Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: Uk2ROyax4fWSR6cenvysJGJ+hUQypK0USx+zkgUdk9U=
Subject key identifier: EE:B9:FE:C7:8A:B4:A3:1A:13:4C:95:71:1C:A0:F5:7F:F6:96:F0:70
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 019A70A51C332B3B6318D0EB92D329809DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 163C
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: Nt0uJqZfBJxIAkxs9Z7PjO0TLYCVz4MVFuHYa/Wf6J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1c:33:2b:3b:63:18:d0:eb:92:d3:29:80:9d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=eeb9fec78ab4a31a134c95711ca0f57ff696f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:75:92:43:1a:d6:42:3d:7e:2d:77:4a:97:
08:88:0e:16:cd:d1:17:41:e5:d0:00:a3:e6:19:1e:
37:92:53:b6:61:3b:32:7a:b2:85:c0:63:7d:a7:7b:
09:e1:58:68:be:a7:09:b0:de:74:57:85:51:01:4a:
b8:4f:65:14:dc:20:bb:92:f8:33:0c:ee:6d:df:d1:
fe:e1:bd:44:8c:66:0a:58:d2:4e:90:c8:01:c9:7e:
c2:66:6f:fe:10:7e:16:10:c7:cb:ac:f1:74:52:50:
10:9d:5c:b8:23:81:c8:5d:96:e8:7e:08:7c:00:73:
59:90:d2:76:9e:91:3f:48:79:d9:c7:ff:bb:be:1a:
61:99:20:64:ae:9a:e0:5f:26:9a:2d:94:fb:54:8d:
90:e4:b3:7c:1c:1a:d2:f8:95:5c:88:e3:db:cf:fb:
63:86:e2:03:24:e8:4b:7d:f8:41:e9:a7:0d:04:85:
6f:cf:ed:68:53:8f:9c:d7:cf:6b:24:f6:23:0c:6a:
97:00:7b:20:db:78:0d:55:66:40:49:1e:4d:15:0f:
15:49:18:41:25:a2:0e:ca:c4:a9:fa:8c:ee:2d:a5:
70:e9:22:25:48:d7:00:d6:88:c1:49:6d:0c:a5:c5:
a1:c7:a9:79:83:5c:00:4f:e7:c5:2c:17:11:cb:45:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:FE:C7:8A:B4:A3:1A:13:4C:95:71:1C:A0:F5:7F:F6:96:F0:70
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:81:f2:ca:18:ce:20:4e:51:03:99:5b:f2:8b:ef:9e:96:
76:12:fb:3f:25:c7:a8:7d:29:27:e5:34:6e:0c:2c:98:4f:4a:
9a:d7:99:c5:4b:a6:66:2d:fb:1c:14:0e:b9:39:0a:96:7c:f4:
33:08:0c:95:e0:ec:3e:09:92:c1:a5:20:70:b9:95:fc:c5:bb:
a7:fa:df:65:8a:93:fa:58:a5:4f:4a:51:37:c9:8d:14:c5:e4:
20:c7:f1:0d:59:06:3f:c0:ec:00:7b:cc:dc:49:5f:90:ae:91:
57:a5:53:b3:91:84:a8:5d:74:cf:76:00:ce:a1:d5:28:46:e3:
b9:8d:6b:bd:f2:89:47:3b:bc:1a:90:e4:3d:c1:4d:1b:44:23:
d8:52:1d:83:bb:0a:62:da:83:71:50:2a:03:00:95:9f:0c:d5:
df:48:9c:01:88:fd:2a:46:85:18:f4:bb:35:e7:c8:20:9b:b0:
38:ad:ab:31:3e:cb:59:6e:55:3b:f2:ea:7a:fa:b4:c8:91:66:
43:3f:fb:e7:e1:69:22:2e:bc:7c:a2:8f:57:ea:e3:f2:73:e4:
32:00:c0:02:f5:51:0f:d7:07:4a:69:49:77:ff:30:22:b2:ca:
dc:b1:6d:76:17:c9:7f:75:39:d8:4f:16:94:c9:cc:db:d1:1a:
0e:6f:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:16 2025 by rpki-client