Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: iXbnUiKY4K67diGMsCIGJJujF7Ytc8C1OO9rWphLawA=
Subject key identifier: FA:CF:63:7E:49:02:A2:B5:4B:5C:3A:FC:79:AB:C2:5B:BF:9A:6D:10
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 01983727BAAAE242B8D474E101895A949E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 15FE
Signing time: Wed 23 Jul 2025 12:00:07 +0000
Manifest this update: Wed 23 Jul 2025 12:00:07 +0000
Manifest next update: Thu 24 Jul 2025 12:00:07 +0000
Files and hashes: 1: Aj2rrW4FZK0RLp7ijlwRcBGnmjk.roa (hash: eHBzjeIspzBgFyylIbpkt8jQHfok+Ou4W1bdzs7LSxY=)
2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: mAfotJOUQkRjsIcNqtJwJ28nYyPDBXXGJzVCcBAz934=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:27:ba:aa:e2:42:b8:d4:74:e1:01:89:5a:94:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Jul 23 12:00:07 2025 GMT
Not After : Jul 24 12:00:07 2025 GMT
Subject: CN=facf637e4902a2b54b5c3afc79abc25bbf9a6d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:7c:ee:b2:c4:dc:e8:66:19:c5:01:ce:1b:
0a:7c:b4:2c:9e:4f:fe:eb:92:e2:6f:20:38:7a:fa:
ae:f2:70:a6:4a:7f:bc:65:17:6d:f1:c1:e2:7b:b1:
ac:31:4c:31:04:5b:4a:98:6a:80:8e:f4:3a:cd:06:
d0:14:71:89:b4:16:ce:4c:83:bf:83:b7:f2:ef:40:
d4:ea:8e:dd:74:6b:ac:35:10:e5:77:5d:63:f5:e7:
a7:59:f8:76:95:08:af:6c:40:fd:a6:5a:e1:60:28:
9a:27:0a:6b:cf:cc:79:fd:59:51:42:5b:68:cd:a4:
36:6f:a8:ae:0a:48:a6:d6:09:01:74:9b:46:83:1e:
19:0f:ad:78:85:de:d4:45:ae:4c:9c:7c:32:b9:42:
e5:a8:cf:7e:4e:67:c3:27:9a:d7:48:51:43:73:ec:
9e:ff:4b:a0:65:2a:f2:3a:32:b3:6e:6c:48:ea:bf:
71:7b:81:89:1a:85:ed:61:f5:8b:6a:58:f4:18:06:
2b:96:d1:f7:2d:d7:b7:ca:20:8a:2a:5c:10:87:23:
19:2a:fa:d2:46:c2:a2:fd:d5:e6:37:c6:67:36:fc:
3f:13:d3:a7:9f:cb:60:83:45:27:d4:be:fa:d5:65:
28:19:c7:04:e0:25:90:25:51:b5:64:43:42:e4:b0:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:63:7E:49:02:A2:B5:4B:5C:3A:FC:79:AB:C2:5B:BF:9A:6D:10
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cd:86:71:bf:91:6e:09:6f:e9:a2:fe:69:b0:d1:c3:fb:24:
cb:59:05:d5:b8:a6:c3:f3:98:d2:05:0b:cc:39:07:36:67:d3:
65:9d:cf:0c:a8:62:eb:d2:ec:8f:72:77:57:55:a6:7b:cf:82:
65:69:2c:22:78:6e:08:1d:26:bb:a4:17:46:72:95:52:b0:71:
37:c0:16:99:ca:ec:c9:b1:5f:37:f2:25:6b:56:fa:58:1f:c7:
ad:df:f4:c5:41:54:1b:e7:ef:81:e2:cb:d3:e0:a6:7b:46:39:
e9:38:b2:dd:65:86:a9:7d:12:66:95:91:d5:b2:06:67:3b:99:
8b:69:ae:bc:da:b9:9e:89:0a:2a:65:29:da:92:85:47:dc:67:
90:23:9c:d3:b3:84:8c:68:f9:c4:f9:6e:00:70:cc:e3:11:58:
a3:12:2a:8d:b6:0b:e7:81:18:80:d0:2f:15:cf:61:98:1d:36:
a6:61:65:5c:25:29:22:10:a7:aa:14:c0:37:2a:6c:c5:51:72:
15:9a:c8:1a:72:c4:49:db:97:86:e4:86:64:55:d6:f3:b1:84:
06:26:10:83:4e:db:a1:0c:96:4e:86:ea:91:79:bc:f1:1c:dc:
e9:98:5e:10:b8:a8:50:1a:64:5a:53:8a:9f:c4:a5:c6:e8:c3:
6a:42:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:17:30 2025 by rpki-client