97:25:b7:
3e:b3:95:ec:80:15:f4:4a:0c:65:f0:8d:0b:32:ae:
93:72:f4:67:0e:95:0e:8b:9e:b0:e8:b1:6f:f8:50:
01:ed:28:89:c3:e1:cb:15:a0:95:fd:da:b5:fd:85:
c1:a2:82:a2:7d:43:60:cf:2f:f6:8d:8b:d5:f9:ba:
a6:a8:65:00:51:57:f3:53:4a:90:49:20:39:ad:8c:
0d:b5:7e:b0:8a:03:a2:0e:58:bf:1d:0b:7d:70:20:
39:30:29:6e:0f:65:6c:a7:b9:43:dd:8a:ea:cb:d1:
ae:6d:82:06:c1:09:86:e9:b6:7b:55:6a:b9:32:04:
c4:21:07:8e:2f:35:1a:44:58:35:b5:21:65:5d:55:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:EF:D8:C2:29:F6:41:8E:2F:47:E6:7D:25:34:CD:A1:86:8C:CB
X509v3 Authority Key Identifier:
keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:ff:78:0f:6a:bc:1a:33:53:8d:17:ea:aa:ad:4b:d1:1e:
e3:10:33:d3:32:3d:b4:74:f4:68:41:1d:93:e0:58:56:b7:97:
b0:39:38:5e:7d:14:75:17:85:25:1f:18:92:42:d2:20:a1:20:
2b:18:7e:6f:67:95:73:48:51:d6:57:08:fa:1e:f4:7a:fe:9d:
bf:8b:0e:ab:fc:c8:a1:cc:89:cc:7e:41:02:03:02:4e:c1:f4:
b0:fa:70:e1:34:8e:40:57:04:ca:2e:82:47:95:a7:11:b7:ae:
4e:67:54:d3:cb:a6:d1:55:5c:de:d3:1c:62:e3:74:38:48:51:
aa:0c:85:af:7c:93:5c:8c:2f:b6:ee:fc:59:a1:1e:78:32:d3:
bb:19:b6:68:83:6f:df:c5:58:33:d8:89:78:87:81:08:22:d3:
73:ec:ee:39:8d:62:81:24:0b:b2:23:0b:35:a9:58:46:8d:30:
f5:d9:1d:8c:97:f2:13:da:07:00:46:7d:19:19:73:f3:cc:cd:
04:65:8c:1e:ca:f2:b4:77:66:bf:92:d9:a2:84:0b:e9:85:23:
33:92:84:97:0b:ba:78:80:5a:f0:ad:2f:d8:a5:9f:a7:1e:7c:
b6:11:f6:86:07:66:7b:10:90:bb:58:78:3d:6e:3f:3f:3e:f5:
2f:f6:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:16 2025 by rpki-client