Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: 2Y1tDfRnXwEw+gKox7eizcfF5F+1USb+6Tw0kB3QZWA=
Subject key identifier: 35:5F:70:54:71:C4:A0:69:F3:AF:CD:9D:EF:3A:1D:3A:DB:8A:CD:D2
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 0198D660AD92FC32C9516001FF06B49334BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 13FA
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: w8ND/ti2h6lRZzIDA2YoXEJbuuZTmLrI+tHP0oxyicM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ad:92:fc:32:c9:51:60:01:ff:06:b4:93:34:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=355f705471c4a069f3afcd9def3a1d3adb8acdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:1b:7a:29:d0:ab:d7:28:bc:29:08:f4:ca:
bb:72:5c:ed:ed:68:a7:39:3f:19:79:7c:ec:7f:ab:
15:7c:7a:2d:67:ef:48:6c:29:52:2f:9e:50:21:a1:
8e:08:af:6c:94:12:6e:ce:93:53:82:48:b9:87:4d:
59:7a:b3:4f:2e:ed:fc:b5:90:2e:64:b3:8d:74:21:
e3:92:f2:d7:c7:7d:14:77:dc:ab:d8:5d:5c:c0:4b:
cf:08:3e:db:e5:3b:51:e6:4f:9a:b7:93:c4:15:eb:
1f:e2:0c:90:e6:29:69:ec:ce:fd:88:2a:48:f1:65:
af:fd:0b:a2:4b:d4:2e:1e:0d:70:df:85:f2:87:87:
9a:2c:6e:77:af:3f:e0:29:0c:ef:d2:c1:b2:46:8a:
8d:a5:3c:94:38:f2:05:8e:f8:ea:d6:ee:e0:87:2b:
e2:23:5d:49:ac:6c:5d:08:56:81:dc:dc:8e:d6:b9:
de:f3:4d:9b:a0:7e:67:4f:a7:de:d8:34:97:57:7e:
1a:4f:2c:f4:f4:97:fc:e5:1f:f6:05:83:84:bb:2f:
d8:bf:cb:4b:ba:f1:5c:0c:21:d3:18:d7:2b:3b:b3:
cc:fd:d1:71:3d:ed:2b:56:2f:16:54:21:1a:80:5c:
be:11:25:c1:ce:b3:85:21:cc:40:74:5d:5d:5a:db:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:70:54:71:C4:A0:69:F3:AF:CD:9D:EF:3A:1D:3A:DB:8A:CD:D2
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:44:42:3e:b3:bc:b7:9d:23:b8:fd:1e:76:8e:51:fb:e7:ef:
13:44:21:4e:a0:c7:3e:43:11:e6:e6:ac:66:f9:27:ca:ba:4c:
e4:3e:85:f2:3f:d4:fe:e2:9a:ef:cc:84:bd:a1:55:1f:79:24:
7b:4c:e4:3d:64:4c:83:c7:8a:58:e1:a4:44:0f:75:06:d0:85:
e5:c3:9d:ca:cb:f2:b3:8f:b2:9f:b2:9b:0c:0e:d4:5a:4a:7c:
5c:b0:eb:81:4a:ee:38:9b:66:90:d9:dd:9a:78:20:b1:01:e6:
12:63:4e:f4:75:8a:cf:4a:b2:98:07:42:b6:3e:69:4d:37:f6:
59:8f:b2:51:76:84:37:67:15:b1:ed:e2:19:a2:11:5d:12:36:
b1:d7:dc:9a:c7:dd:77:29:f5:cf:1e:a9:9b:f3:74:ed:99:67:
8f:21:d5:93:94:c3:a5:9a:1d:b5:9c:49:41:5f:06:06:43:2f:
63:51:38:c6:c6:1f:6e:d4:99:1e:7e:81:1d:55:11:a6:b9:bc:
9b:13:54:81:22:91:f2:19:6a:78:79:b8:9c:64:fe:eb:33:de:
91:2d:9e:c3:28:35:59:d6:d3:8f:75:65:1f:dd:86:41:24:61:
6f:ad:22:d2:e0:4e:df:2f:8c:90:53:fe:ad:a1:42:e7:80:35:
25:53:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:40 2025 by rpki-client