Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier: jLGbiTIv30CFSvsyMtpEtF3UCJPho+MR4jT4MIspZGo=
Subject key identifier: 6C:BC:17:25:93:DD:3F:CE:A7:80:8F:E1:3A:A8:44:96:98:BC:5D:77
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 0199FE7DF5BC0AF08F23F5AB086815C89EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 22:01:31 +0000
Manifest this update: Sun 19 Oct 2025 22:01:31 +0000
Manifest next update: Mon 20 Oct 2025 22:01:31 +0000
Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: LuHQ+tAsvVhmsYYXqhb3MWRp9E+ZfuESnrunCfdw0fA=)
2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f5:bc:0a:f0:8f:23:f5:ab:08:68:15:c8:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: Oct 19 22:01:31 2025 GMT
Not After : Oct 20 22:01:31 2025 GMT
Subject: CN=6cbc172593dd3fcea7808fe13aa8449698bc5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:a7:13:72:40:0f:51:d3:e1:5f:b4:d4:45:
5b:24:90:c5:9a:56:fc:5c:28:6e:31:8e:14:ed:55:
83:75:0e:da:7a:b5:3e:af:33:d2:5b:cb:c3:c6:32:
f2:4c:82:27:1a:71:be:b1:5f:2c:eb:c3:d0:ff:51:
4f:c3:86:4a:75:64:dc:32:1e:60:30:5c:4a:55:8a:
13:88:cf:57:e3:6b:90:01:09:bc:1e:fa:ed:47:65:
67:ec:23:4c:66:79:fe:e4:67:11:e4:58:22:2b:4c:
60:4b:89:38:da:4a:d2:d2:9d:4e:ee:49:c2:ba:5a:
ca:77:8b:77:be:90:9f:a8:2d:c7:e3:b0:75:3b:59:
67:e8:3d:90:a0:79:1d:d2:0f:08:62:6b:fc:5d:bd:
93:31:62:68:eb:8d:4c:7a:9c:c6:97:52:95:9a:99:
a0:94:64:84:2a:f6:4a:09:b6:f2:32:8c:37:a5:e3:
34:c3:ac:16:cd:0c:48:56:10:6e:15:ea:08:0f:6f:
c7:da:bd:d7:4c:c1:1e:37:05:2a:33:19:23:f3:fb:
8b:3f:5c:ea:37:f4:ed:67:13:f6:75:17:2e:51:d8:
1a:46:42:00:e0:2f:cb:65:e9:96:94:82:6a:d9:c6:
87:fb:5b:29:fd:b8:0a:76:80:ea:11:de:98:2f:d2:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:17:25:93:DD:3F:CE:A7:80:8F:E1:3A:A8:44:96:98:BC:5D:77
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f2:38:43:82:34:8a:c7:57:8e:62:4b:1e:c0:98:3e:e3:69:
df:dc:f9:08:01:01:48:c3:2b:e0:18:b3:61:ff:f9:64:a8:89:
f7:81:62:54:f1:b6:89:71:ea:05:a2:91:22:19:7e:6a:4e:59:
ad:42:a4:e4:de:7c:2d:c5:47:dc:7b:f0:d0:56:29:13:d5:a6:
7c:04:09:ef:ec:7b:f7:b0:d9:ca:de:a6:ad:da:30:f2:97:08:
54:68:ef:75:db:0c:18:d0:9d:56:f4:86:68:3b:f0:d6:8d:bf:
1d:63:59:23:09:43:2e:64:67:77:41:1c:c5:6e:dc:27:33:c4:
68:14:8e:78:06:cf:aa:0e:1d:47:bb:74:55:ca:f6:c4:a0:d9:
f7:20:17:8a:6b:42:50:dd:da:4e:94:1e:b6:71:76:06:47:6c:
a1:41:dc:2f:20:e2:d8:34:41:09:1b:17:2f:11:29:22:bc:bd:
52:94:b4:f9:c2:d0:7a:90:8e:f5:78:47:b5:12:66:e4:02:8b:
2b:5f:a1:00:f3:f1:19:7a:8c:37:97:34:aa:e8:58:4c:e7:a0:
e3:7c:37:41:b9:bb:d4:f4:82:15:40:6a:28:4c:68:d4:97:25:
9d:ca:ef:d2:5b:45:df:b6:a8:e8:db:78:51:55:b2:31:96:1d:
34:f8:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:11:13 2025 by rpki-client