Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File: ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier: TscMoW5GT0AZmlqrLdvJn+x+9FsRdx/8sxRODLFyDD4=
Subject key identifier: 0E:DE:A6:34:CD:51:3A:8D:EB:36:28:82:39:CD:DA:57:68:C8:A4:D9
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer: /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial: 0199FF22E3C5E9F264BFC9557BB5EA635299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number: 0514
Signing time: Mon 20 Oct 2025 01:01:40 +0000
Manifest this update: Mon 20 Oct 2025 01:01:40 +0000
Manifest next update: Tue 21 Oct 2025 01:01:40 +0000
Files and hashes: 1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: RfIdhvoCmPYBTHafoTyD2l+1WAx8g9NLFKFiPRX0E2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e3:c5:e9:f2:64:bf:c9:55:7b:b5:ea:63:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Validity
Not Before: Oct 20 01:01:40 2025 GMT
Not After : Oct 21 01:01:40 2025 GMT
Subject: CN=0edea634cd513a8deb36288239cdda5768c8a4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:4b:30:9e:02:1f:22:6f:4b:fa:2b:15:85:
2f:74:70:67:7b:5a:6a:f5:3a:23:a6:51:02:3e:c4:
3a:5c:7c:fa:05:6b:a9:31:58:f2:60:65:cc:a9:a7:
58:3f:e0:f4:ed:6a:66:47:9e:12:ba:eb:bf:3b:7b:
e7:09:8e:d1:60:cd:0b:4c:36:5d:e2:bb:06:fa:11:
1d:96:e2:a3:1c:f3:63:4f:7d:bf:8f:8b:de:d5:59:
67:e9:c8:bf:e2:37:7b:e4:e9:72:ee:f5:2f:e0:b4:
b1:2c:7a:c6:a5:c3:64:a0:0b:64:0b:72:db:51:ab:
9d:43:c3:6b:7a:b5:54:79:ce:bf:32:71:b0:85:06:
2d:32:f6:34:7d:cb:7a:67:49:40:0b:07:d5:a6:d2:
de:8d:26:c5:3e:b7:3c:9a:d7:4a:a1:ec:9f:60:09:
37:d5:c1:f1:c7:50:d1:b6:20:c1:49:89:b6:e9:2a:
e8:c2:f5:b9:3e:04:d2:e9:aa:b4:ff:b8:7e:a8:f5:
ff:9c:0f:f6:f0:7e:a9:0e:57:dd:b7:8d:1a:33:cf:
ed:97:d1:db:68:58:08:00:3b:c3:d5:90:7a:07:e0:
7d:20:60:e2:f4:77:98:3d:4e:e6:76:f1:9e:61:cc:
8d:d9:4b:56:d0:37:b6:ce:e8:a3:b1:4f:10:61:03:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:A6:34:CD:51:3A:8D:EB:36:28:82:39:CD:DA:57:68:C8:A4:D9
X509v3 Authority Key Identifier:
keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:d1:d6:ab:ec:09:1b:89:50:69:cd:e2:b0:bc:d9:f4:7c:
ea:b5:af:72:c6:cd:b4:88:38:03:74:b5:7c:aa:5c:3e:68:18:
f5:95:61:5e:2f:bb:a1:da:c5:20:af:a5:e9:86:ac:b1:7e:5a:
44:a6:c2:cc:16:cc:d7:7a:4d:24:fd:9b:84:b8:42:d9:51:27:
94:e7:33:ff:66:98:ac:22:8d:ce:e6:e7:9c:e6:a4:9f:6e:45:
2c:73:17:cb:cd:c0:df:f9:bb:50:3f:a7:eb:91:d7:7d:91:09:
e7:8f:03:b8:23:ad:f0:ad:75:4e:54:26:0b:d0:de:d1:db:54:
88:f0:73:71:7f:b4:03:21:23:6a:93:d0:4d:3b:e2:55:6d:d1:
e4:f6:8e:f5:a0:27:c1:ac:b3:44:33:a3:62:de:b6:dd:a6:28:
86:37:9a:ec:b1:17:db:34:a4:fe:65:4c:13:a9:53:2f:8f:fe:
36:22:2f:c1:c9:56:d8:75:73:ab:81:36:79:97:c2:79:fa:de:
43:b2:d0:45:e7:6d:b5:fa:51:1e:02:f3:19:18:85:e3:7e:30:
02:89:2b:49:5b:02:44:dd:d1:0f:fc:14:66:f1:82:45:58:86:
92:84:10:20:99:ca:3d:77:5b:ab:e1:72:60:07:a7:0a:3f:23:
22:a1:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:44 2025 by rpki-client