Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: VNffaku77iLiCLORWlBqRIwyhFgZkuBW6mJGPWT1SsY=
Subject key identifier: B8:8A:EB:84:1F:FB:58:5D:92:B6:3F:40:49:FA:3A:F4:02:57:F2:38
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 01984A781F1E1672A69BF2D69107DAEBBF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 0622
Signing time: Sun 27 Jul 2025 06:00:42 +0000
Manifest this update: Sun 27 Jul 2025 06:00:42 +0000
Manifest next update: Mon 28 Jul 2025 06:00:42 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: 7yp8T+d+r7tQ9t+zc6DPfGA0VsBkdInBj50atmB8qas=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:1f:1e:16:72:a6:9b:f2:d6:91:07:da:eb:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Jul 27 06:00:42 2025 GMT
Not After : Jul 28 06:00:42 2025 GMT
Subject: CN=b88aeb841ffb585d92b63f4049fa3af40257f238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:92:ad:39:21:79:e5:83:8f:96:0f:9c:0c:
73:3c:d9:e9:3a:9a:ad:9d:2a:7f:24:31:2d:90:94:
50:df:e0:20:17:d5:25:43:fa:b0:ee:33:79:3b:99:
e4:08:aa:61:3c:b2:db:8f:1c:1e:3e:11:98:2f:ef:
1e:d2:8c:18:32:d7:06:ff:0e:dd:f8:eb:88:cd:75:
3d:53:87:5c:4a:49:33:55:87:de:61:9f:d2:56:f0:
b0:3c:f5:df:59:ea:16:41:68:08:f2:9a:43:42:14:
11:81:e6:e9:35:e9:c0:56:cc:f7:93:12:ea:c0:b8:
0a:2c:67:91:c2:39:7f:d6:b6:d5:9c:ee:8c:12:28:
04:8c:13:73:b2:07:6a:28:67:23:fb:0f:e3:34:5c:
99:e0:d3:8f:1d:57:d6:3a:e3:c9:a4:a7:9c:36:c1:
5f:16:f0:5f:47:da:e3:87:f1:ef:12:51:34:e4:3d:
dd:9c:3e:63:2e:1b:ae:c9:00:ca:82:35:3d:bd:dd:
3b:61:d6:be:cc:b1:3e:71:8e:19:be:70:f1:da:ce:
fa:1d:5d:fb:d6:31:a9:02:8d:6d:ad:f5:5b:ea:71:
32:a1:8b:ec:b1:47:a7:b7:b2:82:76:1b:14:3e:af:
cc:5e:c9:d7:d1:a4:00:6b:8b:e0:f8:9d:f8:83:23:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:EB:84:1F:FB:58:5D:92:B6:3F:40:49:FA:3A:F4:02:57:F2:38
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:ed:14:6e:64:78:7b:56:c0:db:30:88:b3:cf:4d:72:dd:
a0:3b:14:8f:16:6a:93:93:77:19:cf:69:0e:1d:7a:29:62:14:
a6:9d:c0:7a:50:7e:2f:3d:17:b6:20:c7:c2:1b:4a:8b:ed:ee:
ba:d3:93:4c:4f:bd:85:aa:79:32:a1:2e:23:4d:b1:14:c7:05:
f7:b7:8e:a1:5e:cb:53:70:f5:a3:16:6b:db:66:dd:92:78:90:
c0:8a:e0:92:23:23:aa:8c:22:d3:32:e4:85:64:d1:7f:02:e5:
21:9d:01:ec:aa:c6:b9:07:e4:69:dc:ff:7e:9e:af:71:67:c0:
a8:3f:9f:98:88:b2:fc:82:c0:f7:8c:59:5d:ca:ca:73:b8:07:
46:60:cf:18:cc:15:0c:52:e4:7c:a5:a3:20:91:0e:39:40:47:
ce:d0:d2:fd:ec:40:07:c5:57:b3:2e:75:c6:2c:6e:88:4e:6b:
ae:df:56:4b:ca:bc:66:41:5e:f3:29:ab:cf:28:46:5a:35:dd:
8b:3e:8d:8c:72:1a:34:19:b3:35:08:1d:95:1d:54:22:a2:b9:
de:80:ff:a1:f9:cb:03:12:52:14:30:a0:97:18:ac:84:25:61:
32:05:84:e9:d4:84:07:c5:0b:7e:5b:7a:8c:cc:d1:93:ff:c8:
0c:fd:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:10 2025 by rpki-client