Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: PjQHrBJNknbaHShSAZbWxTRcgDMPs9TV33ib/1gSdzQ=
Subject key identifier: E3:17:AD:8A:9E:B4:40:D7:42:79:3D:BB:56:5D:8E:B0:7A:38:31:0B
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 01987A520BD1DE0DB2DC38A3F8FF81B6E182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 04C0
Signing time: Tue 05 Aug 2025 13:00:53 +0000
Manifest this update: Tue 05 Aug 2025 13:00:53 +0000
Manifest next update: Wed 06 Aug 2025 13:00:53 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: 5uAE1UdTD0QGXYIWwtx90JdOxLPtKn6ywm4wWZpx9x4=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:0b:d1:de:0d:b2:dc:38:a3:f8:ff:81:b6:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Aug 5 13:00:53 2025 GMT
Not After : Aug 6 13:00:53 2025 GMT
Subject: CN=e317ad8a9eb440d742793dbb565d8eb07a38310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:15:4c:22:e0:71:81:09:60:73:ea:6c:4d:
09:63:dd:12:9e:15:3c:eb:bf:32:d6:a9:25:b7:5b:
c6:df:64:3d:9f:c9:f3:cd:cf:78:e7:0a:88:8c:6f:
62:b8:cf:25:fa:d9:ad:39:48:6e:87:09:8e:ee:8c:
52:b3:03:9d:ea:78:ed:10:71:90:03:cd:f0:2e:90:
b2:ef:2e:e5:c2:da:84:93:10:7a:f6:50:6c:21:f3:
25:28:d9:29:9c:54:82:88:06:b8:06:97:07:67:39:
9a:31:fe:b0:2d:3b:40:e5:21:f5:cb:5c:53:d9:5f:
6b:ee:6a:0d:30:da:92:a3:ef:d3:0c:31:ac:a9:09:
32:89:71:74:14:c9:2e:9d:75:f7:43:1f:35:dc:3d:
9e:8a:3b:f9:9e:03:e0:17:19:97:df:9c:3c:eb:d3:
9e:80:9b:56:bc:9d:ef:42:45:31:88:7d:7a:93:0f:
3f:6a:49:c8:13:d2:7b:86:8f:85:44:56:70:1b:fc:
b1:57:57:3c:e0:0a:36:78:5e:b5:69:aa:64:b1:12:
74:90:53:69:cc:6f:e5:b6:a0:79:ef:23:cc:fb:e5:
db:80:25:08:08:51:8f:4e:e7:47:53:3f:69:fb:ad:
55:9b:2c:93:32:d0:4b:ab:5b:b0:f0:59:5b:fc:27:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:AD:8A:9E:B4:40:D7:42:79:3D:BB:56:5D:8E:B0:7A:38:31:0B
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:d5:78:2b:0c:76:93:6b:5c:7d:de:e7:08:b7:8e:28:cb:
b0:45:d8:ae:c6:f7:2b:56:1b:16:7c:93:88:36:d5:9b:00:1b:
8a:84:1d:fe:92:a2:d2:5a:55:86:e6:24:d9:ea:43:23:d0:d2:
d7:24:28:c8:3b:f5:75:6d:71:0b:45:30:59:a5:9b:26:71:c5:
8c:25:40:53:62:fa:31:bf:60:10:00:69:11:aa:eb:3c:9d:c0:
9b:0f:be:fe:24:48:d3:6c:46:a8:b3:1b:f1:e5:0d:32:e9:3d:
da:a1:b7:dd:d8:33:80:df:a1:64:db:23:d7:2f:95:8b:ca:2d:
e7:39:c7:d8:d1:10:64:9b:41:8f:10:5e:de:60:9f:18:62:b1:
6c:c1:33:4a:64:f8:c5:2d:9f:94:6a:8b:1b:b8:1a:56:3d:59:
58:fd:4c:c4:4c:be:d9:8d:7e:43:be:8d:1e:3c:17:88:09:42:
1e:11:2d:6d:9f:0c:8b:96:b7:b8:ee:3c:f2:91:83:2c:d9:d6:
22:eb:36:fe:0d:0e:c6:12:3c:32:5f:1e:6e:10:b3:a0:7c:a7:
06:ed:ca:29:f4:10:99:53:4c:5d:0d:28:00:c5:f4:a6:a1:a2:
f1:3b:14:6a:26:4e:cc:e5:93:90:a9:68:d6:3e:b8:54:9f:36:
2c:f4:a2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6UgvR3g2y3Dij+P+BtuGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzU5YzZhNjJlMjc4ZGE4MzExYWZlYzhmNzY3N2M0MTM2
M2QxZjgwHhcNMjUwODA1MTMwMDUzWhcNMjUwODA2MTMwMDUzWjAzMTEwLwYDVQQD
EyhlMzE3YWQ4YTllYjQ0MGQ3NDI3OTNkYmI1NjVkOGViMDdhMzgzMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvawVTCLgcYEJYHPqbE0JY90SnhU8
678y1qklt1vG32Q9n8nzzc945wqIjG9iuM8l+tmtOUhuhwmO7oxSswOd6njtEHGQ
A83wLpCy7y7lwtqEkxB69lBsIfMlKNkpnFSCiAa4BpcHZzmaMf6wLTtA5SH1y1xT
2V9r7moNMNqSo+/TDDGsqQkyiXF0FMkunXX3Qx813D2eijv5ngPgFxmX35w869Oe
gJtWvJ3vQkUxiH16kw8/aknIE9J7ho+FRFZwG/yxV1c84Ao2eF61aapksRJ0kFNp
zG/ltqB57yPM++XbgCUICFGPTudHUz9p+61VmyyTMtBLq1uw8Flb/Cf72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMXrYqetEDXQnk9u1ZdjrB6ODELMB8GA1UdIwQY
MBaAFBB1nGpi4njagxGv7I92d8QTY9H4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4Nzkt
MmVlNGZmOGIwYTgwLzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hN2U1NWEtMjY3Mi00ZDc2LTk4NzktMmVlNGZmOGIwYTgw
LzEvRUhXY2FtTGllTnFERWFfc2ozWjN4Qk5qMGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX7VeCsM
dpNrXH3e5wi3jijLsEXYrsb3K1YbFnyTiDbVmwAbioQd/pKi0lpVhuYk2epDI9DS
1yQoyDv1dW1xC0UwWaWbJnHFjCVAU2L6Mb9gEABpEarrPJ3Amw++/iRI02xGqLMb
8eUNMuk92qG33dgzgN+hZNsj1y+Vi8ot5znH2NEQZJtBjxBe3mCfGGKxbMEzSmT4
xS2flGqLG7gaVj1ZWP1MxEy+2Y1+Q76NHjwXiAlCHhEtbZ8Mi5a3uO488pGDLNnW
Ius2/g0OxhI8Ml8ebhCzoHynBu3KKfQQmVNMXQ0oAMX0pqGi8TsUaiZOzOWTkKlo
1j64VJ82LPSiXw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:42:15 2025 by rpki-client