Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier: 4UPVNeLg43NHBV2lpl6nnDmhjLlTeGPYNu3d86aGttQ=
Subject key identifier: 77:7C:66:0A:07:88:4F:82:E5:E5:7C:35:6E:F4:EE:7D:F7:0C:88:6E
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial: 019A4E869F25D0164839E94FFEB38290069D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: sPBtOmEPpmBg8mH6Fw9d92TCeNW2nN/s593YiFqCBlY=)
2: pVRh1H8i6hpGm0AJsVhAXpoV0YM.roa (hash: yQAZF8uKUbV2hSWHi72VMNtufOdhujdp62Q8WwrqslI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9f:25:d0:16:48:39:e9:4f:fe:b3:82:90:06:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=777c660a07884f82e5e57c356ef4ee7df70c886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:0c:c0:24:a2:70:9f:24:a7:36:e8:2b:c0:
7e:4a:be:ad:3c:47:c8:34:32:b7:48:93:8e:12:56:
cc:3a:03:26:aa:fb:49:01:5c:64:22:c5:d3:68:c9:
a2:16:42:c6:e9:45:0b:cd:65:9f:fe:bd:0c:ef:78:
c0:d8:b6:12:e5:98:c4:4c:4e:96:ef:53:12:41:2e:
bb:09:ff:1e:ca:d1:21:38:d7:6b:8d:df:01:5a:3b:
ce:40:1b:63:97:bf:98:83:a2:15:6e:b0:19:77:e6:
4f:a8:12:52:2a:70:8c:65:4f:f6:9c:86:a2:4f:12:
d6:c4:08:4d:1e:f3:3f:f6:5c:f8:c0:be:4d:7e:6e:
26:a4:8f:85:7f:59:26:22:0c:65:e3:6b:de:ae:ff:
fb:82:bf:e2:b2:72:33:2b:a7:54:d9:bb:38:8a:4f:
0f:82:38:7c:43:62:a9:65:c5:d6:77:e0:74:50:55:
51:a1:3a:cf:48:b1:aa:94:a1:73:60:e4:02:e9:4c:
4e:93:71:1b:bb:91:c5:13:fe:fd:b2:86:9e:83:5e:
bb:ac:b9:a2:a3:c0:a2:98:5f:88:a4:a5:e3:d2:ab:
b4:03:b8:68:2d:ce:30:16:5a:78:05:94:b6:58:30:
5b:14:9f:ff:9b:53:35:99:9d:a5:61:1f:e9:b3:4e:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:66:0A:07:88:4F:82:E5:E5:7C:35:6E:F4:EE:7D:F7:0C:88:6E
X509v3 Authority Key Identifier:
keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:e2:b3:d2:5d:6d:91:98:ff:b0:46:13:e2:c4:84:c4:e7:
9d:7a:88:b2:c8:20:d8:db:27:d1:ea:30:03:88:d0:16:b2:bf:
40:dc:0d:6e:94:a2:8b:6c:69:fd:5a:c3:1c:42:10:8b:5a:b4:
79:86:5c:77:d7:92:72:65:82:5e:7e:b5:d1:92:20:76:c3:d2:
c7:39:6b:68:fb:03:51:27:72:ed:49:12:54:4a:b8:aa:3d:d4:
05:89:80:10:52:62:8a:d1:fa:a7:b4:5d:53:01:4d:db:69:4a:
f8:fb:cc:42:ee:6e:d8:1b:61:66:2d:83:1b:0a:75:e9:2c:79:
ca:4c:16:cd:3d:a4:64:55:97:76:35:e5:a1:6e:89:96:27:fb:
a6:99:61:e7:ff:1d:82:c2:a9:ba:6b:d9:64:f0:7d:96:38:f1:
87:e8:9b:98:be:1b:c8:50:a6:28:a2:d5:1b:7a:c4:dd:8f:0d:
ff:eb:db:b0:51:e3:70:f2:f4:a4:3d:c1:77:e0:d2:08:3a:b7:
49:ea:99:d3:76:d6:f9:c6:3e:a7:00:a5:1b:85:2f:f8:7c:cd:
02:2f:8a:cd:23:79:0a:d8:51:5d:2f:93:3a:96:67:33:73:a5:
a8:be:c7:e1:a3:cf:ac:57:6a:a7:6b:6e:5b:aa:4c:0d:b7:17:
61:20:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:26 2025 by rpki-client