
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: GU5A/9y6+/EfWExwXgMDqp+N3Vqfrig3e06lJGFEdIQ=
Subject key identifier: 7A:C4:1C:67:DA:D4:90:D2:BB:D5:C6:0D:F0:7D:F8:B9:99:6F:9E:2F
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 01984776AE045D7E0CA706E8DC0A8889E760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 13B0
Signing time: Sat 26 Jul 2025 16:00:16 +0000
Manifest this update: Sat 26 Jul 2025 16:00:16 +0000
Manifest next update: Sun 27 Jul 2025 16:00:16 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: bylo4L/f1aA39hXi9MYcS3PaoA7H8yk/rdDIsmsw5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ae:04:5d:7e:0c:a7:06:e8:dc:0a:88:89:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Jul 26 16:00:16 2025 GMT
Not After : Jul 27 16:00:16 2025 GMT
Subject: CN=7ac41c67dad490d2bbd5c60df07df8b9996f9e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:3e:01:4b:6e:6c:27:8d:5f:9f:95:bb:ee:
8d:72:87:53:da:b5:0e:97:04:8e:05:7e:11:ce:84:
91:b5:18:fb:1f:b7:b1:e3:73:d8:19:e2:ae:76:ef:
cb:87:9c:61:d5:b1:b0:98:05:a8:12:e5:3d:ce:ff:
ff:78:fc:63:44:7c:f7:9e:6b:8c:f4:05:1e:ce:14:
ab:3d:a2:27:e7:f2:41:83:4d:c8:6c:09:94:ac:7b:
f1:6a:e5:c4:42:10:4b:1b:c0:3d:8c:2e:7a:89:79:
63:4f:1f:a1:cb:27:8f:60:3b:65:14:8d:1a:83:d4:
02:a4:87:41:62:5e:fd:5c:ef:5e:c3:dd:54:67:66:
d0:e6:09:a5:7b:71:6e:2e:20:b3:22:4a:f2:30:2c:
81:e0:4e:d3:14:fb:3f:e7:44:ce:36:b2:3c:24:a5:
8d:8b:fe:ea:5c:bb:74:9d:ac:80:eb:e6:63:25:7e:
38:de:9f:24:c2:fa:08:77:2c:6d:68:a8:98:87:7a:
db:16:ed:ef:a6:a6:08:a7:89:63:e9:19:ab:6a:5b:
18:f8:99:4f:80:f5:28:5c:b6:3a:70:e3:59:62:79:
61:40:7f:c6:10:5e:8e:4f:cd:23:c3:47:e2:9c:5b:
fa:e6:10:92:b0:34:1f:91:1f:10:7a:c8:17:86:dc:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:1C:67:DA:D4:90:D2:BB:D5:C6:0D:F0:7D:F8:B9:99:6F:9E:2F
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:85:5b:f7:b3:66:f0:8c:5e:ba:7a:62:ee:19:ec:23:b5:
60:8e:7b:d6:fc:f6:6b:9c:06:87:1a:5a:a6:a5:d0:b7:b9:81:
b3:0d:2d:17:8b:c4:a1:a1:f9:53:04:75:af:7c:e8:42:94:c2:
57:03:9f:ce:75:0e:99:0a:c1:75:5c:98:17:9e:da:a8:95:2e:
c2:e9:89:f9:f2:1a:19:ec:59:45:ec:1d:4a:83:a8:77:f7:5e:
bc:c0:cf:40:2a:47:97:52:b7:29:00:98:59:41:08:c5:f6:a3:
44:bb:cc:1d:ac:f2:07:89:f5:b8:28:ab:84:95:28:31:fd:04:
f1:4b:56:6c:51:5c:54:02:ef:b4:f9:d3:7c:1a:7e:58:d4:45:
97:cc:34:44:8c:42:b0:20:73:c8:15:6e:7d:dc:21:09:61:a4:
7e:c0:0f:10:01:f0:4e:09:c5:9e:b9:b2:d7:f5:e3:a8:f3:bd:
ba:fb:c0:74:f2:5a:ff:ba:5c:6c:e0:97:60:d6:ae:20:58:a0:
44:e3:c9:e6:68:f7:2a:3b:0c:d2:94:a8:06:9d:5e:47:fa:9a:
33:1e:26:1e:ec:9a:c8:80:3b:6c:c0:b9:8c:11:78:b7:78:77:
1c:94:69:f3:7a:94:fd:7d:e4:44:86:3f:69:80:94:43:3c:60:
c0:7d:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:25 2025 by rpki-client