Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
File: ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json)
Hash identifier: Ywi6pfbCiUyRTwNNiAgl9pq8C/aEPcIUEqbLj7h4ft8=
Subject key identifier: D7:41:0D:47:4A:CE:4B:D8:B1:DF:D2:83:79:C7:F1:A7:44:2A:B7:89
Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
Certificate issuer: /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Certificate serial: 0199FC8F2E101EAA2D05BFDB76A73672A5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
Manifest number: EA
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: dxY0xMgnrZPFPdIhvpK7XNi03Bw.roa (hash: TWZjpr/lUtZY8GDwW5uWh6y9SEA92i+QvT7Y+hDT3YI=)
2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: ZtSxAql20ctwWQgrvNwlFTbAsZH0M8pLEyjkOos32eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2e:10:1e:aa:2d:05:bf:db:76:a7:36:72:a5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=d7410d474ace4bd8b1dfd28379c7f1a7442ab789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:bf:e5:80:6c:d2:86:f6:68:70:b4:8d:6c:
41:1b:b5:de:d0:0b:7c:bc:07:81:f7:7b:03:1f:90:
3c:c2:d8:be:17:e8:71:a2:c9:a9:ce:f4:9c:6f:86:
bc:0b:6b:f2:f3:90:d5:b0:ef:03:cb:7d:1b:26:6a:
91:e6:52:40:97:72:ea:6b:90:e7:ca:80:91:a9:fd:
c0:1c:d4:49:80:4e:36:bc:18:cd:01:4d:5e:be:5c:
91:5b:d8:fa:7a:64:6d:78:6e:a8:20:ea:89:f2:46:
72:98:b8:37:96:dd:f3:e9:b2:d1:fd:b3:79:6b:d7:
83:74:51:9b:d6:b4:86:15:b4:28:83:a8:38:cc:81:
ab:ab:38:f4:a2:32:7e:35:80:ab:5a:f6:df:7f:52:
7a:be:1f:6e:76:06:29:94:c9:6b:f2:6d:6b:78:89:
4c:45:0d:3e:09:d6:75:ac:ab:d7:c8:4d:26:7d:44:
4b:7e:96:93:21:b8:2d:06:49:34:99:50:47:d7:b8:
84:2c:b1:b6:75:0f:b9:a0:5c:8a:4d:f1:54:0d:53:
0a:5a:33:6a:9b:cb:91:6d:cd:fc:8d:73:ca:97:da:
01:08:ad:93:1f:e5:14:cb:22:ee:c7:28:54:49:d9:
f5:21:7e:6b:21:56:3d:72:96:4e:ac:4a:9a:0a:80:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:0D:47:4A:CE:4B:D8:B1:DF:D2:83:79:C7:F1:A7:44:2A:B7:89
X509v3 Authority Key Identifier:
keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:5a:16:0c:4d:6a:13:ce:a3:a2:89:39:fd:1f:4c:f7:fb:
f9:75:b2:3e:00:45:1b:a6:48:5f:03:26:f0:12:11:11:9b:b5:
ae:b7:14:a8:0b:c1:92:73:af:18:ff:66:43:82:f0:30:54:94:
f2:d6:87:b3:19:dd:35:df:b7:2f:eb:d8:16:ce:a4:03:e8:cc:
2c:a6:03:60:ff:1e:58:ab:1a:86:88:2d:5e:40:9b:ca:b9:e0:
2e:6d:dd:0a:4e:63:99:84:f8:c0:2b:d0:02:88:07:72:5b:12:
b4:b0:a6:c9:d6:27:57:25:aa:97:2b:f6:d3:39:7e:bf:93:ad:
6a:2f:1f:36:84:57:d3:ba:21:b7:7a:c3:a6:91:14:12:41:0d:
77:13:d7:dd:a0:3a:b8:60:52:91:fd:75:8d:9f:e7:37:8f:2f:
79:34:fd:55:fb:00:3c:5f:f6:04:0d:10:bd:13:97:23:f4:69:
45:54:a7:97:b5:00:65:49:9b:12:18:ff:bf:9c:b6:88:fb:01:
a0:01:9a:ce:fd:42:fe:47:78:03:c7:ff:cc:b0:94:5d:5d:ba:
7d:68:1d:fd:2d:90:66:82:e1:29:bb:dc:41:e7:da:a0:42:65:
3a:a4:2b:f1:65:36:bd:ac:fa:59:e4:56:b4:e5:c8:7c:bd:74:
41:38:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:32 2025 by rpki-client