Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: +ijAq7dmb4eS297rSN2FoF3/NRgvY/ZaP94iszjWKI4=
Subject key identifier: D7:33:6B:60:B7:03:C0:14:12:02:EA:F7:7C:E2:1C:DE:6B:BA:3D:5A
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 01987306492789598070A1C2779013E9FFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 03:00:48 +0000
Manifest this update: Mon 04 Aug 2025 03:00:48 +0000
Manifest next update: Tue 05 Aug 2025 03:00:48 +0000
Files and hashes: 1: Aj2rrW4FZK0RLp7ijlwRcBGnmjk.roa (hash: eHBzjeIspzBgFyylIbpkt8jQHfok+Ou4W1bdzs7LSxY=)
2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: sUhjA93xwKbRk//hjQ4sW4VVrT4PRdtNeJxeGCywAO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:49:27:89:59:80:70:a1:c2:77:90:13:e9:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Aug 4 03:00:48 2025 GMT
Not After : Aug 5 03:00:48 2025 GMT
Subject: CN=d7336b60b703c0141202eaf77ce21cde6bba3d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:ed:2f:2e:a6:32:69:9c:17:7d:93:8c:f9:
aa:c7:c8:3c:5e:ab:90:2e:5b:7d:66:3f:f6:38:f2:
df:72:17:25:61:55:27:0e:9e:6a:5d:6e:e1:49:0d:
08:84:0f:1e:56:60:78:2c:57:56:18:6b:93:e7:6c:
43:fe:a9:89:69:8b:53:46:a0:23:15:31:f9:7e:8a:
42:e4:ab:54:f5:bb:28:d3:cf:25:39:cb:19:1c:e7:
67:71:c6:43:6c:4b:9f:c0:a1:bd:a5:90:0c:98:e8:
8b:42:13:0c:b4:e9:4e:bd:21:16:54:43:b9:22:f7:
18:e7:ec:94:0c:a8:44:61:e2:86:b8:6b:06:e1:f2:
1d:fc:ee:92:b0:1a:3a:b3:49:d9:54:13:3b:0c:e8:
c4:91:9e:c3:bf:d0:77:5a:1f:be:52:fc:9e:2e:6c:
22:80:7d:2b:f2:df:ac:a8:95:d7:61:8f:d4:52:a2:
6e:fc:f4:07:b6:d5:27:f7:a3:1b:98:66:42:0e:46:
35:40:e8:2d:a6:5c:d3:3c:03:f3:ad:c1:c9:9a:ef:
9c:b7:7b:49:78:36:6c:a3:e6:de:29:c5:37:8b:26:
f2:f7:9e:a1:ff:82:17:df:3c:ff:2a:7f:a8:6c:c7:
cb:49:21:c2:e2:d6:90:72:65:a1:69:8f:d4:3c:a2:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:6B:60:B7:03:C0:14:12:02:EA:F7:7C:E2:1C:DE:6B:BA:3D:5A
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:d3:76:cd:35:6e:61:8a:8c:5d:38:b0:ea:ef:04:6b:43:
0e:37:d5:e8:aa:3a:17:54:3b:ec:5f:d6:76:ce:35:70:5d:c0:
6a:eb:98:1e:55:d6:59:6a:99:67:be:14:69:b2:65:48:38:0e:
39:79:ba:cc:fd:21:98:30:23:ac:1e:f8:75:3e:2f:0c:74:ef:
81:b2:8d:7a:78:68:ac:f9:33:03:87:c7:35:2d:c2:8e:8e:c3:
45:44:3a:d9:54:c1:38:dd:92:c0:5b:26:41:38:40:b9:ec:9d:
80:30:22:79:92:28:e4:1c:d5:72:a0:db:f0:13:2b:58:96:42:
aa:35:b2:5e:93:75:8d:cd:7c:03:7f:43:7c:92:d3:a6:a0:29:
72:c4:03:7a:fc:7d:b7:22:f7:3b:e3:c3:e9:7f:e8:0d:a1:fa:
15:04:5c:1b:a2:31:1e:0f:3a:d3:d9:72:74:13:df:a0:ba:b0:
48:6d:61:26:2d:a0:59:21:f3:fa:fe:fd:23:69:82:1d:39:e7:
04:15:a3:ed:f0:66:a2:df:4b:05:d3:95:d8:7f:4e:d5:29:d7:
e1:65:fe:c8:86:7e:8b:27:ef:9a:8a:6e:45:81:ff:8b:db:f9:
31:21:f1:e8:dc:43:2d:0f:bb:3d:04:d4:05:8b:e4:f4:ff:5e:
43:c8:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:07 2025 by rpki-client