Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: INOj+FrTxvarjchuviHTMShqArF3TLBu0gK3zu0yvpk=
Subject key identifier: 76:39:75:13:7A:CF:B2:D4:8E:12:12:82:17:01:C0:15:DD:6F:44:A2
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 019889C523EB3ECEE358AD406FFA36317462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 10C7
Signing time: Fri 08 Aug 2025 13:00:55 +0000
Manifest this update: Fri 08 Aug 2025 13:00:55 +0000
Manifest next update: Sat 09 Aug 2025 13:00:55 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: YAJhiKQr1Ayc3ISLCzKKSWTF0m4qAP5OhmeQ3ESrowE=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:23:eb:3e:ce:e3:58:ad:40:6f:fa:36:31:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Aug 8 13:00:55 2025 GMT
Not After : Aug 9 13:00:55 2025 GMT
Subject: CN=763975137acfb2d48e1212821701c015dd6f44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:6d:9a:7f:47:1e:2d:86:bd:e6:28:07:e8:
b6:c6:44:77:f0:a9:91:a8:bc:b7:ce:58:3b:9b:a3:
f3:4e:ee:d0:8a:d9:57:06:ca:1a:62:75:26:d7:17:
3d:fe:ca:83:ed:a0:0d:55:43:da:a9:cb:57:4b:38:
73:c8:29:e6:b7:b2:4d:1f:81:73:63:3f:72:02:c1:
96:75:91:7c:a2:d8:25:e0:13:7f:71:9b:54:f5:92:
60:73:0f:62:11:98:f6:dc:d3:43:15:4b:c3:5e:72:
2f:df:c5:06:15:bd:d8:28:04:d8:cb:05:44:05:26:
92:16:8b:7b:40:47:b6:c8:36:c8:4a:ec:72:fb:9a:
9a:77:95:bb:a5:75:2a:bb:f3:48:d4:4d:21:cd:11:
6b:22:34:ec:ea:75:fa:f5:fc:54:cd:4a:d5:8f:f8:
f7:6b:2d:6c:3c:42:df:50:54:e0:74:ef:a1:84:01:
36:cf:91:c7:be:67:b1:bd:e9:1e:6b:8b:5e:f8:25:
bf:7f:76:4e:77:6d:63:b1:ba:8e:d7:63:ff:c8:bc:
61:6a:78:1b:4f:16:1a:94:b6:79:64:23:50:c3:0b:
f9:c7:38:fd:a3:2a:a9:1e:17:f8:3f:55:28:cd:90:
d8:a6:c2:f9:88:10:b7:3d:17:24:e2:9d:b2:78:e4:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:75:13:7A:CF:B2:D4:8E:12:12:82:17:01:C0:15:DD:6F:44:A2
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:72:c2:d9:f4:82:e7:15:46:eb:1a:f1:40:71:80:d0:34:
73:5f:d9:91:53:5b:85:7d:6a:c4:57:df:32:bb:77:d9:bc:60:
33:3d:51:58:f2:b4:6f:ea:39:25:51:0b:c6:60:0d:92:1b:3a:
1e:3f:08:60:94:4e:e1:da:30:98:2f:0f:e1:84:40:43:e0:28:
31:2b:53:3e:39:c9:0a:ab:1e:3b:9d:e0:74:87:a3:81:4d:6b:
c9:b9:f7:37:3f:86:c6:84:8d:33:32:70:d9:e1:27:17:4b:ca:
43:7c:29:dc:da:7d:d1:57:ef:21:52:3a:d5:90:2c:c6:3a:b4:
b1:1b:45:03:f5:b7:e7:ce:03:b1:1e:bc:50:9c:b2:ff:cd:23:
71:8d:76:93:43:5c:b5:a9:bd:17:5f:42:d4:fb:92:cf:bb:1d:
7e:cb:c7:d1:e8:30:88:0e:f3:d6:89:7a:d8:2f:14:58:65:fb:
3b:52:e1:71:cd:25:53:e8:2f:7d:5f:5e:23:ef:da:14:5b:6f:
9a:d7:6a:51:2d:a1:46:05:96:04:2f:22:9c:7d:d8:a6:d4:56:
12:ce:b7:d4:8e:af:1b:97:22:ea:ac:4b:3c:86:03:5c:11:42:
25:4b:c5:5f:5e:19:dc:d4:d8:fb:cb:19:c5:ba:74:f6:34:a7:
58:5a:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:40 2025 by rpki-client