Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: wsrgLphHA4sRsSEFw+O5j2rQIbifkxdI6to9Z8FoHpc=
Subject key identifier: C8:1A:A4:49:C5:BF:47:16:EC:89:B3:C5:4B:1A:09:B4:87:65:C8:1A
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 0199FBEB70DBD1C7660C715B921A96FF656F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 1492
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: f9T2yGn0igEaDqsYhDGT6mvlu2tmYtrZa6vE2tNrOuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:70:db:d1:c7:66:0c:71:5b:92:1a:96:ff:65:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=c81aa449c5bf4716ec89b3c54b1a09b48765c81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:0b:54:f6:53:0a:fb:dd:e5:11:6a:5c:c2:
5b:71:94:8f:54:32:da:4a:e1:9f:07:30:26:51:1f:
0a:b4:5e:81:62:26:58:9d:8f:e7:d2:91:5f:d8:2a:
c3:fe:a7:c1:1b:1a:98:60:26:c3:52:94:d1:8f:a7:
77:07:51:cc:a9:24:ec:eb:b7:79:b7:1e:dc:33:7c:
00:13:e6:90:24:f9:43:d7:ed:22:92:8b:9b:d9:38:
90:6d:de:8f:0e:ac:7f:eb:b7:60:49:f5:ee:54:af:
2d:c7:b3:2e:e5:cb:74:1a:25:83:75:9c:6c:f2:0b:
fd:08:24:fc:f6:74:b1:12:b4:9c:3b:43:fb:5a:98:
0d:2a:df:aa:f7:7e:6f:86:18:f9:49:87:ce:f7:1b:
7b:37:45:99:02:36:8e:36:ee:4b:c8:fd:43:8b:8e:
3e:f7:a6:4a:0c:7c:14:4a:28:24:6d:2c:64:60:92:
67:3b:1c:01:46:24:41:68:d0:13:68:f4:94:c5:a1:
33:ba:34:bf:b2:05:9e:86:f9:3a:88:e4:64:16:f2:
2f:81:59:98:0a:14:ec:1f:2f:06:34:a3:fe:9d:73:
30:cd:43:02:ca:91:56:c6:a3:f8:4c:d9:54:61:05:
fb:1f:ed:6a:90:cc:d6:f8:c6:ed:07:ae:d9:70:a4:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:A4:49:C5:BF:47:16:EC:89:B3:C5:4B:1A:09:B4:87:65:C8:1A
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5a:40:e2:c3:7b:ef:9b:30:b5:c7:23:53:ad:71:90:92:63:
22:25:b4:65:34:63:d8:8e:23:4d:ad:f9:8a:3f:26:a6:81:7b:
29:ef:53:66:00:b8:16:39:fa:bc:b9:da:cc:22:c7:15:5e:ad:
bc:e4:44:45:51:0d:e4:1f:ba:e1:db:de:2a:1b:dc:d8:4b:bd:
b0:25:2a:21:42:ed:19:ab:2f:d2:6e:93:c1:28:5b:c1:23:aa:
9a:63:02:a2:56:e9:f1:6c:be:30:1b:43:79:ea:2b:09:87:64:
3b:76:b7:da:b8:30:9d:dc:9c:65:52:7e:ca:4a:21:ef:fc:5f:
f2:c5:f8:2f:78:e5:e1:ba:8f:06:ae:47:48:5f:50:29:92:55:
c7:64:39:97:75:e4:07:d3:a8:ec:cc:92:8d:28:2d:aa:95:2f:
f1:e3:82:f0:2e:87:c1:00:04:56:03:e7:64:6f:26:4e:9a:35:
24:e2:64:27:86:82:b9:b2:8b:b5:7d:6d:0b:2e:cd:50:bd:3e:
e4:1d:46:5f:fe:2c:6c:ff:38:bc:59:de:ac:8f:3b:2d:8e:d0:
89:42:98:89:87:5b:28:4b:0c:5c:50:59:4a:24:00:80:9b:25:
d2:ad:a6:32:94:95:56:40:e6:ac:d8:06:e2:5a:ba:7a:27:62:
9f:b0:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:11 2025 by rpki-client