Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: wD06MqKolrlik0TlNcACZM6phJLkyDoRQYxmyEP4yGg=
Subject key identifier: B8:09:36:E9:97:F4:1E:C0:B1:8C:45:D0:BD:9F:8E:DA:62:31:8A:7E
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 0198D5F13CD473FF69D966E93E8E8EA506EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: RRalJG+oxg3/CZiPLaRFzRLQFzg6JPzOtKKR12A7bwc=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:d4:73:ff:69:d9:66:e9:3e:8e:8e:a5:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=b80936e997f41ec0b18c45d0bd9f8eda62318a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:3b:7c:44:3c:11:10:3f:38:ed:25:e4:40:
fc:51:b0:aa:ef:0d:8c:ce:d6:2c:87:97:98:51:c3:
1a:39:f9:1f:d4:9e:6c:58:d6:c0:af:77:d7:ca:cc:
d0:70:62:d7:64:39:e7:39:98:d5:27:32:3d:e4:e5:
b4:bb:b4:be:dc:f0:4e:11:bd:df:cb:16:78:ee:c7:
5d:73:cd:f1:64:4b:4a:d1:97:88:4d:98:25:95:80:
01:5c:d9:73:bf:f4:6a:63:1e:67:5f:40:f4:4a:36:
91:8b:57:29:82:19:54:a4:d9:7c:7f:db:fc:9f:58:
df:4f:3e:fd:07:b2:88:78:eb:96:28:4b:66:00:de:
dc:b0:cc:bb:8b:4f:c2:2c:9c:05:6d:d2:b5:af:ea:
16:c4:e2:f6:66:38:d0:ac:88:af:e0:dc:5f:6e:5f:
dc:b9:69:58:19:a2:ee:d8:ed:f9:83:4f:7d:6e:0f:
3c:1a:b4:cd:0a:e9:71:86:5b:77:b2:ca:f7:7e:88:
b6:ff:ba:c5:78:98:ed:8e:39:c8:94:46:f6:27:3d:
97:3a:b7:a3:50:ff:96:7f:7a:8c:f9:ac:5a:5a:15:
1a:ab:9d:75:b7:9a:02:f5:6b:18:a6:0e:3c:93:28:
b2:ce:b7:62:34:ea:06:ff:49:21:88:a2:cb:8f:72:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:36:E9:97:F4:1E:C0:B1:8C:45:D0:BD:9F:8E:DA:62:31:8A:7E
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f7:e2:00:3b:bf:31:b6:da:03:7f:dd:68:74:cb:45:d1:8a:
e6:a6:01:35:8a:29:68:80:e1:35:7a:8f:6e:88:63:dd:67:d6:
6f:29:84:20:e6:45:15:4c:d1:16:9e:23:bb:61:fc:89:07:05:
77:88:72:0c:86:93:5e:01:48:7d:c7:94:79:1c:ca:a1:55:63:
c3:92:c1:eb:b8:42:62:ae:b8:d0:a9:13:6e:d8:6b:f4:eb:fa:
36:42:a7:72:21:2b:4b:e6:df:29:f4:e5:f6:83:fb:ed:79:89:
41:8b:87:de:4b:97:9f:ca:8a:e7:09:df:1f:8d:0f:9b:c6:59:
cc:0a:b4:b6:c6:ac:60:0c:d6:a1:03:96:44:e9:cc:b7:03:92:
2d:60:6d:08:27:da:28:ed:49:48:ed:cb:83:42:43:de:87:11:
04:21:50:63:fc:c1:53:6a:17:88:35:cf:37:66:f3:f7:18:a2:
dd:77:61:d0:93:93:75:3a:3c:3b:e9:c4:40:47:78:0e:2e:1b:
87:82:04:92:51:7f:cb:7b:a3:04:b4:a8:4e:3e:c0:72:70:45:
d4:bb:c6:bb:2a:28:95:b8:c2:4a:8e:e9:85:96:58:02:c5:e8:
83:2f:a0:bc:06:40:74:4d:3e:95:a2:02:d4:ed:df:29:00:b8:
22:c7:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:34 2025 by rpki-client