Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: FKZVMF37BCDqtxKCrGa3cGjY9vzc08yKMiyC5+gw4h4=
Subject key identifier: 81:3B:11:29:47:D8:E5:1E:45:81:19:71:5C:D9:35:A6:7E:91:4F:6E
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 019A70DC0DFC692A75194662395410B9F9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 07B2
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: 80uqQG53t7hH0wzLTVMzOTpA16lYFbFnyqrbmDQIhUk=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0d:fc:69:2a:75:19:46:62:39:54:10:b9:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=813b112947d8e51e458119715cd935a67e914f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:33:45:1c:9d:65:79:f0:2b:6e:97:bb:05:
0c:a0:cf:21:71:99:96:65:78:07:54:fb:6d:75:ae:
d1:23:09:d7:14:12:8b:98:70:f2:a3:f9:41:29:6b:
f5:1d:4f:bc:ca:41:23:bc:11:df:e3:9f:c3:fe:b9:
cb:57:3f:d3:1c:6f:63:7c:78:1e:b9:9f:40:22:e1:
a0:ef:d5:06:28:82:24:71:58:77:4f:28:0a:d2:58:
cc:aa:58:42:1d:f2:ac:07:af:2f:9e:a3:d7:2e:1f:
78:8e:63:dc:c2:c7:b2:9c:a6:5f:ae:40:95:cb:38:
5d:ce:21:54:de:96:ce:73:1e:7e:c9:ea:63:43:e2:
8a:da:66:44:67:32:d6:f4:e7:f6:53:65:5c:14:4f:
f8:46:ec:7d:75:57:b4:1e:e9:6e:88:8f:d0:2f:10:
66:b3:b7:93:ed:40:bc:14:3d:bf:7e:f8:3f:35:fe:
72:12:cf:33:b1:91:e5:6f:06:49:88:57:17:0c:3c:
41:ef:64:a8:cf:bd:fc:84:c5:06:ed:de:f4:06:29:
4a:12:c0:fa:67:a1:cb:e9:a3:ec:42:7d:57:3e:ea:
bb:04:42:e0:4b:d0:d5:f5:44:7c:ee:4a:4b:a1:3e:
e2:a2:2a:5b:ce:4c:80:b2:e0:f0:05:c0:da:f5:bb:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:11:29:47:D8:E5:1E:45:81:19:71:5C:D9:35:A6:7E:91:4F:6E
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3d:09:76:e9:09:1e:ec:f1:34:60:ed:89:55:b8:f7:d9:1e:
3a:02:f3:b8:f2:4a:08:3f:a1:15:79:df:fe:f6:b9:6e:ac:a6:
5e:01:fe:86:40:2a:d0:5c:46:07:e1:41:e6:29:d4:fb:0f:c4:
4a:11:38:d5:a3:c0:a9:e9:6a:0c:d9:62:52:23:27:2b:a1:56:
7a:17:ae:29:1a:11:5a:d7:e0:1c:8e:12:d9:67:b2:6c:ae:b2:
f1:8d:c4:ef:de:f2:43:ee:9f:c0:9b:44:b3:14:23:b7:60:40:
5d:48:e8:9f:ed:c3:d4:a3:e6:5d:84:b1:72:64:f3:00:1b:6b:
86:be:c0:75:1d:a4:2e:ee:5f:73:aa:ed:68:3a:63:02:ca:97:
d3:a0:6a:3c:09:89:43:da:81:9e:b9:5c:73:d2:40:62:85:08:
4b:bb:e7:38:ed:8e:1e:0c:fe:df:93:e0:7a:43:f7:fd:17:af:
1e:9a:5c:9b:ed:8e:e2:a3:ad:dc:d5:89:7a:03:ae:3e:d6:75:
b8:17:d9:60:b2:3c:a2:29:b7:85:68:fc:07:cd:29:e4:7c:cb:
91:89:3f:f2:10:a7:05:c4:3b:cb:e9:23:e2:aa:e2:00:0d:10:
70:d6:7a:8a:c3:ee:25:c3:f0:0f:c6:8d:e0:9e:93:ca:e4:1c:
42:30:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:59 2025 by rpki-client