Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 3BaE+tDWS3lGNDDWBWkxNQu4ozQJlLpXN5e+U013eNE=
Subject key identifier: B8:AA:60:D3:F2:59:14:06:28:47:C3:E4:58:F8:B6:8E:81:74:F8:F2
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019A50AB709E79CB03D70FD7BFD937F483AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 022A
Signing time: Tue 04 Nov 2025 21:00:04 +0000
Manifest this update: Tue 04 Nov 2025 21:00:04 +0000
Manifest next update: Wed 05 Nov 2025 21:00:04 +0000
Files and hashes: 1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=)
2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: IDh9C3z5K1phFlGGAki/r1UKlBtLQFqlCKty0WAJW74=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:70:9e:79:cb:03:d7:0f:d7:bf:d9:37:f4:83:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Nov 4 21:00:04 2025 GMT
Not After : Nov 5 21:00:04 2025 GMT
Subject: CN=b8aa60d3f25914062847c3e458f8b68e8174f8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:82:c7:e9:e4:5e:38:e1:aa:f0:2c:ac:10:
fc:e7:48:68:d7:4b:a1:c7:4c:68:87:12:a4:18:2e:
63:35:a4:80:15:32:f9:55:5f:55:31:3c:5a:ec:7f:
5c:d7:5d:8f:f0:1a:6c:9d:1d:60:82:1e:c9:a7:f8:
af:33:b0:10:5d:4e:a1:a6:6c:41:e8:cf:84:82:a7:
ce:1b:6b:24:c4:40:9d:1b:28:59:e9:d7:ae:37:83:
ac:6f:2c:ac:99:19:c2:bf:1f:4d:e2:05:84:93:bd:
09:de:69:cd:52:69:15:77:cb:9a:70:16:7f:48:4e:
23:6f:44:d7:b9:e4:ef:e6:18:24:d6:ee:77:28:50:
66:bf:53:98:64:1e:81:4a:f9:8b:d0:62:f5:36:38:
c2:09:e5:48:bf:c8:98:ac:38:7f:37:bb:9b:27:77:
23:58:02:24:7d:94:49:4e:19:cc:4d:8f:42:63:5d:
8d:3f:75:db:fa:d2:a4:69:9b:07:05:c2:e5:7f:9b:
14:63:45:cb:50:b7:e0:1f:80:9d:2e:e5:75:43:45:
9e:14:9b:4d:d7:2a:f5:06:d1:20:76:11:f9:85:69:
e1:21:c1:49:fc:7a:52:db:49:ab:10:71:91:32:e1:
28:0f:ba:aa:ba:f6:b2:aa:86:18:79:a1:23:bf:59:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AA:60:D3:F2:59:14:06:28:47:C3:E4:58:F8:B6:8E:81:74:F8:F2
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e0:51:33:9b:31:6a:10:24:b1:ba:7d:67:f7:66:1b:e9:96:
78:07:18:4d:3e:77:1e:9e:96:b5:14:3c:55:1c:5e:b3:20:9b:
4d:5f:5f:90:a6:1a:8b:de:48:6c:a2:7c:19:82:5b:9f:59:92:
ad:cb:67:b7:f1:2b:2b:97:d8:41:ad:93:ad:fd:96:bc:a1:f1:
c7:f3:e5:fe:5c:35:07:87:f8:ec:b8:3e:36:8d:3b:32:64:16:
f0:d2:40:aa:d3:3b:4a:f1:70:bc:e3:56:71:63:37:c0:76:18:
53:55:d9:c4:74:ab:7d:09:54:58:32:de:97:70:ec:f8:cd:fe:
7b:17:24:5b:1f:25:b9:6d:44:2a:35:6c:ac:8f:bd:fe:72:65:
f1:81:4d:a5:6e:c2:fb:0e:d2:8b:a1:0a:29:2f:10:a7:53:2d:
f0:5a:bb:58:a3:32:fb:c9:79:aa:b4:8e:0a:9d:cb:4e:ae:78:
1b:c3:fd:fc:66:9a:56:bd:63:ab:50:0f:e9:9f:25:75:44:6c:
b2:69:23:c4:ca:08:9a:da:9b:ab:35:2e:aa:72:83:52:51:8e:
18:04:20:db:c1:40:f0:a2:c3:e3:48:c6:37:45:dc:8b:44:7e:
fc:cb:0d:cc:16:a0:37:8d:1c:54:0e:ae:79:fb:93:8a:d3:e2:
16:23:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:38:33 2025 by rpki-client