Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: at8AUKfIYYBjZaUXAUcAMEGk/h4DI1lHpRa7nPxSTbs=
Subject key identifier: CC:C8:FF:C2:B7:A6:CA:30:CE:AD:D7:78:08:1D:FA:E9:7E:69:30:03
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 01993236C82B1E0877B4583BF12B90F56D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 069A
Signing time: Wed 10 Sep 2025 06:01:14 +0000
Manifest this update: Wed 10 Sep 2025 06:01:14 +0000
Manifest next update: Thu 11 Sep 2025 06:01:14 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: 3o5itf4mtpjuGhOZ5QiADBlV7eeoCbTFtBiFdVWSFgY=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:c8:2b:1e:08:77:b4:58:3b:f1:2b:90:f5:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Sep 10 06:01:14 2025 GMT
Not After : Sep 11 06:01:14 2025 GMT
Subject: CN=ccc8ffc2b7a6ca30ceadd778081dfae97e693003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:df:ac:e6:dd:03:d0:7e:c4:3b:94:72:07:
ab:dc:5a:90:4d:11:8e:08:02:23:a7:da:55:ed:77:
ed:6c:c6:4e:f7:19:e4:33:32:01:22:74:51:56:3b:
46:b5:8f:43:a2:eb:67:17:0e:44:41:93:a5:81:19:
d0:0e:f2:20:77:56:f7:dd:56:dc:2f:80:a4:4c:09:
81:01:9e:ff:90:e9:46:0d:54:ba:e1:4e:ea:8f:bb:
98:0b:d0:fc:99:3f:48:78:ed:9d:0d:63:db:a7:c4:
3c:8f:33:7a:35:9b:98:76:d6:c5:0f:1b:5e:6d:05:
fe:83:a4:7d:73:ee:e2:48:3b:69:36:42:6c:71:32:
61:ee:c6:7f:c4:74:05:87:af:5b:33:e7:b9:58:c3:
fb:70:9f:cf:b5:cc:fa:6c:99:0b:cc:0a:e6:f3:f1:
08:95:94:32:7a:2e:60:86:fe:04:18:d3:84:10:17:
b7:ab:00:51:97:eb:69:16:3f:e1:fd:47:d4:e2:98:
ac:fd:5a:ed:d3:f6:dc:b0:32:12:57:33:b6:cd:6e:
0d:2a:0a:71:fc:8b:c1:a6:e2:3c:9d:3e:6b:ff:f2:
56:e3:cf:ed:fa:6a:98:d2:03:ff:b2:04:8b:30:a0:
66:07:78:0a:69:18:7d:8e:13:ed:02:0a:94:cf:a7:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:FF:C2:B7:A6:CA:30:CE:AD:D7:78:08:1D:FA:E9:7E:69:30:03
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:07:b7:68:e3:ed:7d:2a:72:30:26:ff:cb:62:8f:0b:08:e2:
a5:64:cf:1b:c3:ce:d8:bb:80:fa:40:da:45:58:d4:1a:00:6a:
49:ce:73:20:5a:2d:04:82:2f:14:52:ec:67:97:d1:04:a8:75:
42:21:cd:8c:26:4e:70:37:06:df:5a:6c:2c:df:c4:66:62:96:
3d:9f:75:a5:cd:45:82:f7:db:d4:95:a5:ef:2b:4a:dc:0b:2e:
18:15:ff:94:71:1a:99:16:81:72:6e:c2:64:bb:ef:a7:82:0e:
29:34:d0:7a:66:62:f0:24:c2:d5:34:02:cd:c8:58:5a:d0:31:
84:10:09:bc:97:fe:32:99:1c:a2:8e:d1:3c:e6:bd:16:03:ca:
ec:d6:b9:5f:a0:14:a6:9b:f0:74:ea:f6:4c:35:a9:ee:82:e9:
41:78:c1:0b:4d:08:44:f4:79:f4:84:f4:08:b1:71:dd:aa:06:
ba:a3:f8:7d:a8:31:a1:e0:4d:3d:cc:7a:00:9d:7c:f5:9b:37:
d5:f5:14:40:f0:fb:0d:4c:b8:79:7a:b5:a1:11:c8:27:8e:77:
85:50:7a:69:c5:36:73:e7:4c:68:79:93:39:83:7d:cf:73:a2:
ec:41:91:6a:fa:cd:50:83:17:c3:d2:8e:37:5b:3d:86:63:24:
4e:96:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:24:28 2025 by rpki-client