Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: SHiT40ZPhuOlCX/bMWqc5BZ42ZwU9mSgBxCRHI8vihc=
Subject key identifier: 9C:7F:F8:53:3B:D5:9B:49:C4:3F:67:7E:98:F3:25:E3:51:C1:69:50
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01992FA3AF10FD345DFAF2895D84E7F1ED91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 0194
Signing time: Tue 09 Sep 2025 18:01:20 +0000
Manifest this update: Tue 09 Sep 2025 18:01:20 +0000
Manifest next update: Wed 10 Sep 2025 18:01:20 +0000
Files and hashes: 1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: MVs6tMqdUPitxNOXne4Jb14n01tDqcOgRtljVOOUJfs=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:af:10:fd:34:5d:fa:f2:89:5d:84:e7:f1:ed:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Sep 9 18:01:20 2025 GMT
Not After : Sep 10 18:01:20 2025 GMT
Subject: CN=9c7ff8533bd59b49c43f677e98f325e351c16950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:b7:35:37:cb:24:35:b0:a7:df:08:3a:d8:
a7:b4:c1:77:d7:64:67:ff:77:ed:88:2e:05:99:49:
2d:17:52:8b:76:ee:ac:1b:03:b6:85:dd:fe:c3:f2:
2f:56:49:11:de:09:cc:b1:36:e7:2c:85:e3:13:20:
ef:22:ec:ed:95:5c:45:dc:31:a8:77:ae:6a:81:35:
a8:20:b1:6b:c5:3d:af:40:30:2c:42:8a:7b:dc:59:
79:0c:2d:3a:a5:d0:8b:44:c0:14:49:0d:40:b3:be:
30:29:06:28:ba:e3:e4:c8:52:c4:09:7d:2d:8c:a2:
3b:40:f8:94:a3:01:ce:3d:5f:cb:d1:fd:ec:1e:76:
80:66:f3:ef:28:a3:75:50:53:72:d0:fe:23:29:5c:
8c:c7:e1:39:99:71:3f:6f:b4:37:96:c6:5e:bb:7c:
26:5b:b0:ec:e5:77:46:db:23:87:34:9f:ee:ff:20:
c3:57:f0:9a:2c:f7:48:3d:69:4f:02:19:dd:ee:9c:
c7:df:90:22:45:c4:11:04:ec:77:80:bd:de:66:cb:
cd:0b:25:c1:5e:0e:91:ff:04:fb:d3:97:44:29:af:
ce:a1:66:b2:49:3a:98:cb:eb:65:9e:28:98:b6:49:
54:c7:69:c4:00:52:2c:4d:28:21:1d:21:94:4c:48:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:F8:53:3B:D5:9B:49:C4:3F:67:7E:98:F3:25:E3:51:C1:69:50
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:fd:99:86:b8:0e:11:5c:d0:75:1f:f7:c2:17:8e:77:9b:
63:6e:48:56:e0:82:26:ef:b2:2b:12:d7:1f:5b:30:64:10:6d:
59:29:a8:cf:fb:66:0b:38:bc:8b:dc:b6:63:f5:17:cf:03:0b:
ce:84:24:0a:29:2a:25:74:be:75:cc:47:da:3f:ad:6e:f7:77:
c5:08:5d:df:ba:72:66:b6:f4:5e:c0:b1:01:b7:06:a5:3a:28:
e8:f7:02:6e:04:aa:a0:d9:f4:32:b3:a4:28:46:df:00:7c:b5:
9f:d1:ee:f6:7c:94:34:f8:d2:48:6c:45:f9:c1:be:30:01:fd:
b1:52:dc:f6:76:c8:8e:84:e8:89:34:52:fb:e9:46:3e:31:3f:
77:d3:fb:f1:51:3e:49:73:20:b0:da:93:29:ec:61:c3:be:d2:
a1:82:4d:5b:28:44:06:10:eb:0e:2b:5f:13:0f:98:d8:65:31:
19:c8:b5:33:81:82:ea:2f:5a:b7:d5:6c:ad:e0:77:db:18:38:
b5:d6:35:4b:2b:2d:92:61:b2:29:af:30:bd:36:2b:f0:cb:9f:
c4:70:9d:da:08:5f:3a:c4:02:03:ba:aa:34:29:16:8d:c0:6a:
b5:3f:7c:71:75:59:99:3d:74:15:43:f0:aa:5f:bd:3a:9a:71:
d8:36:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:00:00 2025 by rpki-client