Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: hhzDrsNlyh2XsCYsVnNk3pD42yB+IrKnXHZG+trc1SA=
Subject key identifier: C4:90:83:99:12:77:D7:5D:6D:4F:D2:93:50:A2:8A:9D:2C:1B:50:6C
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 0199FCFD9C2C008D073ED5EC43E63C5080D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 0703
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: /j/SPiQX+gvRs2yERpOxSA8v/j5hsxHtdn1XpeoDAZo=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9c:2c:00:8d:07:3e:d5:ec:43:e6:3c:50:80:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=c49083991277d75d6d4fd29350a28a9d2c1b506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:f7:12:ea:97:45:b6:69:1e:36:11:b7:46:
62:61:8f:83:b1:ff:35:ec:11:5d:06:80:5c:a2:7a:
4d:aa:6c:5e:13:95:ef:42:0f:7c:f5:ce:e7:cc:92:
85:88:17:98:52:80:51:f1:19:d7:fe:73:cb:11:ac:
41:6a:f3:12:53:c8:1e:9b:8f:d6:69:5e:5a:e6:80:
ba:59:3d:8d:1c:97:74:83:ee:49:50:fa:51:7f:be:
06:86:59:ef:bb:fa:91:d8:63:c6:cd:1d:56:82:bd:
42:c9:f0:1e:40:b7:f0:ec:7f:d7:e2:09:f6:e9:17:
f9:64:39:23:4c:b5:20:79:94:74:2a:54:23:fe:b7:
7c:ad:fc:8d:22:f2:3e:fc:b2:86:da:42:41:f9:bb:
a9:60:5f:52:3d:22:f5:2a:ea:df:23:80:e4:eb:13:
5a:81:a0:2c:57:cc:86:9a:c8:82:a2:85:7f:83:ff:
1a:d8:76:64:2d:aa:5f:e3:a9:ec:a3:d4:1b:93:54:
53:65:04:0a:2c:44:d4:0c:9c:69:96:d5:d9:11:9c:
78:4c:68:28:a4:a1:d3:58:b7:2c:52:00:ae:bf:11:
f1:19:8a:c2:f2:c1:21:d3:78:d0:35:39:56:9d:0f:
84:ef:22:5c:02:91:2c:ea:90:1e:e0:3d:69:49:b0:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:83:99:12:77:D7:5D:6D:4F:D2:93:50:A2:8A:9D:2C:1B:50:6C
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:be:44:ef:8e:cc:38:44:ac:3a:6d:c7:c8:7c:d8:64:97:
72:ab:d6:3d:3d:49:55:8a:f2:b5:e9:75:a6:7d:e8:49:00:63:
56:b6:b0:47:b5:0c:4f:79:9a:7a:87:08:27:ed:b0:41:ea:1f:
17:a7:a3:b4:fb:76:1f:67:6b:9c:2d:9c:79:c0:c3:13:dc:dd:
6c:f1:3d:4a:5f:7b:b5:37:16:9f:d7:62:4d:22:d2:54:4e:f5:
98:53:4f:74:1a:13:07:a1:12:5f:fe:1f:49:cb:aa:c3:ed:8b:
1f:43:83:40:3d:47:14:85:9f:8c:80:88:06:62:30:40:3c:44:
7b:50:5a:ba:01:d4:4a:52:f6:fb:d9:4f:51:f9:0d:f6:5e:f4:
29:3e:1c:34:7b:6a:bf:43:7f:be:4a:fa:eb:67:18:bc:73:80:
66:bf:4b:96:dc:bc:fd:f4:c0:8f:e8:70:2d:c6:63:c3:24:99:
02:86:06:ec:96:7c:98:f0:bd:ef:31:d0:e7:53:0e:2e:78:78:
95:ae:76:c4:14:4b:b4:de:ec:63:2f:f2:27:eb:66:ee:1c:92:
6e:b2:c9:d2:58:d6:ea:22:38:75:d1:3d:cd:f2:bb:7e:02:3f:
3c:77:6f:d6:8d:a8:81:1b:65:5f:75:36:3e:8b:78:ea:95:b4:
a2:dc:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:54 2025 by rpki-client