Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: aNire53stxTZxf3dKpP7inDRCQ860fCOadF72nN2L34=
Subject key identifier: 51:D2:F0:A7:06:BC:E9:AB:76:7A:A7:24:7E:F3:F8:33:F1:A0:DE:51
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 019879AE92CA010E21161D52F30E471FB06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 13CA
Signing time: Tue 05 Aug 2025 10:02:20 +0000
Manifest this update: Tue 05 Aug 2025 10:02:20 +0000
Manifest next update: Wed 06 Aug 2025 10:02:20 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: zK7k3AuJQHuq1utsnxikQrbvvgjgNLWzhnevMTmAIBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:92:ca:01:0e:21:16:1d:52:f3:0e:47:1f:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Aug 5 10:02:20 2025 GMT
Not After : Aug 6 10:02:20 2025 GMT
Subject: CN=51d2f0a706bce9ab767aa7247ef3f833f1a0de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:ce:e2:e6:f6:fb:b0:32:08:a5:c3:27:85:
b0:ce:d5:ee:16:6a:c1:fa:ea:6f:e9:bb:30:3e:9a:
6d:a5:d7:4c:ef:75:dc:ea:59:48:1b:d3:29:7a:92:
91:ac:f5:e3:77:62:18:f8:cd:d0:fb:30:fb:6b:3e:
35:df:68:ab:88:90:d2:bb:f6:a4:4a:90:5f:29:49:
dc:10:45:a7:9a:01:d9:28:c3:35:9e:e8:94:9b:26:
10:93:fc:28:25:f7:b1:fd:b2:3f:82:46:3a:ea:b1:
f8:ca:95:e0:c9:cd:32:ed:a3:76:80:93:99:7e:1d:
27:66:b2:f0:9a:7b:4d:a3:51:36:77:a0:31:4f:73:
df:cd:5c:9b:4a:35:41:ac:d2:8a:10:fe:8f:36:44:
ec:b1:47:b9:a4:a6:66:58:79:5e:3c:1e:67:88:d8:
d3:4a:52:3b:6e:19:16:bd:dc:11:01:94:a1:1d:d5:
6d:b3:92:86:77:9d:96:53:65:ef:2b:fb:6c:61:90:
d7:e5:df:5a:b0:84:b9:f1:aa:99:75:37:44:d3:b5:
0a:98:24:51:e8:c3:90:26:1b:74:46:e1:41:4d:b6:
05:4d:67:34:3e:49:6e:0f:10:12:34:80:86:31:56:
93:a5:35:e0:1c:22:eb:98:79:2e:f1:8b:d8:60:a2:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:F0:A7:06:BC:E9:AB:76:7A:A7:24:7E:F3:F8:33:F1:A0:DE:51
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7a:e5:74:60:d8:e1:9b:19:a9:4d:8d:3b:5f:b0:df:87:cf:
dc:3a:bf:73:29:e2:c7:29:95:48:1e:0c:40:f7:3e:aa:42:df:
16:95:91:ac:db:36:e7:bb:19:a1:b4:4d:4a:94:df:8d:5f:79:
59:ac:a8:6c:3d:d2:20:fc:93:27:4b:9a:8d:dc:72:15:44:bc:
b9:9d:ea:b9:99:1a:8f:36:e4:f8:8f:86:da:06:47:f7:c2:e8:
48:2e:a6:2e:a8:39:fd:ed:37:1d:2f:ed:3f:32:b2:8b:c9:d5:
04:8f:6d:e5:36:af:9c:ec:79:24:04:47:50:39:93:84:d6:d1:
a6:b0:65:49:7d:b4:0d:ba:97:da:db:1d:f4:a5:87:74:88:b1:
05:12:2d:1b:6a:b1:e3:42:c3:e9:01:e0:cf:61:fa:8e:76:79:
5b:b3:dd:42:11:bc:86:62:af:ad:86:5f:b6:93:02:ea:8f:a1:
1b:a8:12:c8:56:1f:d5:38:2b:fa:85:36:41:b1:46:04:9f:c2:
ab:a5:c7:57:6f:e4:19:e0:5f:bf:d8:7b:e8:ee:b3:8b:c5:a3:
b9:07:06:d7:89:e6:6d:87:c6:1c:b9:97:77:5a:b8:f1:3b:aa:
d2:04:d5:35:13:08:d5:91:7e:65:b5:d0:21:35:9d:6a:c4:21:
e6:87:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:02 2025 by rpki-client