Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: uAS/25XKw6rtbM5FPNaN18D3IeutJVpN0ggwvK1ydfI=
Subject key identifier: 0E:78:9D:D9:9F:A8:79:5A:04:4E:5A:AD:72:AB:0D:ED:A5:80:D9:AE
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 0197B77C5EAC007E72959B3149EB9E78B732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 14D3
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: bu/29Uqian4kMmJWdGIHOoXpWgqQIongW/bTAFj1Xno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:ac:00:7e:72:95:9b:31:49:eb:9e:78:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=0e789dd99fa8795a044e5aad72ab0deda580d9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:4f:09:c3:01:17:e9:a0:bc:06:9f:82:2b:
a6:22:f1:6a:e8:4a:d6:b4:01:48:19:4d:27:41:e6:
71:50:ef:d3:f4:d6:78:d8:24:70:26:77:f6:75:21:
b1:4c:e9:7b:1d:2b:72:37:63:60:1c:d1:f4:a8:28:
82:ea:46:d1:b5:fe:24:a7:7e:ee:b5:8b:22:50:c5:
60:1e:a3:aa:f3:fb:06:ed:64:b7:7a:73:91:71:48:
bf:7d:d4:e1:85:e2:eb:6d:ce:a2:00:ee:35:25:c1:
97:31:1c:8e:ab:b3:dd:96:ab:dd:92:66:8c:72:86:
c6:3e:f6:b2:3f:e5:ed:0c:7c:f1:61:fd:6a:44:5a:
05:7b:63:c9:b3:f2:8d:75:da:5c:6c:d9:1d:df:88:
7b:c0:37:59:1f:61:c2:f2:3e:d8:ed:83:48:e1:8d:
5b:65:21:26:b8:ff:66:5b:5c:8f:63:5f:ba:e0:1b:
6e:10:a6:cf:6b:bf:fa:44:b4:2f:b7:13:8a:ba:7f:
77:4f:27:c8:b8:93:51:74:ab:14:42:68:8e:72:8a:
d2:e7:ce:ec:b2:38:f2:37:8a:fc:cf:13:ac:d2:7b:
cb:6a:bb:c8:24:0c:4c:95:f1:7c:80:aa:26:33:46:
60:ff:b9:6b:50:1a:45:3b:0c:7b:20:27:96:10:7f:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:9D:D9:9F:A8:79:5A:04:4E:5A:AD:72:AB:0D:ED:A5:80:D9:AE
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f4:0d:1c:bf:44:f6:eb:87:f5:a6:c6:9f:aa:63:22:af:bc:
44:49:92:82:c8:e9:8f:8b:32:7b:2e:e9:7a:37:4f:d2:6a:89:
35:ec:9f:cb:8b:0e:18:cc:78:c8:64:29:0a:cd:4e:b9:65:e4:
a6:7a:62:8d:be:a8:7c:38:26:49:5d:f1:8d:97:5d:15:95:bc:
0b:4d:51:76:b6:8f:e6:19:41:64:1a:45:ad:16:8b:d5:52:9a:
a9:28:ab:fa:82:b4:a7:76:4e:08:47:8c:fc:ec:b8:73:18:6e:
50:71:ef:4e:5f:e1:c2:59:ac:57:0a:33:72:51:67:c5:88:d0:
9c:37:8f:88:8e:f4:92:c1:cd:e4:13:5d:f5:a3:86:e3:c1:17:
4b:f5:7c:df:8d:20:9a:8a:4e:50:66:f2:0f:81:5d:c9:65:02:
93:93:d2:51:36:bb:7e:7e:7f:d4:30:75:ac:56:23:59:f3:7c:
33:3b:ef:04:d0:78:3b:0d:90:3d:9e:92:9c:ea:fb:ad:09:c8:
98:81:51:bd:ac:8c:0d:25:8f:1f:7d:d6:76:6d:d8:fb:2b:b8:
38:b1:d9:1d:56:81:20:68:ac:52:24:98:b1:6f:97:01:75:1a:
19:07:f4:78:65:68:02:78:d8:53:83:c0:09:13:e3:14:bf:eb:
0e:78:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:20 2025 by rpki-client