Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: NaIRWJ3b1dsg7RDbf+iK/IbJkTGqnWsx0SCE12Mh9Ls=
Subject key identifier: 6A:9B:AD:FF:39:84:96:AB:ED:22:13:B0:31:A3:8A:89:16:E5:5B:31
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 019879E42D7BAC24C8FD7C6B806F220C61B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0E8E
Signing time: Tue 05 Aug 2025 11:00:53 +0000
Manifest this update: Tue 05 Aug 2025 11:00:53 +0000
Manifest next update: Wed 06 Aug 2025 11:00:53 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: ITh1oqUgxrBMOZXQU+Mw+eH+x6yE5PwVvJRYvLfSkj0=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=)
4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:2d:7b:ac:24:c8:fd:7c:6b:80:6f:22:0c:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Aug 5 11:00:53 2025 GMT
Not After : Aug 6 11:00:53 2025 GMT
Subject: CN=6a9badff398496abed2213b031a38a8916e55b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:0f:05:94:6e:2a:3d:bb:f0:9b:0b:66:e2:
58:26:63:25:82:41:ac:d7:74:59:84:ed:21:a5:96:
5b:f3:82:0a:6a:75:be:0e:aa:92:22:26:7a:f2:06:
de:1b:4d:ce:79:dd:f8:33:19:de:2f:3e:7a:63:a4:
36:e0:3c:f5:50:19:ae:8a:fb:64:d3:9d:71:98:b0:
70:1f:d6:b4:c4:06:bb:ab:fa:a0:2d:2a:f2:f1:67:
b3:de:33:03:0f:bc:75:f6:bd:c9:9a:b9:b1:22:eb:
90:d3:e7:3c:b4:12:80:00:a5:c2:5c:8e:6d:79:2e:
00:2c:e1:9b:ce:9d:df:02:fb:23:36:01:a0:3d:51:
77:f2:e8:b0:66:35:48:ca:2f:dd:05:98:c6:f2:7d:
a5:f0:f2:0b:1c:62:5a:13:e9:07:a1:e7:f5:d1:1a:
f0:99:b8:92:f2:32:1d:87:f6:92:e0:ca:14:1c:be:
97:34:e0:a8:19:9f:7c:3f:60:5a:89:58:7f:a2:c7:
ee:e3:da:c8:07:6d:7f:57:0d:93:ba:01:1f:a1:5c:
58:4f:e0:9d:12:31:be:67:f4:ef:f2:69:d6:6d:f2:
98:5d:4e:2e:05:fd:14:1b:5c:9c:2f:7c:80:7d:02:
41:68:50:ab:0b:4d:a6:9a:11:35:e3:e9:60:45:96:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:AD:FF:39:84:96:AB:ED:22:13:B0:31:A3:8A:89:16:E5:5B:31
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:23:11:27:c9:6d:55:55:5e:89:c1:d3:b8:3b:e7:50:e2:61:
d8:c4:cd:4d:ca:53:3f:85:1f:7b:c9:df:18:aa:7f:bc:ff:17:
93:6c:e1:fd:cf:35:c5:39:71:ac:a9:c9:91:47:33:b0:0c:70:
f3:ea:02:3b:92:8a:0f:04:b8:fc:17:e8:66:a9:0f:6c:e3:23:
74:93:7a:79:cb:78:4d:cb:6d:79:f5:fe:dc:1c:1a:98:93:20:
7e:e0:27:c0:df:79:8d:f2:3a:96:27:7c:c2:5c:4a:fd:d2:86:
e8:83:3c:87:3c:ec:87:20:31:26:50:aa:0e:84:89:be:a0:86:
24:90:88:7b:ff:57:59:96:40:e1:29:15:e6:3b:5b:91:b3:73:
57:c1:c7:9b:72:91:fb:d4:a3:a6:44:fa:a5:b4:22:1f:12:d3:
f0:35:9c:1f:32:b7:1e:32:26:0c:d7:2e:e6:10:85:6f:db:5c:
48:68:78:18:77:46:34:32:8e:fe:3c:fc:ea:fa:37:d9:a9:5d:
a8:fc:a0:03:3b:19:44:51:88:57:85:f7:5f:47:c4:08:df:2d:
bc:a7:dd:8f:c5:3a:b6:16:8c:40:5d:a2:e8:1f:bc:ec:10:af:
89:b5:49:e0:18:cb:71:51:3e:a1:dc:70:ec:62:60:fc:dc:c8:
6c:63:23:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55C17rCTI/XxrgG8iDGG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzIxZWFkNmE0NTc1NjQzY2I3MDMwNjJjMDk2ODc1NWU4
MjgxZWIwHhcNMjUwODA1MTEwMDUzWhcNMjUwODA2MTEwMDUzWjAzMTEwLwYDVQQD
Eyg2YTliYWRmZjM5ODQ5NmFiZWQyMjEzYjAzMWEzOGE4OTE2ZTU1YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhIPBZRuKj278JsLZuJYJmMlgkGs
13RZhO0hpZZb84IKanW+DqqSIiZ68gbeG03Oed34MxneLz56Y6Q24Dz1UBmuivtk
051xmLBwH9a0xAa7q/qgLSry8Wez3jMDD7x19r3JmrmxIuuQ0+c8tBKAAKXCXI5t
eS4ALOGbzp3fAvsjNgGgPVF38uiwZjVIyi/dBZjG8n2l8PILHGJaE+kHoef10Rrw
mbiS8jIdh/aS4MoUHL6XNOCoGZ98P2BaiVh/osfu49rIB21/Vw2TugEfoVxYT+Cd
EjG+Z/Tv8mnWbfKYXU4uBf0UG1ycL3yAfQJBaFCrC02mmhE14+lgRZZ4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqbrf85hJar7SITsDGjiokW5VsxMB8GA1UdIwQY
MBaAFBByHq1qRXVkPLcDBiwJaHVegoHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQt
M2Q0YWU4MGZjNDVkLzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jYTkzNWItMjQ4NC00MDIwLWI4MTQtM2Q0YWU4MGZjNDVk
LzEvRUhJZXJXcEZkV1E4dHdNR0xBbG9kVjZDZ2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSMRJ8lt
VVVeicHTuDvnUOJh2MTNTcpTP4Ufe8nfGKp/vP8Xk2zh/c81xTlxrKnJkUczsAxw
8+oCO5KKDwS4/BfoZqkPbOMjdJN6ect4TcttefX+3BwamJMgfuAnwN95jfI6lid8
wlxK/dKG6IM8hzzshyAxJlCqDoSJvqCGJJCIe/9XWZZA4SkV5jtbkbNzV8HHm3KR
+9SjpkT6pbQiHxLT8DWcHzK3HjImDNcu5hCFb9tcSGh4GHdGNDKO/jz86vo32ald
qPygAzsZRFGIV4X3X0fECN8tvKfdj8U6thaMQF2i6B+87BCvibVJ4BjLcVE+odxw
7GJg/NzIbGMjQw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:57 2025 by rpki-client