Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: +cSIX01Mfl8gJkUKqtUi478gRZnqrL/UJ3pkqd4uZTY=
Subject key identifier: 29:E2:8C:66:73:9A:33:24:B1:56:36:0A:A7:C1:02:1B:A7:4B:D5:7D
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019A4F2B94D4D806EA286BE1D0192CA6211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: 5JrtV9bm3ep1dBGTRx0WqfWQmBVUOCXSnPHnKF9XMIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:94:d4:d8:06:ea:28:6b:e1:d0:19:2c:a6:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=29e28c66739a3324b156360aa7c1021ba74bd57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:3b:ee:21:7c:2d:00:d0:8e:1e:7d:fe:f7:
e0:43:96:7a:42:b1:61:39:9a:e3:61:ab:bb:0b:29:
46:7c:12:00:fb:93:0d:04:7a:2b:97:d5:55:3c:a8:
f9:45:59:a5:51:bd:fe:33:74:a9:23:7f:27:a1:b6:
ed:03:fc:9c:c5:d6:29:36:1e:49:a3:ff:4f:18:29:
08:36:67:f8:e3:f1:5d:fc:51:93:d4:60:80:8c:5a:
9e:09:3f:70:a3:df:50:ba:81:b3:3b:6a:c3:60:36:
24:71:d0:87:5d:f4:80:73:ba:a1:48:ba:9a:5b:76:
e0:55:ce:14:cc:64:f2:fc:c0:72:90:44:fa:e6:c5:
39:c3:38:b5:90:45:b9:9c:a0:e8:8f:64:1e:49:b9:
3a:0e:83:ec:9f:ad:5d:f4:b0:f8:36:8c:90:a0:ad:
f8:2e:fc:40:04:db:e0:8a:8f:e6:cd:74:20:62:5a:
ff:7a:49:33:85:ea:50:46:93:8f:d3:dd:c4:79:8e:
bf:35:9a:63:a2:ec:6c:31:b9:2c:eb:a4:e8:b7:02:
9d:17:c7:91:7f:53:ae:66:25:af:ac:9e:f2:92:da:
a8:8e:7b:d3:40:2d:ca:b5:b8:49:45:b8:5e:e8:02:
aa:0d:0c:85:28:a5:a9:dd:cf:20:b4:70:d2:e1:86:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:8C:66:73:9A:33:24:B1:56:36:0A:A7:C1:02:1B:A7:4B:D5:7D
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c6:e5:95:21:06:08:67:ba:f7:23:b7:e9:ed:0c:0b:d5:92:
c5:e5:94:03:51:3b:d9:85:58:80:fb:ae:e4:fa:ad:63:e6:11:
24:6b:5f:cc:ad:2f:d6:dc:18:23:6e:c6:67:ae:e6:b1:b4:9b:
fc:2e:37:9c:9b:b4:fe:68:cb:e3:94:ee:06:a8:53:53:4b:db:
16:f2:b1:da:12:86:1c:b7:fc:9d:ab:4d:11:22:39:b0:1b:be:
0d:49:ac:da:be:d0:27:31:f3:1c:8e:3d:cc:99:be:6e:61:29:
d0:18:de:6c:2a:97:f9:7d:2b:58:67:b6:c8:86:1c:a5:3c:89:
69:a9:de:ba:09:43:a6:15:f7:c7:b2:8a:cd:72:20:43:5a:34:
29:91:84:bb:c0:9d:c5:6c:c8:37:39:7b:ba:51:4f:fb:28:5c:
e7:33:55:e9:6a:d8:83:4d:3a:47:53:42:11:0c:48:30:dd:5b:
e7:39:d0:d2:eb:ee:2f:71:84:34:c8:65:36:38:13:13:94:00:
95:7b:61:5d:12:ce:55:62:ef:50:1e:80:33:77:f9:f0:ed:6d:
4b:7d:9e:1f:4f:8e:2d:11:33:ed:e1:4e:81:2e:ec:2d:25:98:
9e:37:80:54:3c:00:de:54:22:40:e0:4a:be:bf:b7:f3:74:e1:
6f:36:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:37 2025 by rpki-client