Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: hrdaMTfVXrIl1Wj+NVz8M7/cLsdNp1bvKY+sppH9ONI=
Subject key identifier: C5:DE:42:3C:2A:87:19:F0:12:AB:DE:86:7A:C1:AF:A7:26:2B:B5:D4
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 01987E9CC0B1B9D80FA4B9847027CC810310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 063D
Signing time: Wed 06 Aug 2025 09:00:58 +0000
Manifest this update: Wed 06 Aug 2025 09:00:58 +0000
Manifest next update: Thu 07 Aug 2025 09:00:58 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: Sq/caTEo+3WQQHoXipQU+5Fa3bQ9PjKKqyoi3ofEiyA=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:c0:b1:b9:d8:0f:a4:b9:84:70:27:cc:81:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Aug 6 09:00:58 2025 GMT
Not After : Aug 7 09:00:58 2025 GMT
Subject: CN=c5de423c2a8719f012abde867ac1afa7262bb5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:cc:8f:18:78:31:a2:51:0a:a9:80:b3:dd:
bf:98:45:f1:41:27:e9:2c:47:58:da:2f:36:38:d4:
f6:53:33:8e:c4:a5:07:12:03:df:7f:91:54:a0:bd:
06:c6:85:da:22:08:d2:d5:23:ff:35:9e:f4:4a:f9:
81:f9:64:68:5c:e2:4e:73:c9:07:dc:d9:02:25:18:
b4:8f:78:a7:99:f2:56:1f:51:6a:97:ab:58:c4:42:
54:c1:19:34:e0:64:1f:75:cf:cf:ee:d2:ae:c1:44:
d0:10:a5:5d:fd:67:59:6b:99:a2:f8:24:6c:b4:1b:
e1:42:bb:1b:34:7d:0f:ce:45:61:45:17:f7:ff:fa:
e5:cb:9b:fd:4d:d2:d9:ae:dd:9e:e2:f4:f9:ce:3e:
43:73:36:15:cb:f4:7d:f4:cb:6e:05:a0:5b:d5:cd:
1c:ca:4a:f8:cd:0b:2c:56:eb:f0:74:88:78:69:d6:
e3:fe:a8:02:6e:a3:39:60:17:53:ce:9f:ac:61:22:
39:a2:2a:50:32:3e:18:4c:28:e6:c7:05:9a:4f:32:
28:18:30:d5:e4:d5:b6:bf:fe:09:86:6a:fe:40:1f:
c7:04:9c:e7:85:d1:c2:00:cb:a8:24:4a:7d:84:40:
d0:7c:b4:4a:4a:a5:f3:36:4c:2f:e5:c1:27:88:d6:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:42:3C:2A:87:19:F0:12:AB:DE:86:7A:C1:AF:A7:26:2B:B5:D4
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:a3:ea:dd:16:39:ca:63:98:ee:f8:44:9c:94:69:8f:5e:
56:b7:97:06:55:7f:9f:5b:58:40:64:31:a6:5b:f0:35:66:53:
65:ab:71:87:10:a6:13:8b:76:b2:d2:54:e0:93:8c:37:c2:86:
e1:5d:a0:1b:42:16:35:d1:fd:46:71:1b:ba:d3:72:aa:5d:11:
96:f1:9c:fa:12:a1:7e:fb:40:b5:61:81:8a:58:52:6b:64:e4:
79:b1:32:bb:72:1b:03:bc:da:01:ff:79:26:51:91:6a:4a:db:
c8:56:0f:ac:71:64:f7:69:5d:b2:ec:47:ae:5c:c4:e7:2b:0d:
e5:b6:14:91:89:bf:83:34:a7:96:3a:f2:58:dd:e0:b5:8a:48:
f4:19:ef:68:12:83:56:33:ca:3d:69:21:cc:97:9c:c0:46:77:
9e:0a:e8:31:a7:bb:34:c8:09:ca:e7:2f:a0:ee:c8:b7:2f:20:
a4:18:d7:4b:99:44:1f:8f:c2:b3:50:f2:25:b3:e7:4a:74:34:
5e:f0:e2:47:39:ae:ac:e9:2f:9d:e4:d1:7c:6e:78:5e:68:ef:
83:a9:a5:be:10:d2:5e:78:2c:61:2a:3e:d6:d5:6c:99:6d:52:
61:42:f5:c7:8c:c5:bc:05:7b:5b:40:97:65:cc:63:f6:a0:9e:
48:31:44:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nMCxudgPpLmEcCfMgQMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDE4ZDJhNTFmZWYyZDc2YzYyNjAwNTU2YzY2ZDU3Y2I3
ZTkyNzAwHhcNMjUwODA2MDkwMDU4WhcNMjUwODA3MDkwMDU4WjAzMTEwLwYDVQQD
EyhjNWRlNDIzYzJhODcxOWYwMTJhYmRlODY3YWMxYWZhNzI2MmJiNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXMjxh4MaJRCqmAs92/mEXxQSfp
LEdY2i82ONT2UzOOxKUHEgPff5FUoL0GxoXaIgjS1SP/NZ70SvmB+WRoXOJOc8kH
3NkCJRi0j3inmfJWH1Fql6tYxEJUwRk04GQfdc/P7tKuwUTQEKVd/WdZa5mi+CRs
tBvhQrsbNH0PzkVhRRf3//rly5v9TdLZrt2e4vT5zj5DczYVy/R99MtuBaBb1c0c
ykr4zQssVuvwdIh4adbj/qgCbqM5YBdTzp+sYSI5oipQMj4YTCjmxwWaTzIoGDDV
5NW2v/4Jhmr+QB/HBJznhdHCAMuoJEp9hEDQfLRKSqXzNkwv5cEniNZqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXeQjwqhxnwEqvehnrBr6cmK7XUMB8GA1UdIwQY
MBaAFHsBjSpR/vLXbGJgBVbGbVfLfpJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMt
NGRjMmRkNTZkNTdmLzEvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNmZkMGQtYTAyYi00OWMyLTlhMmMtNGRjMmRkNTZkNTdm
LzEvZXdHTktsSC04dGRzWW1BRlZzWnRWOHQta25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7Oj6t0W
OcpjmO74RJyUaY9eVreXBlV/n1tYQGQxplvwNWZTZatxhxCmE4t2stJU4JOMN8KG
4V2gG0IWNdH9RnEbutNyql0RlvGc+hKhfvtAtWGBilhSa2TkebEyu3IbA7zaAf95
JlGRakrbyFYPrHFk92ldsuxHrlzE5ysN5bYUkYm/gzSnljryWN3gtYpI9BnvaBKD
VjPKPWkhzJecwEZ3ngroMae7NMgJyucvoO7Ity8gpBjXS5lEH4/Cs1DyJbPnSnQ0
XvDiRzmurOkvneTRfG54Xmjvg6mlvhDSXngsYSo+1tVsmW1SYUL1x4zFvAV7W0CX
Zcxj9qCeSDFE4A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:14 2025 by rpki-client