Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: B0E3jVEWIv81Zs7E5dAwoVNhham4PE4ij838UccKA0Y=
Subject key identifier: 2D:86:5A:8C:43:EF:EF:20:5D:DF:BB:FF:87:72:92:CB:52:23:0A:2C
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019A1B3D7A23F8A19A547EA135253C0974BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 020E
Signing time: Sat 25 Oct 2025 12:00:05 +0000
Manifest this update: Sat 25 Oct 2025 12:00:05 +0000
Manifest next update: Sun 26 Oct 2025 12:00:05 +0000
Files and hashes: 1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: bP6Oa8Umhyzq7emUIgUgBFtu1NnI6ARK9Jv0vv79hLw=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:7a:23:f8:a1:9a:54:7e:a1:35:25:3c:09:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Oct 25 12:00:05 2025 GMT
Not After : Oct 26 12:00:05 2025 GMT
Subject: CN=2d865a8c43efef205ddfbbff877292cb52230a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:c3:3e:21:65:5e:5b:67:6f:a5:6d:e1:45:
7b:53:e8:cd:a3:3e:47:b7:fb:cb:04:7c:18:6b:0c:
4c:fc:7e:aa:c9:ee:6d:83:3d:69:2c:77:65:4f:37:
95:e4:93:cc:a6:a7:39:3e:90:0c:d1:a2:fd:fd:cb:
7d:3e:0a:e5:13:3b:1b:2d:68:62:a2:e4:3b:d8:8a:
ac:ea:8b:9b:58:54:3b:b7:3a:d8:ab:0e:37:74:d7:
bf:d4:fa:5e:c4:13:48:ad:1f:03:84:2e:51:0d:01:
4e:43:6f:2f:39:15:48:3d:fe:e5:1c:08:a7:64:ff:
59:e6:80:42:0b:0a:d8:0e:d3:e9:11:e7:c1:97:eb:
25:3d:43:39:57:3e:85:93:19:87:30:8b:af:88:51:
7b:1b:31:cd:ad:1c:12:50:6e:c1:83:61:72:f1:49:
0b:77:48:bf:87:4e:a8:af:bc:27:61:03:c1:bc:3c:
c4:74:06:5b:64:10:5b:18:c4:20:3f:c9:65:3d:ac:
12:4f:2c:1e:e7:a4:4c:38:e8:e1:e9:af:38:e7:9a:
f0:82:e3:66:32:91:15:55:5c:20:c8:a3:b6:7e:d2:
d0:1d:11:df:8f:b2:b5:2b:cb:f8:3f:70:c3:8e:15:
cb:fa:83:02:df:f4:f8:c6:ea:36:d7:52:a3:aa:f9:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:5A:8C:43:EF:EF:20:5D:DF:BB:FF:87:72:92:CB:52:23:0A:2C
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:6a:5b:ff:c8:6e:2f:07:64:b7:cf:0b:a2:f4:e4:c1:17:
fa:73:c9:f4:91:02:1e:22:91:82:fc:f0:61:f7:d3:56:52:58:
f4:20:51:89:0c:65:de:17:23:cf:04:5d:7a:48:59:f3:a5:82:
58:ea:32:89:95:d1:81:7d:29:29:54:38:d1:81:f0:24:64:c2:
54:ff:52:fb:94:ae:48:63:c1:08:50:0f:77:82:8f:d2:b4:05:
26:3a:16:07:42:1e:72:bf:76:e5:2c:56:b3:e0:8b:24:07:0e:
72:65:3b:f6:98:e0:d3:fc:ba:22:07:c0:30:27:a3:90:70:cb:
2f:e4:4d:41:13:4c:31:85:65:8e:9b:d2:c7:c0:b5:c3:f8:f9:
d7:aa:6d:1d:61:e6:9c:c4:f5:70:7e:6b:26:8b:0c:a7:83:0e:
05:8c:35:ac:24:65:0b:c9:42:85:ff:d5:18:16:6b:2c:9f:0a:
1b:73:9b:b2:99:eb:c4:aa:cc:12:de:7c:1b:29:a7:67:8d:cd:
16:9c:8d:b8:ca:8d:15:fc:a4:83:98:24:6e:90:0a:51:97:cb:
b3:61:cf:88:e5:47:03:dc:94:c9:75:da:58:e0:28:ce:e4:b2:
44:49:22:21:76:ee:ec:29:6b:f1:0c:86:7e:7f:6c:57:f6:2d:
f8:2a:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:55:34 2025 by rpki-client