Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: g58NHNBOmVisCNECE5b91ayIqIZVKrOehEVk4UpLjew=
Subject key identifier: DC:6E:94:30:88:21:3C:19:C8:9C:0A:36:27:2E:3D:33:E5:E5:0D:72
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 01987BD2F18E422FAACBE729BF755DB90548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:01:18 +0000
Manifest this update: Tue 05 Aug 2025 20:01:18 +0000
Manifest next update: Wed 06 Aug 2025 20:01:18 +0000
Files and hashes: 1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: dsQSIdzJDCDHQcIdsG6v2P8l0LgQlArlCtaTMnYVnGg=)
2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:f1:8e:42:2f:aa:cb:e7:29:bf:75:5d:b9:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Aug 5 20:01:18 2025 GMT
Not After : Aug 6 20:01:18 2025 GMT
Subject: CN=dc6e943088213c19c89c0a36272e3d33e5e50d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:dd:7a:95:05:c0:bc:59:48:12:76:52:54:
bc:e1:96:17:98:d2:dd:0a:e8:38:8d:e6:75:8f:2b:
c0:b7:ba:63:49:35:cc:4b:22:e0:dd:01:3f:1e:fa:
82:e3:02:cd:34:64:89:cb:10:2a:81:5f:d1:01:6b:
c4:e8:cf:0f:40:82:4e:b5:a1:5e:3c:22:c8:c6:8f:
39:20:8d:f7:dd:6c:b8:67:10:0f:00:cf:7f:df:04:
8f:49:6b:12:11:bf:7b:ba:1f:db:bd:c3:d7:1e:b9:
e0:c6:a1:ce:6c:f4:b6:79:fe:f9:b1:1a:ec:10:8e:
af:cb:6d:34:34:d3:50:15:84:c8:bb:07:37:64:de:
36:a3:5b:0d:aa:61:a1:ef:01:a0:86:3e:9f:51:ba:
9e:ed:08:42:cd:38:32:77:ff:05:65:34:a2:f8:d2:
b1:2e:df:8d:79:ef:e0:1c:07:4d:21:27:82:b6:f0:
90:e9:63:69:de:83:1e:be:9f:4c:37:56:1b:25:89:
30:0f:93:6b:29:b6:3a:ae:47:57:db:c1:de:91:0c:
f8:24:81:88:62:e7:14:d8:5c:98:dd:a4:5f:97:32:
89:b6:0c:90:d0:fa:ff:19:0f:86:9f:e0:04:42:90:
17:f3:0d:ba:a3:ea:c4:0f:3e:e3:ea:55:70:b3:76:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:94:30:88:21:3C:19:C8:9C:0A:36:27:2E:3D:33:E5:E5:0D:72
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6c:ec:ee:2f:8c:b5:32:f1:27:96:c1:d1:cf:e7:91:8d:15:
14:8b:1b:f9:29:44:84:df:77:7a:4f:cf:fc:d3:f5:17:44:a1:
6b:22:f4:ed:c5:bf:31:67:6f:d0:43:4d:43:c9:40:8f:3d:91:
65:b4:86:bb:cd:ae:33:04:5b:02:3a:10:d6:37:86:b6:bd:e6:
f9:0c:75:5c:a4:83:9a:7f:36:bc:8a:34:aa:6e:4b:16:47:24:
7d:f1:9d:50:c4:11:88:28:f6:0a:99:09:0f:57:a2:c3:dc:38:
2a:9b:b5:1b:ee:e1:93:3d:25:ea:9e:33:b2:d8:de:2b:f5:89:
a5:7b:33:9d:9a:81:17:d9:a8:7e:5f:d3:29:a0:60:78:94:97:
9c:1b:b3:8d:30:63:b4:9b:32:28:d9:b1:42:66:87:59:52:c6:
38:f5:d8:4f:76:63:7c:a9:88:36:46:a9:b6:b9:49:40:06:e8:
30:d8:5f:db:ae:94:90:0f:36:26:c6:55:67:7d:30:4d:3b:28:
73:7c:24:46:24:87:3b:a0:fe:b6:53:75:ca:32:ef:32:a1:3a:
aa:a5:a0:63:06:d4:b7:a7:ad:f0:5d:56:cd:3f:74:f4:6a:05:
52:fd:0f:9f:45:1a:71:13:2b:a5:f0:d4:e2:32:2d:c5:23:01:
a5:99:26:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70vGOQi+qy+cpv3VduQVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjUwODA1MjAwMTE4WhcNMjUwODA2MjAwMTE4WjAzMTEwLwYDVQQD
EyhkYzZlOTQzMDg4MjEzYzE5Yzg5YzBhMzYyNzJlM2QzM2U1ZTUwZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSLdepUFwLxZSBJ2UlS84ZYXmNLd
Cug4jeZ1jyvAt7pjSTXMSyLg3QE/HvqC4wLNNGSJyxAqgV/RAWvE6M8PQIJOtaFe
PCLIxo85II333Wy4ZxAPAM9/3wSPSWsSEb97uh/bvcPXHrngxqHObPS2ef75sRrs
EI6vy200NNNQFYTIuwc3ZN42o1sNqmGh7wGghj6fUbqe7QhCzTgyd/8FZTSi+NKx
Lt+Nee/gHAdNISeCtvCQ6WNp3oMevp9MN1YbJYkwD5NrKbY6rkdX28HekQz4JIGI
YucU2FyY3aRflzKJtgyQ0Pr/GQ+Gn+AEQpAX8w26o+rEDz7j6lVws3ZhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxulDCIITwZyJwKNicuPTPl5Q1yMB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2zs7i+M
tTLxJ5bB0c/nkY0VFIsb+SlEhN93ek/P/NP1F0ShayL07cW/MWdv0ENNQ8lAjz2R
ZbSGu82uMwRbAjoQ1jeGtr3m+Qx1XKSDmn82vIo0qm5LFkckffGdUMQRiCj2CpkJ
D1eiw9w4Kpu1G+7hkz0l6p4zstjeK/WJpXsznZqBF9mofl/TKaBgeJSXnBuzjTBj
tJsyKNmxQmaHWVLGOPXYT3ZjfKmINkaptrlJQAboMNhf266UkA82JsZVZ30wTTso
c3wkRiSHO6D+tlN1yjLvMqE6qqWgYwbUt6et8F1WzT909GoFUv0Pn0UacRMrpfDU
4jItxSMBpZkmLg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:17 2025 by rpki-client