Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: 22v4/iRdvNd5/Kf7O75pCXf9pg4VzaIbWZvD+YgQAn8=
Subject key identifier: 79:8C:3F:A8:CE:87:BA:F5:F5:20:43:E2:11:89:A5:18:C7:66:86:15
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019A2BC37E74A8DB16866B96BAFA14A0C474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 0348
Signing time: Tue 28 Oct 2025 17:00:23 +0000
Manifest this update: Tue 28 Oct 2025 17:00:23 +0000
Manifest next update: Wed 29 Oct 2025 17:00:23 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: MczgdTXKF1zEbXEmvtduZZSxL1iK05M02Sg6MUugJKY=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:c3:7e:74:a8:db:16:86:6b:96:ba:fa:14:a0:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Oct 28 17:00:23 2025 GMT
Not After : Oct 29 17:00:23 2025 GMT
Subject: CN=798c3fa8ce87baf5f52043e21189a518c7668615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:69:db:69:4b:3f:dd:1f:da:81:d3:45:44:
69:05:e1:07:e6:39:55:69:e1:63:b6:e5:ab:29:51:
90:d3:41:21:ce:d4:1b:32:a5:d1:e4:58:bc:f7:c8:
0e:9a:c3:32:33:5d:c8:1f:f4:cc:81:94:aa:3b:8d:
9d:cf:04:7a:b1:db:86:5b:51:bc:51:64:22:7f:c7:
94:dc:d3:3d:e4:fe:37:b9:9c:b8:16:b2:c8:0f:00:
44:d9:3c:e8:eb:b4:e8:3f:78:0f:7e:7e:34:e0:2a:
40:c1:20:de:eb:d7:02:7a:c1:fb:27:4e:8c:aa:35:
3d:7c:80:89:f0:30:22:75:75:89:e0:da:63:bb:6e:
00:56:91:96:01:f1:ed:a6:22:3c:1f:18:99:29:9c:
88:38:ff:1d:88:a4:1b:1d:31:54:40:77:db:4a:59:
4c:59:d2:13:ff:dd:a3:76:74:c8:0a:f8:2d:60:92:
b8:19:02:23:79:dc:43:8b:9a:70:12:ea:93:f9:71:
f1:ae:9e:30:78:69:30:d8:c6:9a:f0:09:58:8a:7a:
3f:08:1a:bc:09:7b:7e:92:ad:3d:89:d3:8d:4d:23:
d5:1e:ba:c5:cf:bf:d5:63:a7:c2:4d:31:88:89:c6:
2c:fb:da:f4:98:b2:99:0f:29:1b:47:30:a1:c0:20:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:3F:A8:CE:87:BA:F5:F5:20:43:E2:11:89:A5:18:C7:66:86:15
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:82:9d:28:1e:2f:c5:ff:07:6f:4a:ac:7c:e8:b4:8c:d1:
72:8d:64:7b:31:6f:c4:1d:af:86:fa:e2:4a:be:d9:aa:07:c6:
42:cd:4e:8a:36:05:a4:0c:47:38:3c:f3:4b:06:75:90:38:82:
43:83:49:9d:71:3c:2e:28:48:78:22:3b:d4:f1:8d:ad:80:7d:
af:e9:98:f2:bb:e0:16:78:85:fc:83:48:90:83:eb:04:d7:1b:
2f:35:4f:d1:b3:1a:27:8d:85:53:84:a2:81:89:80:10:38:33:
8e:0b:51:21:8b:5d:20:32:d1:33:a1:44:45:2a:43:c6:ff:66:
3d:8a:28:87:5f:f0:5c:d3:b9:0b:51:1a:02:eb:47:38:1d:7a:
22:05:5d:78:21:a5:a6:af:47:44:0b:85:8e:53:ff:e8:c7:bf:
ca:75:a6:21:9e:c5:a7:14:68:31:63:33:63:8c:e9:c0:70:b4:
36:9f:b9:63:8d:a6:38:20:21:fd:dd:d7:d9:28:21:4e:8b:ab:
c4:60:b4:4d:77:9d:36:16:3e:9f:b3:64:22:70:76:76:17:21:
16:eb:0e:f7:12:0b:a3:80:d8:ff:5c:5a:7c:47:da:8b:08:25:
02:e7:df:12:45:94:7d:8b:64:ab:42:d5:7e:e0:96:fe:ef:cf:
7d:20:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:35:32 2025 by rpki-client