Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: 6eAZiXaL77f0z1v04YXqqQ5itKFxxza/LvGQGIHL5To=
Subject key identifier: 7B:93:5E:7E:3A:C7:68:4D:B6:15:2F:70:FE:A2:11:7E:1C:E5:74:D0
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 01984AE57CE129D3BF4910FF8F045AEBD60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:10 +0000
Manifest this update: Sun 27 Jul 2025 08:00:10 +0000
Manifest next update: Mon 28 Jul 2025 08:00:10 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: K6IQrTUVLnPjJnvrOvT6JHapMMdBTEfSQY97d7xbkvc=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7c:e1:29:d3:bf:49:10:ff:8f:04:5a:eb:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Jul 27 08:00:10 2025 GMT
Not After : Jul 28 08:00:10 2025 GMT
Subject: CN=7b935e7e3ac7684db6152f70fea2117e1ce574d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:ea:16:92:24:02:e3:32:30:36:59:97:2f:
89:fb:fa:25:89:c4:b1:32:23:a4:d3:23:ab:64:46:
38:fc:fa:b1:fb:30:7a:c7:bf:73:21:4c:a4:11:c4:
78:03:21:8f:8a:27:5c:3f:e1:f4:14:b2:b6:7d:a3:
b5:2a:3f:6f:5b:5f:0a:21:85:fb:05:42:20:7d:2a:
39:b4:f1:ba:e3:0c:6f:30:a6:05:0e:81:7b:8c:6f:
e5:84:69:0e:45:f5:87:40:5a:68:4e:84:a5:fe:ab:
5c:99:97:92:e3:6e:f7:71:bb:09:82:fb:36:97:33:
b5:69:3d:f2:ef:1e:6c:43:d5:ae:c9:aa:d7:97:dd:
a6:08:25:80:02:83:62:8b:63:ab:a4:b8:75:ca:d7:
b6:ff:fd:6f:5c:1c:72:4d:56:ad:8f:62:99:27:94:
33:c6:50:b7:cb:85:b0:09:c7:b6:7d:3c:16:2d:68:
1f:d1:18:7c:ff:11:66:b0:7a:9d:cf:de:b5:0f:e6:
86:f2:ea:f4:50:f6:ee:a6:50:40:51:9a:6b:b4:3c:
ce:10:7b:22:71:a1:3b:a4:14:c9:32:77:c3:08:b5:
f1:a3:0c:9e:52:da:c4:37:95:92:bc:a7:5d:8a:69:
2a:43:63:10:e6:a5:41:83:09:43:e4:e9:f1:f7:75:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:5E:7E:3A:C7:68:4D:B6:15:2F:70:FE:A2:11:7E:1C:E5:74:D0
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8b:ea:13:80:c6:50:81:a8:4a:38:5a:9d:03:b8:5b:4d:04:
69:91:18:da:db:55:d1:ed:48:73:99:ac:10:b4:8c:6c:52:0c:
24:03:13:16:21:8b:62:15:fc:88:63:0e:36:6c:e5:53:44:68:
98:03:c9:23:26:1d:9c:0a:92:ad:f8:38:c4:c1:ba:6f:f1:e6:
a6:30:9d:b6:48:b1:7d:93:cf:1c:a0:51:45:8c:49:5b:89:7b:
1f:31:01:83:6c:d6:18:c8:a2:ea:12:30:e4:04:ca:45:17:82:
4a:5c:18:b8:9b:88:53:45:79:b5:da:1c:67:41:50:6b:91:7e:
f3:1c:dd:f9:0b:a4:4d:8a:12:f8:19:bd:47:27:6e:66:91:25:
1e:3f:68:f7:10:12:83:0c:da:cb:ce:c7:d1:8b:80:f0:1f:4b:
c7:08:22:a1:e7:a7:bc:12:0a:6a:02:58:03:68:49:23:40:f6:
76:32:87:2d:22:4f:b9:b5:ac:0b:c7:e0:c1:14:ab:28:85:83:
64:c7:83:d3:58:ab:11:05:f5:8e:f5:8b:e8:4a:0b:26:3e:82:
7c:d3:f2:aa:4a:99:12:e9:91:28:4f:b3:15:ef:51:1c:d0:a2:
1a:5a:6b:48:8a:8b:b8:00:15:c1:56:85:67:eb:69:c4:af:45:
61:aa:a6:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XzhKdO/SRD/jwRa69YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz
YTEzOTIwHhcNMjUwNzI3MDgwMDEwWhcNMjUwNzI4MDgwMDEwWjAzMTEwLwYDVQQD
Eyg3YjkzNWU3ZTNhYzc2ODRkYjYxNTJmNzBmZWEyMTE3ZTFjZTU3NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLqFpIkAuMyMDZZly+J+/olicSx
MiOk0yOrZEY4/Pqx+zB6x79zIUykEcR4AyGPiidcP+H0FLK2faO1Kj9vW18KIYX7
BUIgfSo5tPG64wxvMKYFDoF7jG/lhGkORfWHQFpoToSl/qtcmZeS4273cbsJgvs2
lzO1aT3y7x5sQ9WuyarXl92mCCWAAoNii2OrpLh1yte2//1vXBxyTVatj2KZJ5Qz
xlC3y4WwCce2fTwWLWgf0Rh8/xFmsHqdz961D+aG8ur0UPbuplBAUZprtDzOEHsi
caE7pBTJMnfDCLXxowyeUtrEN5WSvKddimkqQ2MQ5qVBgwlD5Onx93UOPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuTXn46x2hNthUvcP6iEX4c5XTQMB8GA1UdIwQY
MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt
OGJkZjk4YzBjOGYwLzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw
LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhovqE4DG
UIGoSjhanQO4W00EaZEY2ttV0e1Ic5msELSMbFIMJAMTFiGLYhX8iGMONmzlU0Ro
mAPJIyYdnAqSrfg4xMG6b/HmpjCdtkixfZPPHKBRRYxJW4l7HzEBg2zWGMii6hIw
5ATKRReCSlwYuJuIU0V5tdocZ0FQa5F+8xzd+QukTYoS+Bm9RyduZpElHj9o9xAS
gwzay87H0YuA8B9LxwgioeenvBIKagJYA2hJI0D2djKHLSJPubWsC8fgwRSrKIWD
ZMeD01irEQX1jvWL6EoLJj6CfNPyqkqZEumRKE+zFe9RHNCiGlprSIqLuAAVwVaF
Z+tpxK9FYaqmEw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:43:33 2025 by rpki-client