
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: qr+JBtxK8GvNAX8h+b/Mr/DSppaOg4fw0M8E+Uf55Hg=
Subject key identifier: 8D:4F:7F:2A:9E:69:12:F0:E5:4A:14:E1:28:A2:26:C5:06:60:C2:9B
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 01976C61B3C2BCCAAFFEBDADF33D18F51247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 05AF
Signing time: Sat 14 Jun 2025 03:00:31 +0000
Manifest this update: Sat 14 Jun 2025 03:00:31 +0000
Manifest next update: Sun 15 Jun 2025 03:00:31 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: ukZJgehDXshvc+aqlM9JtJzi8zPMEb3xgPPFSjbJqGs=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:b3:c2:bc:ca:af:fe:bd:ad:f3:3d:18:f5:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Jun 14 03:00:31 2025 GMT
Not After : Jun 15 03:00:31 2025 GMT
Subject: CN=8d4f7f2a9e6912f0e54a14e128a226c50660c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:96:48:b4:fb:dd:c2:05:73:4c:96:20:e4:
35:55:d6:60:0d:ae:2b:f9:9c:3b:39:d2:1c:8f:60:
16:aa:47:9a:be:9a:d4:9d:17:f7:2c:7c:c1:48:54:
7f:82:3b:8b:b8:7a:06:e4:cb:15:2f:8d:dc:dc:36:
9a:52:17:9f:3e:fe:62:f1:25:23:3e:a8:38:d7:f2:
8d:6e:89:9f:b4:20:d5:2b:ce:26:61:42:60:02:57:
c7:e2:5f:c4:82:d5:3f:62:86:54:f0:15:fe:4f:32:
2a:61:73:cb:e4:a5:53:78:5e:22:14:99:a0:52:44:
ee:e2:17:5d:ef:a5:2c:6e:1c:c9:a0:44:43:57:1d:
54:d0:24:d3:c8:19:ae:fc:96:97:5e:06:f7:ce:12:
0e:f1:ed:3f:33:5a:75:33:c6:65:75:53:0a:7e:8c:
f8:49:a0:56:5c:c7:ff:14:48:47:0a:3f:7b:88:69:
20:c7:6a:94:10:f2:98:12:19:36:fd:6e:37:d8:84:
26:4f:a0:4f:3e:6d:e2:e3:23:c4:c9:e9:ce:01:bc:
71:f1:fd:33:77:b9:44:a1:4b:53:ba:ef:86:c4:aa:
40:e5:5f:09:14:c5:ce:28:31:10:a7:79:61:1a:3b:
2e:bf:c5:f1:e1:5c:e2:f7:62:a0:ce:2e:69:0a:e5:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:7F:2A:9E:69:12:F0:E5:4A:14:E1:28:A2:26:C5:06:60:C2:9B
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:36:0a:e3:e7:e9:9a:ab:47:02:d7:1a:ec:72:b4:c4:4d:53:
ff:ae:00:a6:32:a7:01:b7:2a:25:e8:4e:0a:47:e7:f7:ed:26:
5a:4c:77:e5:29:df:72:cc:4c:93:f7:81:cf:1f:91:be:f5:51:
b2:41:6b:6b:16:21:b7:15:25:ff:30:55:70:ae:37:95:e4:f8:
1a:69:73:90:87:7d:91:5c:08:12:36:d7:94:74:04:45:9b:e8:
79:86:43:0b:88:fd:82:42:4f:a1:c3:b9:f6:a4:d7:72:e9:68:
43:07:a0:bd:c1:9b:c9:1c:89:1c:0c:73:e0:7a:5a:61:b3:a6:
16:ca:b2:a6:67:cf:60:23:04:3f:23:45:7e:2b:97:f1:1e:85:
6f:54:7f:cb:95:ea:9b:0e:94:fa:72:f2:63:64:ac:ed:57:09:
7c:8d:5b:bb:77:76:52:11:36:1d:60:ad:79:ce:20:ad:96:9d:
c0:76:b2:97:0e:09:a8:53:7f:17:05:c5:c0:c4:8e:2b:d5:99:
1a:4a:d6:34:11:97:9b:f1:a4:3f:39:da:46:dc:a3:ba:52:a3:
7c:e9:4d:90:4e:c2:7f:6d:2c:46:ac:c1:9e:69:bb:c9:22:d1:
82:58:e0:f9:3f:df:09:95:8c:e6:e9:3d:f5:f1:98:7f:e6:5c:
68:76:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:55 2025 by rpki-client