Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File: eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier: tv/rFJYeJZUbD0plA4Nn544yLkaFdfA6KmBqUz/ZZZs=
Subject key identifier: 7D:59:A6:E9:17:96:AC:A5:32:7D:B1:C9:B8:68:19:04:F2:45:6D:B8
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial: 01984965E2A695AA714BA35AB64DAF0C68AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number: 1547
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: 9I8dngV1JT7KKjRI32gIyKSSyUk.roa (hash: mTvlNqWvha6TIOSslNPhqnseo6bfcEXwllcJxrieLVA=)
2: WIbpjNFgyL8FweUsKsihkm_PI28.roa (hash: VoeMP15IKS+YATCW5k8jloGWeOvqG6TTy+tPBwoxnfM=)
3: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: CVnCTm8yPHexZut+LvuEdrxeAIkWP/qFCNbqXGV39/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e2:a6:95:aa:71:4b:a3:5a:b6:4d:af:0c:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=7d59a6e91796aca5327db1c9b8681904f2456db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:70:26:91:12:da:05:ef:b9:cc:3a:f4:7b:
be:43:af:78:43:e7:f6:b5:a1:59:50:93:09:42:14:
70:3f:25:5f:54:85:92:3a:66:5b:50:df:93:49:e7:
16:c9:03:73:3f:24:49:4c:a1:72:35:60:7c:2b:53:
6c:c5:06:92:cf:b4:3d:ff:f1:a0:5b:0a:78:9d:9d:
09:4d:9f:1a:ae:53:67:7c:f5:bb:98:10:b8:ac:ac:
ac:fe:ff:ad:f4:f0:d6:fe:04:cf:65:59:c6:5d:1f:
45:27:09:3c:16:ac:5d:d7:e1:f1:73:88:29:53:d2:
35:71:de:25:d4:52:c2:47:43:05:b3:de:f5:da:51:
d9:93:43:c1:65:4e:18:d8:80:59:d6:d2:f2:fb:7c:
bf:ba:87:44:ef:0a:7e:c8:4d:a0:d0:46:16:3c:e9:
b0:ad:07:06:6e:be:51:72:5e:1b:1e:d2:83:5d:4b:
02:1a:3a:e8:35:db:88:c7:a7:70:6c:52:8b:0f:3f:
56:4e:e0:1b:60:79:fd:24:2e:e3:39:13:03:06:96:
46:4b:a1:b8:66:63:3c:db:e6:51:9a:b1:38:35:f6:
0b:4b:97:eb:d3:44:0a:92:8f:b1:7a:34:60:66:af:
fd:1b:89:dd:19:8e:77:b7:81:94:e7:7c:2e:85:6e:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:A6:E9:17:96:AC:A5:32:7D:B1:C9:B8:68:19:04:F2:45:6D:B8
X509v3 Authority Key Identifier:
keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:3a:85:fd:2b:54:8c:e5:d1:d1:49:41:29:8d:57:66:53:
80:a9:8d:ae:a2:c4:69:fe:6c:80:d6:b8:a8:d1:58:f2:11:d9:
ee:53:ea:5f:9b:2f:46:0e:88:5b:68:7d:0e:97:42:47:a7:7f:
9e:06:0f:2c:52:eb:48:ea:ef:37:53:5d:26:77:05:9d:39:43:
51:87:68:cb:0b:38:fb:9f:3d:aa:5d:b8:a2:11:8a:6c:dc:0b:
14:58:7c:a0:2d:84:c7:45:47:b0:60:e8:4e:0e:40:ac:85:70:
75:3e:79:31:13:85:0f:18:ff:76:2d:49:31:fb:26:14:bd:0b:
12:b9:91:ba:fb:3b:bb:2a:7e:b6:02:c8:1f:48:00:7f:55:de:
60:f1:02:fa:da:50:5b:9c:97:87:c3:87:bc:33:9a:61:85:30:
a5:06:18:f8:25:6a:13:c4:2c:72:00:67:d9:55:93:08:89:ea:
e4:89:4b:00:c0:f0:29:7f:93:4d:8d:3b:e9:dd:e7:3e:aa:e6:
e1:7f:d3:39:87:bc:8a:27:70:71:b6:6d:e4:af:4a:6d:24:22:
87:9e:2d:42:fc:1b:9f:9b:a4:1f:ce:d6:1a:81:81:cd:0b:dd:
a4:f4:5c:a0:fa:d7:be:9d:68:8c:cd:db:10:0a:49:19:9c:ed:
f5:61:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:24:19 2025 by rpki-client