Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: pN/25llA5xuhBDKXMCv8hzqS0hg6FaaD2dNTeiLRATs=
Subject key identifier: 40:9E:47:58:EA:ED:6B:DE:85:89:D1:17:ED:50:A6:4B:F1:66:A5:E9
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 0199FB0ED60A661C36465B0D3B947599174E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 0775
Signing time: Sun 19 Oct 2025 06:01:17 +0000
Manifest this update: Sun 19 Oct 2025 06:01:17 +0000
Manifest next update: Mon 20 Oct 2025 06:01:17 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: 6xr0UskL4XSOyPKOdjPrbQp1pp3fhwoOXTT9AikfK0I=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d6:0a:66:1c:36:46:5b:0d:3b:94:75:99:17:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: Oct 19 06:01:17 2025 GMT
Not After : Oct 20 06:01:17 2025 GMT
Subject: CN=409e4758eaed6bde8589d117ed50a64bf166a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:97:dc:52:35:da:47:55:c2:4d:38:e7:75:
a3:96:2e:fd:d1:80:ef:b8:3f:6f:fd:40:ff:ff:35:
12:be:ba:cb:1d:6c:89:53:59:61:92:97:c1:50:60:
a4:e6:d1:de:d3:e4:03:b4:fe:f0:18:de:e9:60:10:
52:7b:9a:24:ff:8e:b3:e9:a8:37:f8:9d:6b:86:32:
e4:4a:1c:0f:74:96:22:5f:a9:ec:c2:c9:fe:f9:81:
db:09:82:38:68:f4:e3:2f:c2:b6:81:3b:97:27:3b:
8c:19:ee:69:4c:2a:df:fb:b7:37:72:24:83:37:c2:
c1:eb:11:01:c9:45:da:df:39:10:8f:c7:ad:61:e1:
4b:bf:c4:1a:0e:3c:7a:a8:ae:ec:75:d9:56:f1:86:
d1:7b:8a:0b:62:04:22:a8:35:89:8b:71:3d:fc:46:
e8:d7:1e:23:fa:5b:eb:1f:63:95:e8:f6:ae:8f:62:
ac:20:aa:09:e8:3f:e3:cc:81:0a:b5:19:a9:76:b7:
aa:94:be:fa:6d:c6:48:c4:ee:a0:be:27:50:26:d3:
f0:68:5d:bb:ac:2a:76:62:9d:53:34:d2:47:72:cf:
e2:c6:32:85:16:a9:aa:a2:04:7d:3f:95:be:f5:82:
00:97:a1:08:05:65:ce:de:34:89:e7:eb:73:f7:de:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:47:58:EA:ED:6B:DE:85:89:D1:17:ED:50:A6:4B:F1:66:A5:E9
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:13:a9:1b:66:08:ef:a8:38:67:f7:f2:c6:5f:09:8a:94:
e5:15:54:12:0f:6d:9b:5a:36:c2:4f:e5:3b:41:85:a7:0a:5d:
d0:b4:05:58:75:2d:dc:e5:a1:5c:cf:e1:f8:43:3d:60:0d:f1:
c2:60:62:91:63:0c:50:e5:69:8b:fb:10:e3:f2:5e:b4:e4:78:
18:ac:99:47:4c:09:24:05:4b:e1:56:b4:b9:36:b5:c8:6e:d8:
74:97:c9:6f:18:81:89:d5:f9:18:04:0c:e6:d1:b2:d4:47:0c:
62:38:6c:1e:2f:84:9d:75:db:a0:36:bc:d3:78:20:77:59:7a:
a8:eb:34:d8:5a:cb:3e:35:ef:ae:ff:1d:f2:55:94:da:11:4d:
de:87:14:14:e5:b4:f3:e9:10:7a:43:31:f6:bf:15:b6:d7:2c:
9a:08:29:93:c8:9b:84:df:2a:34:00:a0:11:26:66:9c:51:2c:
e6:ad:48:54:fd:e4:d4:c0:b1:e3:35:40:64:a9:c1:6a:47:20:
45:cc:0a:58:23:74:33:be:85:f7:b1:b1:4f:d1:55:f8:66:04:
63:85:5f:e0:08:70:a6:5f:f5:82:d8:ce:90:ac:bc:fa:6c:e5:
58:14:da:29:27:83:09:9d:e3:9d:c4:28:c7:4c:01:b9:75:4c:
f6:61:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:22 2025 by rpki-client