Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: 0Eq/SIPqj55SeHS3zn7foZ7usrrBIGEx+qDBrq0s8ds=
Subject key identifier: E9:E9:BE:A0:1F:1A:61:78:18:80:20:DB:CB:14:63:CA:9A:9B:44:6F
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 01984708B4F53AC85FF9867FA27C0B28A017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0DB6
Signing time: Sat 26 Jul 2025 14:00:09 +0000
Manifest this update: Sat 26 Jul 2025 14:00:09 +0000
Manifest next update: Sun 27 Jul 2025 14:00:09 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: 8xqMpGrueSM+6zI3FtSDLGLNRrdFEIgvp3g5fzS+a0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:b4:f5:3a:c8:5f:f9:86:7f:a2:7c:0b:28:a0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Jul 26 14:00:09 2025 GMT
Not After : Jul 27 14:00:09 2025 GMT
Subject: CN=e9e9bea01f1a6178188020dbcb1463ca9a9b446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:55:27:28:aa:31:87:9e:5e:16:75:ee:6a:
de:ab:ae:1a:22:aa:ea:02:79:8a:c5:7d:07:e8:c3:
b3:79:bf:63:1b:93:3b:fc:10:a4:ba:79:98:82:b3:
85:a6:32:68:d4:d8:30:3f:1b:97:bb:40:a6:06:8e:
e7:cc:11:a9:fe:0f:d6:90:bb:68:36:eb:f6:6f:52:
b8:11:db:d1:e1:59:f9:a3:24:77:b2:0d:0a:50:95:
9f:37:c1:27:32:ed:5c:4e:3f:14:32:d0:db:50:c1:
ff:0b:cd:3e:ce:3d:1a:73:ef:af:3c:92:e0:8c:3c:
83:5d:69:7b:8e:fc:de:8e:86:6b:dd:ea:df:99:7f:
0c:79:65:92:83:c0:08:ed:eb:d3:c7:9e:1f:48:ad:
18:0f:c7:ff:19:6a:03:32:e0:e8:00:04:2f:b2:a4:
b5:08:46:c3:2e:1e:b7:e0:20:79:19:41:d1:c3:e8:
3c:ae:b7:e1:d0:3a:a3:e9:99:e5:db:ce:70:39:33:
89:11:b5:59:39:26:8b:ae:b8:1c:b1:a3:d1:36:e7:
d0:07:92:0d:ea:e8:d5:29:48:4b:0a:1c:e6:ef:c5:
3e:68:f5:11:4d:45:c5:a4:4b:33:50:3e:b0:f6:80:
64:de:53:4a:80:2a:6d:65:45:e3:81:f6:c7:f1:5a:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:BE:A0:1F:1A:61:78:18:80:20:DB:CB:14:63:CA:9A:9B:44:6F
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:47:3b:4d:0e:9c:6d:78:00:87:62:5e:10:e6:06:a7:01:
b0:22:7d:4a:4b:1b:6f:f5:dc:d9:b3:50:fa:a6:41:44:b7:69:
92:f9:ef:a3:6a:b1:fb:a3:5a:51:c2:dc:ee:04:a9:e4:3b:6c:
3f:2b:e1:7d:ea:a0:4d:f4:66:0c:31:15:c0:47:f9:92:c6:7f:
6a:51:cc:f6:92:8c:ef:86:59:f1:4c:e1:cf:6d:85:f6:bb:75:
ad:20:c8:61:ea:3c:8d:c9:96:d5:09:38:88:75:a9:e6:a0:85:
a7:29:50:cc:8a:6d:dc:b9:01:b5:b2:00:42:be:6d:68:de:91:
6d:82:05:f3:26:72:8e:4c:28:5b:66:c9:1b:60:7d:71:bc:81:
34:f8:4e:21:7d:6e:1e:5c:a1:bd:e2:35:ad:51:4c:f6:14:d3:
d0:85:c0:57:55:fa:22:1d:e8:5e:be:54:91:2a:5a:f2:a4:00:
7d:c1:85:51:71:2c:1a:24:04:12:5b:bf:86:57:bb:53:f4:85:
da:4c:ee:8f:29:a1:30:21:80:f2:4f:41:4e:b5:f2:99:f2:36:
7d:2e:0d:4d:d6:1b:15:50:6a:8a:80:68:a3:9e:7a:94:6e:6a:
e8:5e:aa:f5:94:b9:79:4f:74:f3:47:69:9a:78:56:a0:43:fc:
99:43:08:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCLT1Oshf+YZ/onwLKKAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh
YjkwYjEwHhcNMjUwNzI2MTQwMDA5WhcNMjUwNzI3MTQwMDA5WjAzMTEwLwYDVQQD
EyhlOWU5YmVhMDFmMWE2MTc4MTg4MDIwZGJjYjE0NjNjYTlhOWI0NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBpVJyiqMYeeXhZ17mreq64aIqrq
AnmKxX0H6MOzeb9jG5M7/BCkunmYgrOFpjJo1NgwPxuXu0CmBo7nzBGp/g/WkLto
Nuv2b1K4EdvR4Vn5oyR3sg0KUJWfN8EnMu1cTj8UMtDbUMH/C80+zj0ac++vPJLg
jDyDXWl7jvzejoZr3erfmX8MeWWSg8AI7evTx54fSK0YD8f/GWoDMuDoAAQvsqS1
CEbDLh634CB5GUHRw+g8rrfh0Dqj6Znl285wOTOJEbVZOSaLrrgcsaPRNufQB5IN
6ujVKUhLChzm78U+aPURTUXFpEszUD6w9oBk3lNKgCptZUXjgfbH8Vrl/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnpvqAfGmF4GIAg28sUY8qam0RvMB8GA1UdIwQY
MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt
YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4
LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+BHO00O
nG14AIdiXhDmBqcBsCJ9Sksbb/Xc2bNQ+qZBRLdpkvnvo2qx+6NaUcLc7gSp5Dts
PyvhfeqgTfRmDDEVwEf5ksZ/alHM9pKM74ZZ8Uzhz22F9rt1rSDIYeo8jcmW1Qk4
iHWp5qCFpylQzIpt3LkBtbIAQr5taN6RbYIF8yZyjkwoW2bJG2B9cbyBNPhOIX1u
HlyhveI1rVFM9hTT0IXAV1X6Ih3oXr5UkSpa8qQAfcGFUXEsGiQEElu/hle7U/SF
2kzujymhMCGA8k9BTrXymfI2fS4NTdYbFVBqioBoo556lG5q6F6q9ZS5eU9080dp
mnhWoEP8mUMIMA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:35 2025 by rpki-client