Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: v9ylZKX6r2s7RMKbmr+e/5p3DUGnPJkkPm3G3Ga9BWQ=
Subject key identifier: 10:1A:1B:DB:13:7D:D0:00:97:5E:C4:EA:A5:F1:40:5B:83:BC:55:10
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 0198903551B19FAD358825B288A53ACFAD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 0456
Signing time: Sat 09 Aug 2025 19:01:10 +0000
Manifest this update: Sat 09 Aug 2025 19:01:10 +0000
Manifest next update: Sun 10 Aug 2025 19:01:10 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: vClc8Li/XtVeYR21Tsoi0/k2iNun/TzYAc1ALxNZj/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:51:b1:9f:ad:35:88:25:b2:88:a5:3a:cf:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Aug 9 19:01:10 2025 GMT
Not After : Aug 10 19:01:10 2025 GMT
Subject: CN=101a1bdb137dd000975ec4eaa5f1405b83bc5510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:19:9c:02:1b:8f:52:e9:49:3f:ae:60:98:
ab:65:23:f0:02:66:0a:24:d3:8b:5a:9e:78:d4:e0:
c7:60:dd:07:63:bf:ab:f9:cf:10:93:23:48:b5:f1:
45:7a:cf:b4:0b:21:bd:f5:f9:8b:1c:90:3a:82:3d:
9e:f4:6a:10:28:9d:45:fd:19:90:f3:c3:d1:ed:35:
06:25:e5:8c:f1:2d:56:b5:65:cf:9f:62:f3:98:b0:
2e:25:63:18:d2:3d:c3:62:fe:be:a8:4e:a8:5e:a2:
e9:c5:c4:d3:b2:e3:ac:da:38:9a:7c:ac:8c:7c:8a:
20:cb:45:6e:0b:bd:84:b0:18:9a:9b:d5:52:a7:3b:
51:bd:08:26:01:52:53:5f:0b:26:18:d9:c0:d6:0f:
db:bc:18:f3:4d:7a:cf:9c:58:cb:fe:01:3c:56:73:
5b:fb:8b:f5:dd:96:af:25:35:cd:e2:24:75:0c:4c:
a5:71:a1:c5:82:86:2b:f3:00:28:53:6a:47:4d:24:
4f:37:41:29:d4:e9:80:b7:52:79:10:d2:cf:9d:01:
c4:19:fc:1d:fb:66:b7:11:aa:25:43:d2:fc:31:be:
c7:c5:d0:63:f6:5a:28:71:f2:86:27:16:71:ce:e9:
e8:a7:e0:7d:3b:88:0c:0c:be:d0:f8:39:07:4c:a4:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:1B:DB:13:7D:D0:00:97:5E:C4:EA:A5:F1:40:5B:83:BC:55:10
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:60:71:8f:3a:2b:ea:44:9f:94:eb:9b:f1:67:8c:ce:7d:30:
27:05:4d:06:70:91:1d:b3:a5:b9:71:0d:b0:9f:34:6d:f3:48:
ac:52:f6:e6:38:46:66:2f:29:3e:f6:d3:39:3f:b1:60:6c:f5:
51:91:d4:be:46:8c:4e:58:2e:78:b9:4d:13:c8:0a:3b:4f:7b:
0b:e0:8c:2c:a0:a3:5b:e2:ca:ad:45:86:07:0a:b2:77:f4:b8:
09:ac:a7:42:7a:6e:5f:0a:30:1a:fe:fe:79:fd:dc:c2:6b:2c:
f3:34:ce:59:e2:6b:c7:18:db:be:81:37:9a:bf:d3:88:9f:ba:
21:37:39:4b:39:3a:15:f7:4a:08:d3:0b:8a:ed:7b:89:bb:be:
35:87:61:3a:f3:a6:f8:68:69:c1:5f:4c:02:22:ea:85:27:ba:
71:99:f1:5f:b1:01:5a:3b:4a:c6:2c:2d:45:59:62:d1:17:de:
c4:7a:61:c4:43:7b:86:f1:ec:43:f7:85:0a:89:32:db:6e:8d:
03:9c:ec:98:db:26:54:c1:ac:6e:b1:fc:8b:00:87:5c:8f:88:
97:78:88:7e:a2:01:08:2a:d2:c7:6b:1e:e3:c3:bc:4e:3a:0c:
fe:95:cc:f2:a0:ec:df:98:a1:60:7d:7d:a8:15:28:10:46:1a:
66:77:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:29 2025 by rpki-client