Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: PRjbHWc4pfKu62ymwxSAp4Xdp//k7qrTCKInaY89720=
Subject key identifier: 7E:F2:C0:DE:F3:B8:6A:36:EB:08:CE:FB:B0:73:AE:9D:E5:F3:F5:54
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019888B283C1B67D6827E0F1D9BB8B9C9CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 026F
Signing time: Fri 08 Aug 2025 08:00:57 +0000
Manifest this update: Fri 08 Aug 2025 08:00:57 +0000
Manifest next update: Sat 09 Aug 2025 08:00:57 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: xO5X+hTEVGsZZ16KvPqH6dZMBXLYeh/ByZhwuD6FQWA=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:83:c1:b6:7d:68:27:e0:f1:d9:bb:8b:9c:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Aug 8 08:00:57 2025 GMT
Not After : Aug 9 08:00:57 2025 GMT
Subject: CN=7ef2c0def3b86a36eb08cefbb073ae9de5f3f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:d5:c7:c5:5b:08:14:ad:cc:9c:a2:d2:12:
e4:fa:51:b3:5b:53:8e:2e:b9:60:f8:38:30:46:a4:
32:c1:4f:fc:80:db:51:19:43:0e:a6:19:bb:02:1a:
08:b8:d7:00:bd:4e:d4:f7:ce:2d:a8:7a:2b:da:98:
1d:cc:5b:47:8c:25:65:1c:27:e9:3b:ab:38:97:8e:
31:86:14:e8:b3:5c:10:f8:b4:2e:1f:4a:fd:fe:89:
97:00:04:9b:30:7a:ee:85:46:5e:65:5a:b4:7a:2a:
93:5f:71:cd:7c:ed:20:f8:0e:ce:5a:1d:94:f1:45:
6f:d0:04:c5:ff:ad:26:97:5a:6f:7c:1b:ab:9a:89:
13:52:94:c2:85:35:ff:ed:5e:1a:23:6a:a6:a8:72:
3f:32:9c:0a:3c:cb:0e:38:d6:3f:78:ea:f6:8d:df:
cb:fb:b2:5d:96:a5:eb:91:37:52:e0:de:88:19:af:
19:13:fc:6a:a8:ad:25:0d:12:d7:30:55:00:2c:42:
1e:08:5c:37:ad:da:72:72:8c:aa:6c:89:eb:f7:fe:
3a:eb:df:57:98:66:4b:2e:dd:46:47:4e:75:0e:32:
b5:84:e2:aa:1f:e7:bd:6f:b2:69:ea:1b:d4:86:5d:
c3:ce:b8:f1:be:fa:26:bd:2f:c1:9a:40:92:93:e0:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:C0:DE:F3:B8:6A:36:EB:08:CE:FB:B0:73:AE:9D:E5:F3:F5:54
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:10:fb:f8:fb:e6:db:0a:b7:41:d3:74:31:25:a7:90:8f:
6e:ed:81:0a:c9:da:65:06:ec:6b:fb:8d:1f:2d:5c:46:d6:4c:
ca:24:eb:c0:f9:2a:8e:7a:d5:b9:ce:6a:33:ed:22:55:c0:fb:
9e:3f:3b:0f:65:74:57:d8:a2:c0:6f:86:ec:0d:a5:bf:ac:d6:
40:f9:77:04:ad:a9:30:52:5d:d4:37:83:c6:1c:aa:bd:d0:56:
8a:bf:44:34:23:0d:ea:c3:3f:f9:36:c1:0d:cf:31:49:05:79:
69:bd:82:3b:75:a3:f8:e5:94:be:d9:bc:ae:3a:d4:9e:46:64:
df:a1:ea:c2:13:83:d9:46:bf:11:2c:30:24:04:11:19:eb:21:
f0:36:86:e3:74:8e:3b:96:65:c6:90:36:08:b4:d3:fa:a5:7b:
3e:59:5f:05:bd:06:f4:33:6d:d6:35:ad:ae:63:f8:89:8e:da:
25:30:f2:f1:4d:e3:98:7c:f7:1f:a1:44:ee:f3:95:7d:08:ee:
2a:fe:47:d6:ed:67:96:3e:bd:de:eb:7d:ca:fc:41:47:ea:72:
fb:28:16:be:1c:ae:bb:51:a5:2d:4f:46:e5:fa:0c:c2:7f:ec:
13:81:7f:ff:18:84:aa:50:7f:ba:1c:3a:98:7d:ff:c1:24:30:
86:cf:9f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIsoPBtn1oJ+Dx2buLnJz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTczZDFiM2UyMzFjNTdiMzUxOWU4ZDRlNTQ3ODY4NjA2
YzRmZDMwHhcNMjUwODA4MDgwMDU3WhcNMjUwODA5MDgwMDU3WjAzMTEwLwYDVQQD
Eyg3ZWYyYzBkZWYzYjg2YTM2ZWIwOGNlZmJiMDczYWU5ZGU1ZjNmNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsXVx8VbCBStzJyi0hLk+lGzW1OO
Lrlg+DgwRqQywU/8gNtRGUMOphm7AhoIuNcAvU7U984tqHor2pgdzFtHjCVlHCfp
O6s4l44xhhTos1wQ+LQuH0r9/omXAASbMHruhUZeZVq0eiqTX3HNfO0g+A7OWh2U
8UVv0ATF/60ml1pvfBurmokTUpTChTX/7V4aI2qmqHI/MpwKPMsOONY/eOr2jd/L
+7JdlqXrkTdS4N6IGa8ZE/xqqK0lDRLXMFUALEIeCFw3rdpycoyqbInr9/46699X
mGZLLt1GR051DjK1hOKqH+e9b7Jp6hvUhl3DzrjxvvomvS/BmkCSk+BuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7ywN7zuGo26wjO+7Bzrp3l8/VUMB8GA1UdIwQY
MBaAFBIXPRs+IxxXs1GejU5UeGhgbE/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEt
M2Y4MzcyZDk2OGQwLzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83MzNmNzQtMGRiZS00NDNiLTg0MzEtM2Y4MzcyZDk2OGQw
LzEvRWhjOUd6NGpIRmV6VVo2TlRsUjRhR0JzVDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwwQ+/j7
5tsKt0HTdDElp5CPbu2BCsnaZQbsa/uNHy1cRtZMyiTrwPkqjnrVuc5qM+0iVcD7
nj87D2V0V9iiwG+G7A2lv6zWQPl3BK2pMFJd1DeDxhyqvdBWir9ENCMN6sM/+TbB
Dc8xSQV5ab2CO3Wj+OWUvtm8rjrUnkZk36HqwhOD2Ua/ESwwJAQRGesh8DaG43SO
O5ZlxpA2CLTT+qV7PllfBb0G9DNt1jWtrmP4iY7aJTDy8U3jmHz3H6FE7vOVfQju
Kv5H1u1nlj693ut9yvxBR+py+ygWvhyuu1GlLU9G5foMwn/sE4F//xiEqlB/uhw6
mH3/wSQwhs+fww==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:14:14 2025 by rpki-client