Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: wH2h7CK0IAnlcK4D+FhAgV8IB7bCJ0yv2I5HGiqMFzc=
Subject key identifier: DE:AD:D5:4D:56:E2:4D:56:0D:CF:6B:DA:80:DF:08:EC:06:68:E7:03
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 0199FD6B39AB70A135170D35EF694722B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0E99
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: mbW1fx29bSAagOddTy2Uv/Q1X1Z1bEmC/Cn3du/RPN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:39:ab:70:a1:35:17:0d:35:ef:69:47:22:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=deadd54d56e24d560dcf6bda80df08ec0668e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:d1:69:90:5f:dc:cb:14:b0:24:7c:50:a5:
18:84:0b:f9:52:63:0c:0e:ac:86:42:96:1e:47:ae:
80:ee:a9:05:c8:f8:e6:60:42:54:5f:7e:dc:11:7f:
43:a9:f5:48:f3:e6:4b:ac:1a:79:a9:f3:88:65:56:
10:09:d2:31:e2:93:48:ba:3e:e3:9e:1f:66:b3:57:
e3:bb:94:1d:06:4f:79:72:a3:e9:42:65:b2:a9:ab:
24:8e:69:57:43:29:13:2c:37:9c:60:f0:24:5e:18:
68:df:7e:d5:28:cb:d5:90:2a:6c:5f:58:be:55:2d:
5a:8c:93:20:4b:f8:e7:ba:93:4a:d5:3a:d0:4c:8a:
06:49:ab:38:d4:23:4a:a7:37:08:df:de:94:84:46:
54:de:15:0d:fe:eb:36:a1:66:00:a0:53:7e:45:86:
59:12:2a:9b:d0:8e:53:43:5f:d6:ce:76:a9:17:5b:
d2:f5:9e:9b:10:a0:c7:af:12:a4:91:70:0d:ac:e8:
c8:0e:7f:64:2f:23:28:9e:c4:b3:a4:a0:c6:d1:c2:
69:00:a4:a5:76:c2:f5:ef:43:38:7c:6f:69:3a:58:
bb:7a:33:c3:18:ba:ef:bf:f5:32:a7:09:04:b2:b3:
fe:89:d7:58:c8:40:29:f6:83:77:0d:49:7b:7b:97:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:D5:4D:56:E2:4D:56:0D:CF:6B:DA:80:DF:08:EC:06:68:E7:03
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:7f:5e:2f:43:14:fd:5d:54:26:4e:27:7a:af:06:ee:83:
12:3a:dd:13:ca:3e:e2:0d:7c:84:e7:3f:9f:9d:14:60:c8:c3:
77:55:ae:d8:98:3c:4c:eb:4a:ed:67:4c:8b:87:30:83:7c:f0:
48:21:2e:77:4e:65:61:90:f6:ee:d1:de:e4:8d:b3:08:fc:8b:
ce:26:bf:7a:89:23:fb:fe:4e:80:40:7d:71:eb:c3:c4:2c:14:
4c:fb:e8:74:a7:58:f7:9e:17:05:f2:ad:88:87:aa:74:7a:af:
33:2b:3b:d3:39:bd:41:ac:fb:1d:39:07:4e:a6:0b:2d:57:3a:
ba:b3:4a:c6:42:03:4a:00:55:fe:1c:f9:07:c7:8a:73:70:e2:
6a:08:41:3e:7b:47:b8:e3:28:65:50:56:28:db:18:84:7e:fc:
36:a3:ef:71:8c:31:11:4a:11:5e:26:10:c8:8c:bb:d5:5d:d0:
85:40:79:cf:db:b6:c0:6c:09:bd:18:43:d0:25:75:c0:39:5f:
b7:6b:41:60:0c:08:b9:f4:a0:f2:92:be:0d:51:33:b2:32:2f:
88:37:c2:12:37:ac:80:d1:43:1d:0b:eb:46:c2:50:e5:5b:de:
50:1a:4e:cc:5f:91:07:30:58:3e:8c:25:27:f3:54:ba:20:14:
46:3f:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:26 2025 by rpki-client