Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: swwoUzZCaL4dHHswIYcydkCDzUa/SfSr8LKKnm3IsLA=
Subject key identifier: A4:32:69:EE:3A:41:D3:18:27:6F:B4:FC:EE:E6:EC:97:EF:4C:34:63
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 019A4C611C3A59623CC79C2404A24C08E207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 053C
Signing time: Tue 04 Nov 2025 01:00:23 +0000
Manifest this update: Tue 04 Nov 2025 01:00:23 +0000
Manifest next update: Wed 05 Nov 2025 01:00:23 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: AjTsNmY9Gt3orGEo1eaLB+JMaWewkf8HOAvXKmUH0Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:1c:3a:59:62:3c:c7:9c:24:04:a2:4c:08:e2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Nov 4 01:00:23 2025 GMT
Not After : Nov 5 01:00:23 2025 GMT
Subject: CN=a43269ee3a41d318276fb4fceee6ec97ef4c3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:eb:35:bd:e0:3e:05:a6:ef:53:57:56:40:
f5:33:e2:0b:e3:da:db:60:c6:a0:6b:1a:00:f2:91:
5d:41:24:bf:8b:e1:52:07:ea:be:c5:cf:ea:72:fd:
d0:a0:ff:26:3b:e3:06:40:64:21:51:a7:34:85:27:
d8:64:5f:d5:e9:43:65:ae:6f:10:6e:b3:38:26:dd:
fc:00:d1:51:7e:91:15:01:c6:3b:bf:36:17:68:94:
eb:16:fe:47:8e:16:e6:29:81:0b:52:70:f4:0b:1a:
ca:29:39:55:a6:d3:58:6b:d4:27:f2:ac:eb:21:85:
8e:93:b7:44:ad:d3:9e:e0:8d:b7:93:7a:d3:c5:39:
05:d1:de:a0:0d:82:c9:43:61:cc:84:cc:2e:45:98:
3f:0e:c4:31:7d:34:8d:5e:8e:72:83:71:6f:74:d7:
7a:ec:e5:d9:62:c4:b6:f3:bb:8b:91:74:31:14:d8:
44:53:a6:79:c1:a5:95:dc:e2:e7:75:d5:a0:64:24:
d7:8b:96:d3:cd:ca:d0:5e:9a:1a:34:18:24:33:8d:
c5:d2:84:29:0b:a9:6e:c1:9c:83:20:94:7f:2a:bf:
da:65:29:7d:e0:13:39:77:77:0a:a2:cd:f1:f3:6a:
ca:04:91:15:7d:7f:10:bd:41:24:05:5e:11:b2:0b:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:69:EE:3A:41:D3:18:27:6F:B4:FC:EE:E6:EC:97:EF:4C:34:63
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:c3:34:10:ab:52:85:ba:48:8f:ba:62:f0:5d:8f:94:62:
90:0b:1d:69:66:6a:72:51:4a:46:fd:0c:14:a8:41:94:3b:e6:
f7:2d:18:6f:35:5d:b6:3f:53:5b:90:b5:b8:71:1b:f5:d3:c3:
1c:8b:d7:f1:aa:c5:df:03:92:8f:64:c2:8e:f9:5f:b1:ad:2a:
61:dd:f7:0b:74:99:07:bf:19:7f:b5:d7:37:91:65:4a:73:6d:
43:56:f4:02:5c:93:89:d0:8d:32:8b:0a:87:0f:ab:f2:02:40:
93:5b:6d:83:84:d0:8e:f7:cc:f1:21:9d:9d:cc:3c:4d:b3:47:
7e:eb:e5:7c:64:3c:95:43:1a:3c:fd:1b:58:18:b7:a4:d0:94:
54:dd:e6:cd:93:b2:a3:06:06:7a:3a:11:40:3a:16:f0:66:00:
f7:c4:d3:db:0a:df:64:88:01:80:22:d6:5f:cb:84:fe:14:c3:
4e:d7:c3:05:ce:0c:b8:2b:bc:77:de:25:fb:51:92:b3:d1:43:
55:3c:d5:93:3f:0b:0d:f2:ad:07:21:c6:f1:e9:08:ea:70:0c:
47:93:6c:77:a1:b1:77:02:1d:02:e4:99:b9:a3:6d:7c:8d:ca:
8c:98:ae:a9:b0:71:27:82:58:8d:79:7f:f2:d9:c3:35:a7:a7:
c0:1b:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:42 2025 by rpki-client