Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File: ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier: iiKs0VdD9lVT6FwtTUFErgYqkwg7ocRDyXT9KqiX4Ts=
Subject key identifier: 3C:91:C6:95:DC:FF:1E:43:1A:31:0A:FD:69:4C:59:78:F5:D9:B6:4C
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer: /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial: 0198D4DFFF7D368D249F162D18206DC3DF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number: 072E
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: jQq5P4hh5fh3SZx/aoAsodHBTXRyoJFP/zhIPtUihsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ff:7d:36:8d:24:9f:16:2d:18:20:6d:c3:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=3c91c695dcff1e431a310afd694c5978f5d9b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:04:df:28:ed:e3:8a:2b:b4:2b:c4:1c:e0:
96:92:be:b7:b8:0d:eb:a2:fb:82:e4:04:b3:8a:c2:
c7:62:d8:7a:b7:d4:81:09:1a:8f:0a:1e:45:5c:26:
f9:5b:68:5b:f3:d9:6e:26:2f:cd:84:4e:df:aa:f1:
89:26:bc:50:71:b5:d8:8d:9e:c9:65:4c:e4:a7:af:
6d:a6:7f:e3:f0:6b:90:88:bb:25:82:37:f9:1f:a0:
0a:72:b3:d4:14:bc:ee:8c:69:dd:e5:22:1b:0e:f5:
c0:5a:06:71:88:78:a0:96:b1:22:45:0c:0d:d8:b1:
63:65:e0:ef:9a:46:75:2d:e2:d8:b6:ac:ff:d8:47:
f4:e7:36:95:f3:73:c9:14:10:d6:43:ff:a5:1a:1d:
f9:d3:0b:ee:cf:af:a1:f6:68:f5:3a:17:d7:f7:3a:
cc:4c:e7:dc:bf:09:dc:74:85:b5:4e:88:fc:4d:75:
f8:09:a8:07:88:68:ed:cb:3e:a8:29:03:93:c2:c4:
dc:18:cf:66:e2:6e:5f:21:5b:9a:d8:7f:04:5a:9a:
7c:71:65:2a:4f:fd:8f:9d:8a:a6:dc:d4:52:85:69:
f5:d4:45:d6:42:8f:37:ff:7c:e5:33:a4:fb:7b:92:
e5:53:f1:91:bd:34:3d:84:f8:18:46:37:be:dc:92:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:C6:95:DC:FF:1E:43:1A:31:0A:FD:69:4C:59:78:F5:D9:B6:4C
X509v3 Authority Key Identifier:
keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:54:3c:c3:1e:69:5e:fc:69:e6:bb:b1:5e:d1:99:79:ed:24:
3a:41:fa:50:a3:81:a0:28:45:cc:c2:70:1e:53:b6:16:c8:a2:
76:85:84:4c:e9:2c:31:07:58:ad:54:a5:30:a4:aa:2e:4b:c6:
9e:3e:04:f7:9f:b3:ce:2b:3d:af:13:39:dc:ab:93:eb:ac:61:
df:f6:9e:10:cb:7b:42:e6:8f:97:4b:61:3d:df:36:1e:92:16:
4e:a2:88:ae:50:e0:e7:a7:0e:48:fe:fc:37:7e:90:61:1f:4c:
2f:49:48:ce:ed:9f:71:9c:80:be:64:95:3b:88:f6:e4:ad:be:
c4:54:6f:9f:ef:3a:f7:34:a6:0f:a8:4a:2e:50:9a:fe:1a:33:
81:69:61:37:ab:47:1a:80:e7:d6:a5:79:74:4e:6a:85:78:ac:
49:d5:4c:74:3d:d8:fe:fe:f3:5c:41:58:23:ec:19:97:76:71:
c8:5e:73:4c:4e:ef:2c:31:bd:be:8b:cb:6b:a2:13:e8:70:4d:
60:0e:af:c2:70:da:e8:b7:c9:82:67:37:b4:f7:4c:c7:f8:a0:
6f:53:1b:e6:1e:8a:79:a7:4a:fc:64:bd:6c:53:89:92:0c:f3:
d1:c6:d9:0a:4b:01:b2:91:e3:59:aa:d1:38:31:bb:d5:41:7e:
d1:89:71:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/99No0knxYtGCBtw99XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGIzYjM5NDg2NWU0Yjg1YjY4NmEzOWY1NWVkNGJlNjUz
NmE0ODIwHhcNMjUwODIzMDMwMTQ2WhcNMjUwODI0MDMwMTQ2WjAzMTEwLwYDVQQD
EygzYzkxYzY5NWRjZmYxZTQzMWEzMTBhZmQ2OTRjNTk3OGY1ZDliNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwosE3yjt44ortCvEHOCWkr63uA3r
ovuC5ASzisLHYth6t9SBCRqPCh5FXCb5W2hb89luJi/NhE7fqvGJJrxQcbXYjZ7J
ZUzkp69tpn/j8GuQiLslgjf5H6AKcrPUFLzujGnd5SIbDvXAWgZxiHiglrEiRQwN
2LFjZeDvmkZ1LeLYtqz/2Ef05zaV83PJFBDWQ/+lGh350wvuz6+h9mj1OhfX9zrM
TOfcvwncdIW1Toj8TXX4CagHiGjtyz6oKQOTwsTcGM9m4m5fIVua2H8EWpp8cWUq
T/2PnYqm3NRShWn11EXWQo83/3zlM6T7e5LlU/GRvTQ9hPgYRje+3JLk7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyRxpXc/x5DGjEK/WlMWXj12bZMMB8GA1UdIwQY
MBaAFHsLOzlIZeS4W2hqOfVe1L5lNqSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYt
MmM4ZDAwMTFlODhhLzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kYjM4YWItYzNjZi00NjIyLTg3ZjYtMmM4ZDAwMTFlODhh
LzEvZXdzN09VaGw1TGhiYUdvNTlWN1V2bVUycElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVQ8wx5p
Xvxp5ruxXtGZee0kOkH6UKOBoChFzMJwHlO2FsiidoWETOksMQdYrVSlMKSqLkvG
nj4E95+zzis9rxM53KuT66xh3/aeEMt7QuaPl0thPd82HpIWTqKIrlDg56cOSP78
N36QYR9ML0lIzu2fcZyAvmSVO4j25K2+xFRvn+869zSmD6hKLlCa/hozgWlhN6tH
GoDn1qV5dE5qhXisSdVMdD3Y/v7zXEFYI+wZl3ZxyF5zTE7vLDG9vovLa6IT6HBN
YA6vwnDa6LfJgmc3tPdMx/igb1Mb5h6KeadK/GS9bFOJkgzz0cbZCksBspHjWarR
ODG71UF+0YlxKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:29 2025 by rpki-client