Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: MvETnMTiGgZAwz3m7AzED7vcl9jzNUNxcYmJ4tFEVjg=
Subject key identifier: E0:30:13:F9:C3:FE:3A:22:2D:22:E7:C1:FE:39:C9:FC:A6:41:63:75
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 019A51BE6C931F186553141A7DCAD68407CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 174F
Signing time: Wed 05 Nov 2025 02:00:25 +0000
Manifest this update: Wed 05 Nov 2025 02:00:25 +0000
Manifest next update: Thu 06 Nov 2025 02:00:25 +0000
Files and hashes: 1: 5Fh8wLq-vAfdSqECF1o7u7so-j4.roa (hash: ZlARtLuw+Q8e0b7Jolz8g+1kXlsunG6VLot0JEG5Rcc=)
2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: jHdRKdzQExYZOVhsDt/sU8PmqEGtJfLRj0BQ/q/m/Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:6c:93:1f:18:65:53:14:1a:7d:ca:d6:84:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Nov 5 02:00:25 2025 GMT
Not After : Nov 6 02:00:25 2025 GMT
Subject: CN=e03013f9c3fe3a222d22e7c1fe39c9fca6416375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:17:f5:b2:b6:d6:30:20:7f:0a:2d:04:34:
9a:fb:63:65:2d:bc:0a:61:df:58:a4:1e:6b:af:7d:
d2:c1:c9:7d:55:a0:7c:91:b4:bc:79:d4:66:a4:4b:
62:a6:2b:bf:9f:29:22:f6:ff:d5:47:98:0f:f9:c4:
87:b7:cb:9c:85:bd:68:a3:29:67:08:56:c7:26:6e:
e0:a1:ac:5a:a3:3f:62:e7:e8:a1:7a:d5:c2:a1:39:
04:bb:dd:1a:a8:eb:72:37:86:0c:f2:3c:f9:f5:81:
9d:51:c8:93:5e:e9:d1:4c:f2:bb:fc:96:5b:92:4f:
8d:02:5f:16:cc:1d:70:f3:27:e4:4c:d8:c5:fe:a9:
4a:70:3a:e8:6f:e4:82:af:cf:00:5f:48:00:4b:ef:
e4:76:b7:61:0c:b6:ea:64:e5:2e:68:eb:a4:78:22:
45:a0:e7:c9:45:45:78:eb:ec:fb:59:96:c7:c1:1a:
4f:fc:5e:6f:4a:35:1e:66:66:c2:38:89:9f:75:da:
1b:da:a5:71:ce:3a:b6:24:0e:d6:87:11:9d:c0:57:
b0:79:94:f6:cd:39:17:d8:53:0d:13:f7:a5:a1:e8:
94:d1:e0:6c:e0:85:6c:66:47:6a:5b:36:a0:55:3e:
3d:5f:f0:17:20:ca:d3:c6:1a:43:1d:29:31:86:16:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:13:F9:C3:FE:3A:22:2D:22:E7:C1:FE:39:C9:FC:A6:41:63:75
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:c6:25:d1:a5:9f:98:4c:97:81:b9:f2:64:13:d1:f0:fa:
d4:ed:51:11:d2:f2:34:2e:e1:73:cd:12:0e:ba:fb:e8:b2:2b:
76:ef:d0:35:33:c4:6b:c4:b0:89:a7:b6:c5:b9:84:07:29:74:
dd:38:e8:77:be:04:12:be:9e:bf:b4:d8:c6:0b:6f:e1:92:cb:
f9:17:d4:fb:e2:c0:b8:4f:fa:05:5e:a6:a7:33:4c:4d:56:66:
c7:18:14:d8:ab:ce:9e:70:6d:03:66:1c:45:ab:32:5b:63:35:
48:ea:4a:f4:6f:3b:6d:15:43:fd:67:84:c0:fe:34:87:e6:54:
d5:ec:07:4b:a6:17:a5:db:b2:b6:36:0a:0f:f9:46:cf:89:17:
e1:0c:f4:e5:cf:8d:8d:19:00:3e:fd:c8:bd:ee:7d:7c:cc:b9:
61:13:cf:11:00:ff:ac:48:93:cb:b9:59:14:65:25:b5:1e:fc:
b4:c7:eb:de:53:5a:0b:28:10:f2:ac:08:62:b2:3c:38:d7:76:
28:c4:46:2a:e8:e1:8e:9a:71:8c:04:90:59:24:51:68:40:73:
0e:34:14:b3:e1:81:fe:d4:df:ec:8f:a3:ca:52:c3:1b:c1:09:
f3:0c:f8:c5:ef:b2:de:b9:25:87:72:70:f3:e8:41:8a:4e:ab:
59:b5:10:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmyTHxhlUxQafcrWhAfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjUxMTA1MDIwMDI1WhcNMjUxMTA2MDIwMDI1WjAzMTEwLwYDVQQD
EyhlMDMwMTNmOWMzZmUzYTIyMmQyMmU3YzFmZTM5YzlmY2E2NDE2Mzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqroX9bK21jAgfwotBDSa+2NlLbwK
Yd9YpB5rr33Swcl9VaB8kbS8edRmpEtipiu/nyki9v/VR5gP+cSHt8uchb1ooyln
CFbHJm7goaxaoz9i5+ihetXCoTkEu90aqOtyN4YM8jz59YGdUciTXunRTPK7/JZb
kk+NAl8WzB1w8yfkTNjF/qlKcDrob+SCr88AX0gAS+/kdrdhDLbqZOUuaOukeCJF
oOfJRUV46+z7WZbHwRpP/F5vSjUeZmbCOImfddob2qVxzjq2JA7WhxGdwFeweZT2
zTkX2FMNE/eloeiU0eBs4IVsZkdqWzagVT49X/AXIMrTxhpDHSkxhhay9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAwE/nD/joiLSLnwf45yfymQWN1MB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwTGJdGl
n5hMl4G58mQT0fD61O1REdLyNC7hc80SDrr76LIrdu/QNTPEa8Swiae2xbmEByl0
3Tjod74EEr6ev7TYxgtv4ZLL+RfU++LAuE/6BV6mpzNMTVZmxxgU2KvOnnBtA2Yc
RasyW2M1SOpK9G87bRVD/WeEwP40h+ZU1ewHS6YXpduytjYKD/lGz4kX4Qz05c+N
jRkAPv3Ive59fMy5YRPPEQD/rEiTy7lZFGUltR78tMfr3lNaCygQ8qwIYrI8ONd2
KMRGKujhjppxjASQWSRRaEBzDjQUs+GB/tTf7I+jylLDG8EJ8wz4xe+y3rklh3Jw
8+hBik6rWbUQNA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:30:44 2025 by rpki-client