Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: G7wTj8VRzWf4w5nG7zdKwjjViHZ1SKFQa/4Ggf5lPtk=
Subject key identifier: BA:19:6A:FE:81:A8:84:CC:AD:A9:B4:98:93:C3:98:CA:DF:66:82:2A
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 0198481BF946A45E5502042C1761E09923DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 10A5
Signing time: Sat 26 Jul 2025 19:00:49 +0000
Manifest this update: Sat 26 Jul 2025 19:00:49 +0000
Manifest next update: Sun 27 Jul 2025 19:00:49 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: bhbQm2hBJorjCTE/EAbNV5R9Zb9CxBQcsJ0a0VggaLE=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f9:46:a4:5e:55:02:04:2c:17:61:e0:99:23:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jul 26 19:00:49 2025 GMT
Not After : Jul 27 19:00:49 2025 GMT
Subject: CN=ba196afe81a884ccada9b49893c398cadf66822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:4b:2e:a0:53:dc:85:dc:ed:de:4e:49:71:
b5:3f:57:30:b1:31:67:ed:05:a7:c5:43:03:d3:dd:
a1:e5:91:97:18:75:8a:20:a7:ca:4e:3a:c7:35:20:
d8:cf:60:4a:9a:f9:46:17:67:ec:29:f3:f1:c6:68:
b0:6c:15:b4:2b:0e:25:03:7f:5d:b1:6b:88:a6:d2:
ad:e6:11:c0:59:41:cf:cf:80:c9:ee:d9:3d:87:be:
a4:3d:b6:cf:62:c9:10:69:3e:1f:6f:5a:c8:0f:03:
9d:f6:a1:2b:6e:cf:d7:44:a0:c8:89:d7:fd:ef:f1:
a5:0d:9c:3f:e8:d3:1e:88:70:95:37:a8:a9:5a:45:
27:34:2c:00:fd:2a:8b:84:9b:e4:78:e9:4a:23:48:
f9:3c:ab:85:31:f0:b9:1f:b7:ed:f1:04:ad:a6:f9:
f2:06:2a:27:f2:d2:a8:77:d5:38:14:a1:f1:85:a1:
23:d9:55:6b:af:d8:01:45:2f:a8:91:da:17:55:78:
31:e1:ba:aa:41:d0:3a:d5:9a:b0:4a:03:cb:d7:71:
b5:11:89:87:d5:1b:dc:de:d6:66:90:11:36:d6:b1:
5e:71:88:20:5f:68:b4:86:75:8a:fe:9a:81:4f:6f:
fe:14:69:08:4e:5e:3a:40:e3:2e:b9:40:44:12:ef:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:6A:FE:81:A8:84:CC:AD:A9:B4:98:93:C3:98:CA:DF:66:82:2A
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:0a:c8:c0:74:da:16:b4:b7:3f:70:f9:30:0e:32:b0:8a:
81:e5:9f:b3:0c:cf:57:e9:83:25:80:c0:e2:b4:0b:01:90:ad:
39:32:67:97:5a:c7:dd:26:ef:44:96:d9:06:3e:be:37:eb:de:
b1:01:e4:fd:9b:87:c1:2c:0c:44:07:1c:c2:ca:82:8d:6f:59:
45:53:d8:7e:bc:42:89:07:d9:e9:fb:3f:c2:38:62:12:e5:1d:
c6:3d:9c:f5:06:9f:a7:de:79:9c:be:b3:59:f6:21:bb:fa:be:
41:b6:17:92:4b:ef:cc:ab:3d:6e:04:bc:6d:1e:68:b4:84:3f:
f0:2d:eb:87:5a:f3:c3:8c:6a:01:c3:a4:15:5f:fa:e1:e1:b8:
f5:3c:86:23:f4:36:a3:4b:15:b6:f9:5c:de:93:ed:87:d6:35:
77:86:64:e8:ed:9c:ac:88:ba:48:d0:dc:fd:0f:2b:ed:76:87:
20:31:1c:2e:1d:d5:13:6d:bc:87:20:4f:8f:35:dc:f4:2c:c0:
9b:f1:6e:d8:8e:54:46:4d:bc:50:f0:35:8d:62:5d:6d:21:bc:
77:68:6d:2b:a7:c2:6d:23:71:6f:51:1c:04:93:27:a4:70:86:
d0:23:10:83:a3:ab:79:a6:a1:d5:5a:ba:b2:b5:3f:9e:04:4f:
b7:ed:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:26:16 2025 by rpki-client