
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: taiATk9NpTImzDZ9cYZZ4nofJv/OGE4QU8jL8bbnalI=
Subject key identifier: 16:CE:A7:36:34:12:6C:27:59:D8:92:9B:C4:0C:1E:FF:FF:FB:8E:64
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 019916886C62F61C9060A4CA40FABA8972D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1669
Signing time: Thu 04 Sep 2025 21:01:03 +0000
Manifest this update: Thu 04 Sep 2025 21:01:03 +0000
Manifest next update: Fri 05 Sep 2025 21:01:03 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: tYqmIuEdpYEhgTNIXPqvuzRqXgZyQjT+bq0ykLjPRhE=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:6c:62:f6:1c:90:60:a4:ca:40:fa:ba:89:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Sep 4 21:01:03 2025 GMT
Not After : Sep 5 21:01:03 2025 GMT
Subject: CN=16cea73634126c2759d8929bc40c1efffffb8e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:94:46:87:b7:7c:09:52:09:56:3f:9d:b1:
cd:d1:db:89:e7:9c:65:4b:eb:2f:30:5d:36:f1:f3:
1c:0a:96:76:52:2d:af:24:8a:5a:a9:a9:4b:9e:86:
0a:d0:4d:9d:1c:cd:a9:72:32:54:50:c7:10:fd:06:
5b:74:9e:fe:de:ab:3e:24:68:2e:e5:f0:8f:e7:ee:
0e:15:7b:c5:72:9c:ab:21:92:c0:1d:d1:a5:0e:34:
da:47:2e:1a:8f:10:04:ae:17:b6:83:ce:8b:21:7a:
33:f1:85:ba:d8:7b:d4:78:89:45:91:a5:ab:f3:24:
6b:67:d6:e9:f6:31:82:f5:ad:8b:ac:84:98:5a:dc:
cb:04:0c:28:be:cc:f1:7e:ab:43:3a:a4:73:13:e2:
6d:ae:01:34:6b:ba:e8:21:84:27:8b:47:c3:66:31:
53:0b:2f:7a:e5:6c:f9:1f:2f:52:35:fc:6d:30:8c:
df:d5:b9:33:43:73:18:bb:88:16:84:5a:ab:97:a1:
81:e6:ef:66:76:e1:8f:9e:78:d2:fc:79:73:64:c5:
f7:39:46:12:b0:5b:55:07:3c:fd:d7:a2:ea:07:89:
b0:ad:34:78:c9:7f:ec:89:93:a7:8e:ee:16:af:ca:
51:1c:60:9c:33:cf:31:3a:79:a8:f0:4a:ce:fc:9f:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:A7:36:34:12:6C:27:59:D8:92:9B:C4:0C:1E:FF:FF:FB:8E:64
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:10:08:26:7e:b7:7a:64:9b:6f:a1:89:da:ee:a3:e7:b9:
8f:47:41:84:76:83:83:b1:bf:a7:50:51:1d:5c:3c:ab:66:a4:
1d:88:d2:2f:cc:c7:b7:e9:a9:7b:66:d8:fe:b6:ac:41:eb:a4:
7b:d8:47:b3:9f:a4:fa:66:fd:c4:f0:90:29:9d:20:1a:9c:e1:
49:2f:db:c2:d2:55:99:9e:f9:d1:a2:c3:9f:23:47:86:93:59:
15:83:5a:11:d9:94:68:88:33:f2:b1:b5:6a:42:8b:ae:1e:af:
e0:7f:65:4a:ef:80:30:14:06:c0:be:40:bb:59:ba:ec:4d:7c:
a1:92:2e:af:51:31:1e:bc:f1:db:9a:cb:da:89:3b:2a:ac:0c:
22:89:1e:14:bc:00:4e:ee:20:76:d1:c0:cf:85:a6:d6:cf:5a:
d4:f3:2b:30:93:af:ff:1b:90:58:3b:49:1a:b6:3e:c5:50:f9:
d1:8e:77:60:4d:1d:34:d1:c7:17:92:f0:43:02:62:24:50:6e:
bb:f4:6b:8a:e8:7b:1f:c4:20:7c:7f:f4:6c:da:18:ae:31:b9:
c6:2f:47:ae:d0:78:88:5d:8e:99:0e:81:f5:61:93:91:d1:84:
00:48:83:82:22:5e:59:2d:68:0c:16:4a:5b:b6:34:72:e6:98:
94:9e:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client