Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: +0VjomB2xfAioPtvgaPpngDkaoN9tdH+6AHg9R3s96M=
Subject key identifier: 48:68:1A:2B:CF:04:A8:40:4F:4B:E3:FD:2B:27:F6:F8:D3:93:75:2E
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 0197B6A1F320D6FCF28B78C5D2B8BE8BA9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 1365
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: tHraZju2+DediOKXohJRFaLfM5zW6ZmUAm95Ec3NPzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f3:20:d6:fc:f2:8b:78:c5:d2:b8:be:8b:a9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=48681a2bcf04a8404f4be3fd2b27f6f8d393752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:2b:27:c6:26:f4:09:96:4c:43:5d:54:67:
5a:08:de:f9:66:d2:3b:27:0f:1f:3b:62:23:d5:55:
65:53:40:50:49:90:0c:23:90:be:08:1b:24:07:f2:
dc:79:cd:a6:59:5b:7b:7f:ad:f7:27:6e:41:dd:35:
f3:16:d8:3a:7f:24:97:bf:7e:85:b7:85:b5:56:b2:
ea:71:d1:54:69:bf:12:d0:98:be:f6:c6:20:b5:40:
31:6e:60:87:9c:82:20:a6:de:31:cb:7d:c7:ab:e1:
64:57:fc:62:b1:c8:fd:3a:89:57:ef:b8:8a:9d:17:
e2:87:06:88:36:f0:09:9d:64:24:17:65:d0:ad:84:
5e:c9:c4:fa:7a:01:3c:90:6c:7d:fa:6a:2d:17:0c:
e4:6e:51:49:db:fd:dd:84:07:26:df:04:ca:8c:15:
b9:73:01:a8:21:5c:0e:e5:7d:4c:91:bb:51:fc:29:
c8:db:87:b6:3c:91:1d:a3:b6:6b:70:38:06:3f:00:
32:ed:91:90:9d:2f:4e:90:13:3d:47:e7:e3:81:82:
c8:be:7a:0a:d9:ef:4f:d5:4a:de:8d:07:19:5e:50:
07:75:95:e5:3e:f4:b9:83:b0:76:41:b0:48:ef:9a:
18:49:98:f2:bf:3e:57:80:e5:e8:80:0f:82:46:05:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:68:1A:2B:CF:04:A8:40:4F:4B:E3:FD:2B:27:F6:F8:D3:93:75:2E
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:d6:7f:af:68:5b:5a:44:df:37:c7:79:31:a5:99:52:3f:
7b:60:87:c7:0a:c7:9a:f4:a9:99:db:1d:3f:64:67:b3:c3:07:
a9:cf:16:67:2d:a0:a3:4c:35:5b:39:36:e9:f2:27:84:cf:0e:
16:37:d6:e9:a7:e8:33:d7:5e:dd:da:96:49:da:11:33:26:f6:
8a:64:d6:73:6c:b0:1c:a8:a3:64:42:6f:5e:c8:bf:ad:89:4d:
3e:14:32:ea:d9:47:48:87:1d:22:35:95:53:68:f3:9f:73:3d:
e6:be:2d:06:73:06:12:05:e3:24:60:a6:a7:93:dc:1e:50:ba:
89:c9:7f:aa:8e:7a:5e:e8:9b:67:75:5a:e5:2d:4d:6a:88:2b:
ed:fa:59:93:09:c5:72:73:dd:03:5c:69:38:60:48:75:3e:23:
da:1b:99:f0:0c:5f:3e:58:8c:ef:d2:3d:d9:af:b3:29:f0:e0:
1a:08:b7:62:82:57:fa:8f:89:26:93:76:75:74:e8:bc:b3:3e:
fc:b9:7b:17:18:86:69:8b:9e:98:e2:f6:2d:10:ed:9f:f4:ff:
d4:83:2c:bf:58:94:28:6a:de:d2:60:33:0f:34:a8:8b:a8:8c:
65:44:7a:ae:11:d7:1f:0a:e0:1b:86:8b:29:62:2e:13:72:51:
45:e1:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:51 2025 by rpki-client