Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: xRNsqXFWD2iRnfxqGjRiCb8EZV24BmFHoQT/Z6dDmb0=
Subject key identifier: 68:07:26:91:32:DE:1B:C6:8A:B2:AE:87:4E:FF:0D:D4:6B:53:89:B5
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 0197C3B77D1F808645FBDC4773CD6DF12835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0D72
Signing time: Tue 01 Jul 2025 02:01:11 +0000
Manifest this update: Tue 01 Jul 2025 02:01:11 +0000
Manifest next update: Wed 02 Jul 2025 02:01:11 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: wbMgoVZUnSePqy4vMNJKTNg4+/iOSslIJxHpXcRc8gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:7d:1f:80:86:45:fb:dc:47:73:cd:6d:f1:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Jul 1 02:01:11 2025 GMT
Not After : Jul 2 02:01:11 2025 GMT
Subject: CN=6807269132de1bc68ab2ae874eff0dd46b5389b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:c3:c4:df:92:ce:32:ca:bc:a8:39:42:82:
3e:38:a2:fa:32:01:4a:0d:8a:1b:b8:49:88:22:d0:
79:d2:db:40:06:77:62:8d:12:f0:25:78:46:63:d2:
c3:8f:24:fe:80:a0:b7:66:97:80:cb:8e:2f:a4:84:
bb:c2:97:d0:13:d3:b1:58:1b:7e:2d:e7:7f:30:8e:
3d:1d:9f:e7:b6:62:a3:0a:f7:be:df:fa:35:ba:27:
18:76:27:da:14:fd:bb:90:2a:20:75:e2:5f:5e:69:
b2:fc:5a:01:c1:47:3a:88:08:de:95:f7:82:37:63:
85:97:22:cb:68:b6:54:ab:90:08:b9:58:7f:49:41:
f4:f6:c0:d4:f4:75:65:c4:03:d1:96:63:1d:79:8a:
eb:69:af:30:79:2f:c6:43:ef:af:d5:95:61:5a:c3:
60:1e:e4:8a:ed:14:02:57:a1:f5:c3:6f:6f:62:1d:
51:f9:10:c4:e3:05:5c:ee:d3:f3:95:5a:82:78:27:
9b:71:c4:9c:1d:71:7f:5b:8b:e6:8f:3e:3c:10:1b:
b9:91:e6:4b:7a:38:15:3f:5b:d0:3b:b0:29:3e:06:
d3:4d:02:b6:e4:db:91:0c:22:96:2f:9a:9c:e3:ec:
fd:25:1f:05:13:26:93:d8:a8:7c:f3:dc:b0:69:2f:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:26:91:32:DE:1B:C6:8A:B2:AE:87:4E:FF:0D:D4:6B:53:89:B5
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ea:ec:83:e6:44:cb:f9:70:6e:3a:30:ca:23:cb:1e:c7:ff:
61:c5:9f:e1:0c:f6:23:72:5a:68:3b:aa:4b:5b:b2:d5:a8:6c:
5a:93:4c:f1:b4:a4:7f:7d:81:46:4a:c5:01:64:ef:fb:a5:38:
ab:8a:5b:bb:9b:f1:70:d9:7f:ec:88:e3:0a:74:60:f3:49:7f:
fa:49:f8:0e:24:d7:59:ab:3c:9e:4c:dd:bc:3d:51:d9:8e:09:
a1:ac:4f:99:6f:ff:33:d3:d0:b4:b5:76:16:81:0c:10:7e:26:
8b:fa:fc:d1:e5:05:3b:53:fd:92:f9:d7:c2:56:64:13:15:f2:
19:17:bc:93:cb:88:3d:e1:24:fd:b3:88:98:32:89:7e:ba:ff:
1e:b5:c7:b9:ca:96:b9:dc:9e:df:c5:fa:d4:20:05:7e:e3:8b:
11:7d:50:04:1a:5f:17:3c:7b:5e:08:b5:54:d9:8f:9a:c0:03:
73:38:d6:58:b8:15:04:57:44:1e:1c:79:8f:b1:75:cc:16:95:
26:9b:68:8c:4b:bd:bd:85:ce:80:b1:e8:c4:fb:03:b8:c2:ea:
3b:a1:7c:11:4c:62:00:18:8d:54:24:4e:1c:1d:34:cf:73:d3:
a1:bc:a4:26:b9:07:17:92:62:26:70:df:85:22:73:3a:07:a4:
d8:09:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:45:13 2025 by rpki-client