Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: vNNAk0sTudyhRBV9Xs7ruS2q7LRTCSmgSZrJMLOEtQg=
Subject key identifier: 80:C2:EF:5A:02:D0:50:B6:F7:93:8C:6E:6A:7E:C1:44:E6:16:2F:0D
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019A5299EFF250D8F4C593B805E5715E1129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 022B
Signing time: Wed 05 Nov 2025 06:00:11 +0000
Manifest this update: Wed 05 Nov 2025 06:00:11 +0000
Manifest next update: Thu 06 Nov 2025 06:00:11 +0000
Files and hashes: 1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=)
2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: ZE4v9DzlMRdkmIImpnZCCyNc1NO7qZw+/9ArOxdH3RQ=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:ef:f2:50:d8:f4:c5:93:b8:05:e5:71:5e:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Nov 5 06:00:11 2025 GMT
Not After : Nov 6 06:00:11 2025 GMT
Subject: CN=80c2ef5a02d050b6f7938c6e6a7ec144e6162f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:9e:d4:cf:e7:3f:7a:4e:0f:b3:19:a0:12:
27:4c:cb:12:1a:8a:7d:d3:8f:e7:e2:33:9d:8e:05:
48:2f:80:e3:ce:c7:57:c7:4f:ca:46:13:c6:7b:33:
30:01:78:cc:d1:94:02:1c:80:bb:1e:3e:57:ec:bf:
2a:8b:18:24:fd:8c:93:dc:94:dd:4a:3a:96:9f:fb:
ad:d8:83:ce:63:ee:85:4e:f8:73:d2:97:63:e1:b2:
cb:5f:3a:a7:49:bb:55:39:1c:9b:b5:bf:ff:94:1e:
32:ff:9a:41:48:07:c7:3c:82:83:ed:81:ca:2a:3d:
4f:d4:fe:90:2e:bd:66:5e:f0:95:e7:f9:5e:db:db:
81:6a:43:6c:20:80:91:94:00:e3:a8:25:3b:b6:94:
32:0c:f4:8c:ed:33:12:3c:6f:a7:45:7a:a5:e1:f4:
30:9a:92:51:69:95:96:e0:f4:d1:f2:79:f1:c4:95:
34:07:bd:b5:99:3b:48:45:9c:0b:e2:99:06:e0:0a:
fc:de:60:37:9a:c4:5f:e1:dd:bb:9f:03:a3:77:5a:
5d:b0:28:cc:9c:9a:43:ec:ad:89:39:04:a9:f2:33:
81:7f:33:a9:e5:3a:45:33:18:90:af:32:94:56:d2:
e9:89:87:30:bd:d2:f5:65:8f:dc:69:e6:08:0f:13:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:EF:5A:02:D0:50:B6:F7:93:8C:6E:6A:7E:C1:44:E6:16:2F:0D
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:0b:f5:c1:ee:53:6c:e7:51:41:cc:ed:5e:b5:dd:68:de:
1a:c2:21:18:eb:a7:48:7d:29:31:4b:7a:ab:d2:77:1e:4c:6a:
71:f0:cf:8f:59:1c:c9:19:f6:fb:91:e6:2f:a5:47:16:a3:01:
c7:6f:7e:c2:20:06:37:a2:d9:99:d6:6b:d0:18:71:f9:fb:cd:
25:dd:cd:44:86:50:19:ef:13:40:8a:0d:87:e9:ca:cc:c9:ed:
47:e4:5c:88:89:3f:07:08:67:82:76:43:78:ae:f7:d4:4f:a1:
d7:d7:3d:88:0c:5f:70:59:24:40:a1:13:e3:f5:0d:b0:95:ee:
c5:f1:08:25:34:23:28:b0:74:ae:ee:ff:41:1e:6e:53:71:c1:
39:ab:3a:7b:3f:cc:83:6f:25:9c:78:c0:a2:f4:86:2d:be:8d:
54:95:3b:6e:3e:da:04:28:75:b7:05:11:c6:cb:9e:37:f5:47:
4b:e3:e7:84:e5:bc:aa:e0:cf:06:9f:43:e5:9f:47:f7:56:4f:
ca:99:1d:99:92:c3:d1:86:09:9a:14:64:af:4f:43:9d:24:56:
25:4c:5c:4c:ce:22:dd:50:1f:45:a4:2d:dd:fb:21:06:cc:75:
87:b8:53:13:81:2a:26:01:88:95:9f:60:19:d9:fc:d7:55:a5:
04:3b:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:14 2025 by rpki-client