Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: rjnmyhGa3sVkW0fiB/cpqXb85Pv/BeynxljYE73c2WA=
Subject key identifier: 9B:87:4A:A0:64:89:2C:A4:FD:CA:AF:0F:BC:98:59:DE:7A:CE:F8:BB
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 0198D5F1D8D5FE0365D34884D1EFE8BCF02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0E00
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: R6VeA3XWrFYxRVzbPCDMQThoCrxmmlVZ4uYscpJZt0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d8:d5:fe:03:65:d3:48:84:d1:ef:e8:bc:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=9b874aa064892ca4fdcaaf0fbc9859de7acef8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:8c:7a:38:ce:26:38:7f:51:63:33:4d:ab:
03:da:c0:2f:55:fa:25:82:70:66:87:3c:94:e7:8f:
e2:19:c9:52:87:f1:8e:af:56:b5:09:c7:ae:1f:76:
1b:4d:8e:d5:22:d5:c0:2a:ae:96:a2:cf:fc:49:58:
8f:cf:61:26:5e:8b:7c:a3:01:25:e3:a7:bb:d5:4a:
34:1e:b2:41:c4:b8:22:44:4f:c3:b2:f0:6f:43:df:
17:9e:15:fc:c8:65:b6:3d:3f:31:ec:a2:b9:9f:94:
1b:87:ce:69:a2:8c:c4:48:f6:9c:d1:51:bb:d4:41:
0a:79:ec:fb:c5:37:db:83:25:f1:3b:e0:5a:a9:0d:
b2:74:69:85:b8:fd:7b:f6:eb:53:4f:37:27:0c:c2:
9e:c4:e9:38:20:d6:92:30:a0:b4:9c:79:4d:7c:19:
bf:5f:2b:88:de:cb:e3:c0:2d:13:b3:7f:f2:42:c9:
00:29:11:07:3e:55:61:b8:60:81:45:79:3b:fd:31:
8c:7d:88:ab:da:a9:9d:cb:a3:29:26:6f:2b:5a:89:
ee:42:5f:93:2d:13:2a:02:2c:db:1c:8b:8d:0f:20:
c0:58:60:23:88:49:36:19:2a:ac:95:c8:5c:16:f6:
1e:22:18:4d:80:a4:ac:2e:c8:35:97:b7:c1:73:ae:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:4A:A0:64:89:2C:A4:FD:CA:AF:0F:BC:98:59:DE:7A:CE:F8:BB
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:fe:39:dc:1e:fb:cd:96:9b:9a:52:85:86:0a:b4:c0:45:
66:0a:cd:2b:f8:f2:66:a1:2b:58:b7:9c:3c:66:f0:09:d9:1a:
39:a1:b3:04:18:dd:67:5c:56:5e:d7:e9:2b:0a:5a:de:bc:e3:
d6:bb:40:4d:56:ea:1d:31:04:40:d6:02:c2:5e:12:f2:8d:06:
59:5b:f1:6e:08:c9:a3:7a:6f:3f:b4:2a:60:18:8b:b8:df:4a:
17:5f:f1:2f:24:b8:dc:32:3d:c6:92:81:d0:49:fb:7b:14:86:
c8:aa:95:c1:f1:2f:f3:43:84:49:60:85:1c:e5:96:ed:6d:bb:
49:69:30:58:53:5a:fc:f1:d1:11:ba:27:ff:18:36:07:d9:cf:
04:c8:65:59:61:57:9c:61:18:02:79:17:0d:1d:b8:fa:f4:85:
f6:b8:1e:bf:48:4e:9d:24:ab:c4:8b:6e:79:38:fa:84:ce:9e:
f6:31:3b:dd:9e:6e:7e:fb:90:8a:fb:16:9d:b6:f1:6d:fe:a5:
bc:67:da:f1:56:bd:12:9d:7a:1b:d5:3e:47:c7:e9:08:e3:86:
1b:7b:3f:86:5e:2b:e0:de:ef:53:4b:e7:d4:dc:d5:c5:2a:2f:
f3:25:5c:43:c0:08:e1:1c:2a:1a:eb:e2:d6:1f:0d:c0:77:a9:
be:fd:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:54 2025 by rpki-client