Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: hfTjgCo19Ax7OjRXFxwTgyYBXINWuZ0oo4UaNMgGNK8=
Subject key identifier: 64:48:B9:F6:18:96:C5:12:55:65:7F:00:FA:EA:37:F5:5A:67:ED:94
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 019A006C3615BAD6DD43DD2D958F412EF67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 1189
Signing time: Mon 20 Oct 2025 07:01:23 +0000
Manifest this update: Mon 20 Oct 2025 07:01:23 +0000
Manifest next update: Tue 21 Oct 2025 07:01:23 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: He1KV1ZMzZGgJYUzXt7KhnkEtD+N8GtQRax8ui5QxJ8=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:36:15:ba:d6:dd:43:dd:2d:95:8f:41:2e:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Oct 20 07:01:23 2025 GMT
Not After : Oct 21 07:01:23 2025 GMT
Subject: CN=6448b9f61896c51255657f00faea37f55a67ed94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:a5:31:f3:18:e7:59:7d:b6:10:a7:0f:fa:
20:ae:53:01:f9:28:9b:0d:e2:2e:c7:42:62:d7:71:
29:00:ca:a8:af:db:a1:8a:92:de:9e:0f:e1:48:cc:
bc:d6:e0:d8:98:cd:46:78:f6:f4:de:32:56:69:58:
2b:6d:32:0a:ec:35:ec:75:19:d5:bf:64:98:db:85:
50:7b:f7:3a:5b:21:f8:43:f7:21:6a:66:ae:c9:7b:
fb:88:8f:13:2e:30:89:04:a4:ae:6f:af:31:2b:2d:
0b:d7:91:69:c7:17:6b:ff:74:9c:f3:9b:f8:06:60:
46:e1:e9:ca:65:a1:97:64:1e:eb:7c:d1:d8:68:46:
5f:d3:27:b2:47:f0:17:f7:c7:cd:e2:5b:16:1e:f7:
22:3a:a4:d7:b5:72:7c:36:ee:e8:55:c5:9c:e0:99:
fb:5f:09:5a:10:e2:89:32:83:e9:ae:c1:b1:a9:5e:
1b:ba:8d:bd:b9:8c:8e:fb:6f:1b:bb:76:02:be:96:
d0:b3:ff:79:00:0a:47:69:d7:99:c9:ee:01:1e:8b:
74:ec:f6:97:6d:bc:ef:ab:1c:6b:27:d7:28:99:cf:
31:a5:21:7f:a9:45:93:ef:4f:26:9b:40:f3:d3:81:
b4:9e:61:d2:0d:f1:30:b3:f4:c6:04:33:9f:b8:31:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:B9:F6:18:96:C5:12:55:65:7F:00:FA:EA:37:F5:5A:67:ED:94
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:d7:9b:1d:9c:a1:2e:5e:73:64:1c:8d:b1:5b:30:dd:84:
e2:31:cf:b8:18:da:45:d1:4f:fd:fd:33:f1:eb:09:6e:a0:aa:
15:0b:ef:a7:82:77:4f:83:ca:d2:ce:20:90:b2:15:e3:f0:d6:
2e:24:6e:e1:c7:29:50:17:43:6e:ac:d4:3c:68:26:3f:4f:48:
96:d9:d3:52:57:3a:3f:55:51:9b:db:b6:2e:2f:c4:2b:b7:c9:
7b:9a:f7:7e:25:09:40:fe:3a:23:de:4c:24:3c:e3:d9:18:b4:
f7:3e:de:13:18:2f:d4:13:aa:3c:86:22:f7:2c:2d:76:63:39:
29:38:ef:db:a1:cd:88:40:5b:37:5d:14:b2:56:68:cf:0d:1d:
48:be:2d:de:f9:1a:27:b6:0d:b7:1e:94:29:0f:1a:bb:68:30:
d9:12:10:4b:cf:15:43:0b:df:2c:1e:6e:8d:95:54:5d:af:ed:
97:83:49:6d:b0:cb:eb:b4:6b:07:08:c1:49:08:7e:7f:49:8e:
04:00:8a:d7:9b:17:e4:d4:d4:bb:b8:d4:f4:05:b4:62:90:29:
49:ca:7c:63:5e:fe:61:db:e9:e4:ea:78:fd:1f:c6:42:dd:f5:
24:cb:b3:ef:c1:4a:e6:e8:9f:07:5f:74:80:5e:1b:dd:cb:24:
bc:91:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:49 2025 by rpki-client