Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: 37twcYgriMq4gKaCvmoAHpRGuuzlsmSSS509qio3zys=
Subject key identifier: F0:69:A6:31:D2:BE:13:D4:1B:E3:D2:37:AB:FA:32:96:5A:F3:9F:6F
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 019A50E400D7D48BE4FA59A467384F4A7A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 0255
Signing time: Tue 04 Nov 2025 22:01:50 +0000
Manifest this update: Tue 04 Nov 2025 22:01:50 +0000
Manifest next update: Wed 05 Nov 2025 22:01:50 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: Uu5GruyWODR3CIBF1DdvtA80ogeQwPvVrKRMuS7pn0s=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:00:d7:d4:8b:e4:fa:59:a4:67:38:4f:4a:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Nov 4 22:01:50 2025 GMT
Not After : Nov 5 22:01:50 2025 GMT
Subject: CN=f069a631d2be13d41be3d237abfa32965af39f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:bc:99:7d:e3:9d:1f:ef:7a:2e:20:6c:7f:
1c:e5:5b:75:68:06:6d:a5:d2:f5:6a:4f:97:30:3d:
03:91:0b:0e:24:b2:21:20:91:8b:06:36:7d:75:d0:
fc:44:f9:35:5c:8e:40:d2:44:24:e4:06:4e:94:cb:
97:71:96:97:e1:dd:1c:db:6c:fb:c5:4f:72:0f:6b:
82:00:73:60:72:d4:10:56:57:ce:d0:f9:e0:0c:6c:
a9:fd:d5:77:ac:33:f5:f5:87:6f:b9:aa:b8:8d:d9:
4d:12:f8:c6:c1:b9:78:1e:e7:94:72:bb:b1:73:83:
36:fd:46:bd:62:4b:13:a9:68:9e:b3:cc:f6:e2:35:
f6:d8:42:38:c9:99:dd:f7:1b:e1:95:ee:fc:6f:af:
77:e4:22:a5:38:8e:d9:a3:8c:04:51:ea:46:33:00:
30:62:68:51:48:25:8f:25:24:64:1d:26:a2:13:59:
d4:55:e1:34:1d:a7:36:22:e4:f4:f7:15:a6:3d:c4:
ac:64:05:b2:0e:b9:10:57:74:7a:08:86:96:bd:b2:
f7:26:38:f4:8b:13:f2:5b:b0:23:93:79:fc:a9:29:
89:f0:7c:e2:68:00:93:0f:61:98:d8:b5:c3:fc:d0:
a5:1d:b4:c6:58:ed:c0:9f:fd:da:88:af:16:71:dd:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:A6:31:D2:BE:13:D4:1B:E3:D2:37:AB:FA:32:96:5A:F3:9F:6F
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3c:88:a7:b3:1f:b5:92:ba:16:e9:a2:3d:52:3b:8c:aa:f2:
f5:d0:37:39:c7:88:ce:24:32:5d:84:93:46:68:67:4e:43:6a:
08:87:fa:e2:77:d8:74:55:10:0c:3e:af:01:d9:bf:2a:84:a2:
5a:d2:37:15:18:06:d0:15:65:5c:22:b9:20:55:a1:f9:0d:8a:
fc:17:d6:f4:68:48:e0:06:46:6d:16:90:ed:bf:9c:e6:19:26:
ec:f1:e1:d8:94:83:f7:58:7c:b0:f9:7c:9f:3c:eb:c0:dc:42:
1a:df:59:c5:17:f8:ba:50:51:10:ad:39:78:38:47:ae:1a:22:
d6:8b:f0:85:50:98:72:9b:9f:71:c0:90:1a:91:fd:69:b6:91:
cb:f4:ab:43:98:40:6f:8f:bf:00:29:0e:df:ce:b7:ae:04:f9:
93:0f:0f:f0:87:b3:56:30:e2:7c:a3:e8:bb:9b:88:68:79:42:
89:d6:6d:7c:39:d6:3d:a5:40:a4:a0:19:c5:e4:32:ab:5c:88:
12:b7:b4:8c:8c:cf:73:32:8c:89:50:ca:ab:de:07:1f:41:98:
63:87:3d:13:ec:e8:08:4d:6d:1b:77:cc:63:ea:9e:fe:88:de:
8b:59:c2:0a:8d:cd:9c:a1:77:3f:9d:d5:44:00:69:44:a5:05:
7a:a8:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:16 2025 by rpki-client