Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: e/hl8Hd/I3W4cehwiXDMycauoW8UcTwFjYSVuE4UFAM=
Subject key identifier: C7:EC:30:1C:86:E0:34:C6:99:59:CB:AF:7D:04:F4:87:A6:8C:C0:B8
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 0199C48E3C1D9FAC8DCE61D7A8D249802168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 056B
Signing time: Wed 08 Oct 2025 16:01:19 +0000
Manifest this update: Wed 08 Oct 2025 16:01:19 +0000
Manifest next update: Thu 09 Oct 2025 16:01:19 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: Y0Z+sEEnKWuknAf9QefSFeQc2TeOAm+m2scRILOaoXg=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:3c:1d:9f:ac:8d:ce:61:d7:a8:d2:49:80:21:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Oct 8 16:01:19 2025 GMT
Not After : Oct 9 16:01:19 2025 GMT
Subject: CN=c7ec301c86e034c69959cbaf7d04f487a68cc0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:84:b6:bb:74:cf:f1:15:27:60:bf:46:cb:
84:41:99:4b:8d:86:8c:87:49:a5:43:28:5e:37:5d:
0a:eb:26:24:1c:33:cb:51:9f:be:81:f7:a4:cb:40:
6c:b3:50:c0:7a:97:78:fd:5b:f0:c6:74:cf:2b:94:
48:e3:f8:e3:b3:b7:b5:94:82:3d:b4:18:3b:f9:22:
44:a0:1b:8d:be:69:48:8d:95:a6:80:9f:64:73:00:
71:70:68:94:24:ed:75:a0:e6:d4:42:19:63:20:5d:
66:28:97:3d:c6:c2:e6:26:33:9f:8c:9e:2d:55:23:
30:e5:ae:08:33:19:6f:f0:97:07:27:55:e8:6c:03:
59:a9:9e:3d:a8:47:9f:f4:e2:96:16:10:0c:51:b6:
95:71:9f:5d:a1:89:13:ca:90:45:cb:43:45:d4:29:
f5:50:f7:8d:f9:f8:19:26:27:66:b9:66:35:e4:08:
5f:4e:ed:c1:32:5b:e0:cb:58:ae:7e:7b:70:49:c6:
fc:cd:3e:a7:cf:51:8c:28:89:24:b8:0d:e5:9e:49:
76:32:18:7b:fa:8d:5a:98:59:d4:96:25:89:95:ba:
37:9a:62:5d:08:ae:ec:a6:fa:d9:e3:08:95:13:c0:
f2:e6:10:c1:dd:e9:26:71:04:79:3a:b9:06:b9:d7:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:30:1C:86:E0:34:C6:99:59:CB:AF:7D:04:F4:87:A6:8C:C0:B8
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:7a:1a:f3:85:35:a1:62:5a:a9:c5:9b:c9:83:57:f4:7b:
12:b5:f4:51:92:34:25:d1:e0:c5:55:93:0e:f8:a1:57:94:f4:
6b:ca:3d:6c:16:b3:ab:ed:35:70:5e:f4:c8:df:d6:ce:9f:1e:
65:6f:3e:9e:2a:91:25:ae:ee:ce:7d:54:cf:9e:63:c4:59:36:
9d:17:03:9c:93:a3:6a:ca:50:7b:6e:da:bb:bd:ad:61:01:19:
f1:61:19:1a:af:fd:62:c1:26:06:08:8e:38:0b:fa:34:4d:99:
0d:cb:e4:24:05:ab:e1:63:d4:a2:0f:1e:7d:33:c9:fd:62:6a:
1f:f5:ce:1f:e2:4f:9b:04:6c:1f:cd:3a:2b:27:d3:1e:95:d9:
70:08:b6:8f:c3:f1:5b:a1:95:b2:09:60:8c:46:c5:99:5b:5c:
ee:60:8b:b7:a9:d2:17:cf:bb:d3:b1:32:5a:6c:d4:aa:fc:35:
50:f8:09:ff:c7:d2:30:bf:d7:f1:2e:35:66:68:51:b8:b5:82:
97:c6:46:a3:9b:ed:27:18:7a:a5:39:cf:3a:0f:5d:d3:76:7e:
21:7f:79:e3:50:c6:46:c3:18:d0:57:98:f0:45:5f:ae:53:9f:
1c:55:ca:9d:11:a3:59:86:3f:e0:75:34:6c:57:5f:65:08:dd:
5d:14:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:49 2025 by rpki-client