Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier: UVMlUsvGUDyKZ1oVm6Yhg9JUCq9bpmj4BOxXDiZ80xg=
Subject key identifier: A2:9F:64:76:5E:64:C6:05:76:5B:D8:AE:E9:75:0B:3B:93:A4:81:63
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial: 0198E565A709FB47810C7942504F90805A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number: 1652
Signing time: Tue 26 Aug 2025 08:01:40 +0000
Manifest this update: Tue 26 Aug 2025 08:01:40 +0000
Manifest next update: Wed 27 Aug 2025 08:01:40 +0000
Files and hashes: 1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: xw7hZ7fax/oQA8jpjhTft8cr2qUgEAAgterYtnOCtgo=)
2: pVRh1H8i6hpGm0AJsVhAXpoV0YM.roa (hash: yQAZF8uKUbV2hSWHi72VMNtufOdhujdp62Q8WwrqslI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:65:a7:09:fb:47:81:0c:79:42:50:4f:90:80:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
Validity
Not Before: Aug 26 08:01:40 2025 GMT
Not After : Aug 27 08:01:40 2025 GMT
Subject: CN=a29f64765e64c605765bd8aee9750b3b93a48163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:4f:01:bf:a3:3c:39:42:0e:2c:89:15:bc:
a0:7e:3e:87:10:ab:1d:50:d8:34:a2:33:aa:c2:e2:
7f:02:c0:64:7a:f1:aa:9d:d6:9a:54:f8:a8:46:8d:
84:62:df:a7:b0:2f:b5:c8:e2:97:e5:fb:c1:ac:56:
08:3e:72:d5:cc:13:41:9e:d8:41:1d:58:64:af:b4:
d9:7b:c4:79:23:8d:40:b1:d5:13:8c:64:f9:8b:a3:
4e:d2:92:db:64:f8:a4:83:09:2a:99:82:45:30:78:
fd:38:9f:38:24:7d:9c:93:98:26:7d:55:85:a1:d0:
3e:41:23:92:34:5f:1c:83:f7:5f:9f:38:74:fe:a5:
d7:7a:1a:31:9e:64:71:30:d0:6d:9a:ff:71:5f:79:
c8:cd:2d:f0:1f:33:74:55:f9:d0:68:ca:1b:f0:4b:
c6:48:2b:c7:bb:34:51:e3:3f:7b:dd:47:3e:d5:6a:
df:f8:05:c5:1e:48:6f:32:df:99:15:57:dd:8b:ef:
f9:f8:4b:9d:7f:f2:85:29:5a:ac:70:3a:b0:35:bf:
8d:3e:11:e8:bf:16:09:65:d5:ce:3b:e8:d6:d4:15:
b5:ac:be:1a:f1:30:8e:09:d2:32:5f:45:32:47:cf:
e5:95:c4:23:e6:f6:aa:09:4a:8b:ab:df:bb:aa:46:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:64:76:5E:64:C6:05:76:5B:D8:AE:E9:75:0B:3B:93:A4:81:63
X509v3 Authority Key Identifier:
keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:44:6c:36:f8:fa:38:0e:e1:48:3e:a1:81:c8:71:52:58:82:
6d:d2:ae:46:6b:3b:c8:46:ad:53:0f:3c:b7:8e:f7:41:71:2a:
bd:6f:c4:a7:2b:39:9f:4e:88:d4:82:24:2a:93:54:c1:30:89:
96:b6:ad:09:a8:90:69:4b:f7:0c:43:9d:62:cf:65:6a:93:9a:
eb:5c:00:26:9a:6b:47:2c:75:38:10:8c:6f:c3:f0:5f:d8:3d:
4c:c1:d6:02:3a:f0:06:13:4a:73:2e:6d:e3:6a:fe:f3:76:1a:
a5:f4:04:8a:6e:64:6f:6a:42:a9:d2:3e:2e:8d:f4:11:12:e7:
51:f6:a7:fd:c2:f0:fe:13:ec:23:b0:ee:ca:4c:eb:25:00:5b:
c6:85:cb:21:7e:0d:6f:a7:8c:0f:5e:a6:75:9c:6d:d3:3e:02:
3e:14:9c:2f:4e:6e:c9:23:3d:3a:f4:8d:23:f2:37:b4:89:9e:
02:96:65:e3:fc:dc:62:59:78:79:bd:2d:e9:86:2a:84:54:3e:
bb:cd:8d:ee:1e:c9:64:45:31:fc:31:55:5f:71:ec:25:87:80:
81:e0:5b:d7:0f:11:bc:d9:35:74:42:61:c4:09:3e:03:f8:f1:
6e:7b:3e:95:9b:6a:b2:a1:c1:54:bf:17:25:8a:c8:07:9c:3d:
1c:2d:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 15:41:49 2025 by rpki-client