Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: lqNJxRoIo0VNtZ9IK/+KaHqwHCND+zW2doyThtcWvgk=
Subject key identifier: F1:69:96:2A:11:5E:E3:EC:EB:52:71:52:F5:AD:F9:94:99:28:FD:AB
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 019845F614B024DE66AA28BD74B573935FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 06E4
Signing time: Sat 26 Jul 2025 09:00:11 +0000
Manifest this update: Sat 26 Jul 2025 09:00:11 +0000
Manifest next update: Sun 27 Jul 2025 09:00:11 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: HHPA40gVYI3TNlAUnEkEwmheCvBBcjZ3EUJEnZWJMJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:14:b0:24:de:66:aa:28:bd:74:b5:73:93:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Jul 26 09:00:11 2025 GMT
Not After : Jul 27 09:00:11 2025 GMT
Subject: CN=f169962a115ee3eceb527152f5adf9949928fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:76:15:3a:af:25:85:71:c1:c2:14:68:95:
5d:6b:5c:e1:a7:98:e8:66:33:a4:7a:da:36:14:ad:
67:71:7f:a9:5b:ce:09:d9:63:81:c2:70:d4:65:fa:
f3:cf:f6:e8:7b:cd:8d:8a:58:bd:a8:07:b0:0b:55:
d9:57:27:07:b2:a1:51:5c:53:65:36:cb:d1:46:3b:
cc:6e:f5:aa:cb:c1:8c:1c:49:20:5d:eb:a7:86:e6:
2d:62:83:aa:43:af:79:3e:e2:89:7c:57:ad:9e:86:
ea:af:c1:5e:98:3c:36:74:18:79:9d:c8:3f:68:b0:
9f:57:c5:21:c0:67:d6:6d:bc:dc:59:8f:2c:1f:e4:
f5:f3:66:5c:a6:e1:f9:30:cc:b1:c3:03:cb:9e:e6:
7d:ec:73:79:17:b2:63:a7:d2:92:68:b0:85:ba:78:
46:ce:29:45:b0:30:ef:d5:36:37:d9:4a:47:a1:30:
77:07:5d:ac:4c:be:b2:b2:14:e2:2b:07:9d:c6:f4:
40:0d:e9:1d:29:c1:ee:86:ea:6b:91:37:85:be:1c:
64:86:5e:00:0f:db:ce:7c:b5:65:8c:5d:a3:4a:62:
1e:ce:09:1f:58:f7:6b:cc:64:a5:97:79:1d:48:e5:
00:db:b4:94:8f:6d:5a:66:38:75:a3:ca:97:df:71:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:96:2A:11:5E:E3:EC:EB:52:71:52:F5:AD:F9:94:99:28:FD:AB
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:82:e6:32:a2:4f:ea:2c:5b:93:29:a8:34:c6:c3:6e:6c:
11:b4:9a:1a:2a:67:a8:9f:df:73:3b:76:f2:a5:e0:bd:fe:55:
c9:70:7b:b9:00:1f:3b:c1:00:e6:98:dd:32:46:b2:65:9b:05:
2a:f4:26:34:ad:52:70:0b:f2:de:53:2b:cd:f1:d6:53:30:f6:
a7:f5:8a:83:c8:b1:fa:0c:f6:ff:64:8d:d0:5f:09:da:ac:7f:
b0:d9:b8:d7:9d:c1:5f:47:ec:7f:10:6c:48:a3:1f:59:72:a8:
96:2a:ab:c6:46:08:d8:6c:53:cf:89:90:10:ee:b7:f3:6e:ae:
b6:95:95:93:cb:ed:70:a7:51:57:a2:a7:08:99:5f:8b:69:91:
d8:d4:d7:b2:02:14:d3:25:41:08:a2:b3:e3:75:96:a6:1f:9e:
12:3b:06:a9:44:a2:65:3a:5a:a4:bf:48:11:7e:8e:8d:6f:9b:
a6:dc:6d:70:bb:72:56:d2:60:1c:6b:86:b9:db:97:2c:f7:68:
fb:49:12:c6:42:66:b0:06:80:84:8e:56:17:86:a3:11:9b:a6:
b8:78:9c:90:e4:6c:da:7a:64:d3:16:b6:89:ee:c7:9f:7f:e4:
af:a4:05:1b:fb:3a:97:6b:ab:56:ed:44:ef:1f:1f:19:31:f8:
4f:16:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:29 2025 by rpki-client