Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
File: ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json)
Hash identifier: M1KW9rz/sOMcGbZ4BexTRhEecPF20fZO8vEVs8zr8lU=
Subject key identifier: 2C:E2:A5:26:43:05:07:3C:91:D8:05:10:C0:6C:9B:17:EA:C9:EF:2C
Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Certificate serial: 019A725C951C6AA08AD30E445F2075538521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
Manifest number: 0127
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: dxY0xMgnrZPFPdIhvpK7XNi03Bw.roa (hash: TWZjpr/lUtZY8GDwW5uWh6y9SEA92i+QvT7Y+hDT3YI=)
2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: fzuSAhbWHrhOtGu9UgFMRo8AEdzhGN2YVjOyRU7PJdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:1c:6a:a0:8a:d3:0e:44:5f:20:75:53:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=2ce2a5264305073c91d80510c06c9b17eac9ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:8d:d9:1b:5d:84:78:17:6a:0c:12:7c:13:
b6:e3:f6:e5:ca:12:4f:49:9e:6d:36:4f:a9:69:fe:
92:42:65:5b:de:09:7a:09:59:09:4f:82:83:e2:7c:
57:86:c9:99:09:74:09:48:9e:34:04:fa:a2:3e:67:
bb:83:1d:23:ea:86:ff:e7:53:9f:4a:ea:10:34:be:
87:35:57:38:61:8d:a6:65:05:31:ca:83:ec:a7:67:
cd:ad:be:95:34:dd:b3:cb:c4:a7:d2:c2:ca:9e:50:
33:e6:ff:5a:86:7a:e6:18:b3:bf:03:30:59:6d:bd:
44:ca:35:5e:79:c0:42:7d:55:50:5c:52:05:ab:d0:
6f:e2:54:ff:15:6b:d7:3e:34:e8:6a:ea:16:a7:93:
78:c8:94:f3:ef:63:c5:94:69:b4:5d:9a:c2:99:7f:
e5:43:0d:83:26:b2:9a:78:bb:03:03:a6:af:29:5e:
4a:ba:95:b6:00:08:69:16:45:b1:7e:82:d7:60:6e:
ec:87:d2:e7:dd:f0:60:a0:59:5b:da:ea:15:55:71:
49:87:58:30:cb:35:d4:43:56:61:1c:35:e7:cf:23:
89:6c:89:d8:f5:9e:a5:a5:93:cf:2d:e9:70:82:e8:
2f:8f:b1:96:5d:4c:27:59:f9:24:57:37:22:08:f8:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E2:A5:26:43:05:07:3C:91:D8:05:10:C0:6C:9B:17:EA:C9:EF:2C
X509v3 Authority Key Identifier:
keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:40:b2:2d:b9:26:1a:66:be:4a:6f:85:5b:87:d1:8b:13:65:
2d:be:97:df:7f:cf:a2:dd:52:fc:20:dd:2a:94:82:d5:3c:d9:
c8:40:27:1d:df:1b:7f:03:45:19:18:87:09:a9:f9:77:23:35:
ad:59:c6:c9:7b:86:5b:d0:19:87:db:47:8d:8f:d1:d6:9f:c0:
ed:ad:d4:aa:77:f3:0a:80:85:66:1f:5a:15:e7:2e:a5:5f:c2:
94:2a:88:5d:22:bd:d2:14:4d:f8:2d:8d:6b:8a:2c:f4:64:dc:
70:13:86:bf:c7:1a:c5:ba:5c:a4:0a:c9:7f:0b:18:41:38:a0:
99:d1:5d:5f:71:a6:0e:3e:00:cf:56:04:68:c8:c7:f5:78:9a:
5e:93:e9:13:66:2e:31:0c:59:85:30:82:da:84:85:55:99:6b:
b5:44:a8:4a:c8:8b:e1:3b:4e:07:d4:5f:8f:3d:6c:c4:ee:fe:
19:14:c4:f0:53:f5:ab:35:18:a5:f3:43:b4:94:21:8e:12:72:
8f:e2:a3:8d:b5:c0:2d:fb:5a:9b:f3:ae:ba:2a:7d:bd:20:12:
68:a4:7f:52:5f:d5:d0:02:ab:24:6a:81:05:a3:f6:c2:d1:e8:
9e:bd:57:98:0d:d1:19:ca:49:3e:13:06:8b:ce:87:37:3a:14:
0a:d9:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:04 2025 by rpki-client