Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier: gHdiZWgsgplBhgTFWfrMRhi1LgcFEKoF6ep2g6oAgtI=
Subject key identifier: 7F:A8:8D:64:73:71:FC:72:89:AA:CA:2E:4F:61:94:78:DD:46:D5:7C
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial: 019896DC1DEBE5768EBEC1575F5A5A415766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number: 1128
Signing time: Mon 11 Aug 2025 02:01:04 +0000
Manifest this update: Mon 11 Aug 2025 02:01:04 +0000
Manifest next update: Tue 12 Aug 2025 02:01:04 +0000
Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: 2w6cYzgrpn7uG/Sh9FhgbJWU9HN0I0cdaz/8hjsmehk=)
2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:1d:eb:e5:76:8e:be:c1:57:5f:5a:5a:41:57:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
Validity
Not Before: Aug 11 02:01:04 2025 GMT
Not After : Aug 12 02:01:04 2025 GMT
Subject: CN=7fa88d647371fc7289aaca2e4f619478dd46d57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:6c:a0:20:87:92:e5:94:e1:f0:cc:ca:0f:
3a:7e:cb:1c:a4:a7:51:67:c6:7c:8e:12:22:4b:53:
3c:07:ab:c3:7b:32:4f:6a:b5:38:5d:7a:86:f5:45:
df:eb:a3:b8:41:86:86:b0:0d:81:75:0a:39:d6:5e:
6c:11:f0:af:1c:cd:05:0a:d8:83:07:43:39:d0:6c:
54:cf:8e:16:70:6c:df:79:9b:08:85:ce:7a:dd:59:
c7:19:58:3f:6f:1c:08:8f:f9:c1:de:8e:c7:39:06:
23:70:64:e6:6f:c3:3d:8a:c0:dc:3c:85:4e:a8:9d:
9a:fe:3d:28:eb:42:81:de:6e:06:b4:18:15:c8:3d:
5e:06:89:d6:26:a7:63:a8:7a:91:26:b7:fa:c4:c3:
2c:f1:2a:6c:eb:84:27:39:73:e0:2a:08:fb:66:8e:
be:cc:2f:ba:07:32:82:c8:18:7f:77:08:a0:61:44:
f8:84:2d:46:c2:a5:86:fa:07:6d:29:84:5b:1a:e7:
08:7d:eb:ec:a0:f5:40:0f:c7:2a:07:ed:dd:3b:10:
2d:81:bf:e8:75:92:7c:d3:56:e6:ba:11:cf:db:cd:
e3:f7:03:46:07:a9:d9:0e:87:a0:9b:5d:77:1e:ed:
4b:ef:23:27:62:c2:3f:78:88:29:9a:01:4f:ec:4a:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:8D:64:73:71:FC:72:89:AA:CA:2E:4F:61:94:78:DD:46:D5:7C
X509v3 Authority Key Identifier:
keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:64:16:6c:12:15:72:13:ca:a9:84:08:2b:dd:5b:c5:1e:ab:
e6:70:5b:39:fc:f6:be:0d:05:f9:0f:54:51:a0:6c:d2:71:81:
c4:3b:ca:5d:2d:22:43:8c:a5:6b:f8:85:d0:81:cd:6e:f3:54:
bc:a9:8c:7f:4e:40:a7:c6:eb:e6:dd:fe:40:e5:52:75:ce:d0:
aa:17:24:ba:87:b8:7d:c4:36:11:e4:53:be:85:48:92:95:a0:
5b:02:63:3a:94:e0:62:a9:42:84:db:a4:d2:2d:c1:41:75:13:
31:65:38:5c:d8:27:2d:b5:77:47:31:cf:b9:10:b9:ac:c1:d3:
e1:09:46:66:95:2d:d6:d7:94:94:38:dc:a7:26:4b:c0:15:76:
d5:95:1d:a8:6c:33:50:6c:21:66:75:e4:4a:33:f8:34:5b:18:
22:ba:9e:52:ec:c5:b9:6b:d6:0a:89:ab:19:6e:61:b1:4d:f3:
74:43:93:d3:cc:7c:14:00:3c:91:b9:e7:13:d2:82:18:e7:ac:
6b:2b:db:80:9c:a2:76:3c:50:e0:ab:72:36:c7:4c:76:c8:95:
bf:9f:8a:c2:a5:b3:6c:e5:e7:3a:97:ce:71:a3:5b:03:c1:8e:
b9:a1:4d:d8:0c:30:64:23:e9:c0:c4:6f:da:f3:f0:df:ba:79:
8f:86:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:22 2025 by rpki-client