
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: cALHbvfvdQrMYp3LY7xy/DZF8gwhGhOyKLgiAdZ9bpA=
Subject key identifier: F3:A2:D0:0F:0D:77:D2:39:54:5B:98:5A:CA:2A:B6:08:33:36:DB:38
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 01992D7E6356A024FC95FC21B204ED0F4F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 08:01:21 +0000
Manifest this update: Tue 09 Sep 2025 08:01:21 +0000
Manifest next update: Wed 10 Sep 2025 08:01:21 +0000
Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: zsE7lGK+ykskyMBLHV5gAHIowQDDyx46GCwUhMl1PDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:63:56:a0:24:fc:95:fc:21:b2:04:ed:0f:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Sep 9 08:01:21 2025 GMT
Not After : Sep 10 08:01:21 2025 GMT
Subject: CN=f3a2d00f0d77d239545b985aca2ab6083336db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:d0:7c:bc:cf:22:8a:ce:0f:3c:fa:3a:73:
81:e9:eb:63:7e:d6:0e:05:3a:83:48:e8:04:19:89:
98:9a:86:8e:4c:c2:b3:7b:3d:ad:46:e4:4d:63:df:
e8:b1:cd:22:12:51:4e:8f:b4:15:4f:50:28:6e:20:
fc:a7:ac:96:07:f2:a7:bf:2f:da:04:7c:1e:22:f6:
49:b7:59:cf:69:11:b7:59:30:58:de:27:fe:28:77:
a1:5a:79:c1:e1:87:cb:98:4f:4a:50:a7:f0:ee:1e:
07:4d:af:1c:55:2f:34:3a:b9:f6:4e:0d:27:80:90:
d9:2e:f7:3e:0f:8e:d4:dc:a1:47:c7:27:c3:8c:a0:
f1:90:2b:56:92:a6:97:55:b4:a6:3b:ff:9e:5b:5d:
41:32:fa:62:a4:e5:e6:2c:66:ef:c4:88:c8:55:98:
0a:c8:d8:b8:38:f7:fd:4c:11:0b:b2:cc:99:b0:26:
c7:fd:35:1c:2d:09:4a:a8:05:06:f7:b8:f4:92:97:
f3:cf:b6:85:10:43:2c:f7:9a:ea:18:ce:a0:69:42:
db:ad:c3:02:03:2a:bc:6d:0e:1e:2b:43:5f:8f:f0:
5c:fd:22:15:72:c0:ad:a7:5f:51:8f:57:4b:51:4c:
5e:fd:4e:32:63:80:cb:40:bd:e0:b8:14:2c:74:9c:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:D0:0F:0D:77:D2:39:54:5B:98:5A:CA:2A:B6:08:33:36:DB:38
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7c:30:82:34:0a:d5:c0:9b:ea:19:ab:d7:30:f8:25:e9:c6:
be:e3:cf:67:b9:9b:d9:1d:43:c8:7f:c9:36:ac:bc:b4:45:50:
f1:87:da:06:b9:c4:1c:43:21:9b:3b:c0:33:11:e2:53:fc:bc:
1e:e4:0d:8d:0a:9c:fd:0f:31:f1:6c:6e:9f:b7:42:3e:12:cb:
05:e2:18:a1:9b:9d:50:fb:45:d8:1e:7b:18:88:04:37:03:19:
5b:87:68:88:dc:93:c2:e9:7e:13:35:21:38:3c:ee:87:33:b5:
9f:12:20:8f:b5:a8:61:4b:b4:e7:ba:6c:52:c8:85:d4:50:a7:
7e:0c:ae:68:8d:67:01:26:8b:f0:71:cf:d2:bf:50:06:68:26:
d5:60:68:e5:80:81:c7:be:ef:96:a9:7a:8a:d9:41:d0:aa:08:
00:80:57:c4:f7:78:ca:cd:b3:34:bb:61:d7:2b:53:d1:00:a3:
2d:3a:5a:dd:ce:43:b6:b3:84:dc:84:b4:8b:99:0a:cc:a7:6f:
54:ad:e8:3f:58:63:9e:3a:4c:8e:af:7a:cb:b7:9f:22:17:f7:
fd:75:f3:77:92:88:07:4a:33:bd:d1:82:91:97:f5:b1:f3:e6:
0b:1a:62:29:ef:4f:7a:b9:54:d1:1c:bb:31:4d:5e:23:a2:4b:
1e:80:16:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktfmNWoCT8lfwhsgTtD0+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw
MDNmZDYwHhcNMjUwOTA5MDgwMTIxWhcNMjUwOTEwMDgwMTIxWjAzMTEwLwYDVQQD
EyhmM2EyZDAwZjBkNzdkMjM5NTQ1Yjk4NWFjYTJhYjYwODMzMzZkYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrbQfLzPIorODzz6OnOB6etjftYO
BTqDSOgEGYmYmoaOTMKzez2tRuRNY9/osc0iElFOj7QVT1AobiD8p6yWB/Knvy/a
BHweIvZJt1nPaRG3WTBY3if+KHehWnnB4YfLmE9KUKfw7h4HTa8cVS80Orn2Tg0n
gJDZLvc+D47U3KFHxyfDjKDxkCtWkqaXVbSmO/+eW11BMvpipOXmLGbvxIjIVZgK
yNi4OPf9TBELssyZsCbH/TUcLQlKqAUG97j0kpfzz7aFEEMs95rqGM6gaULbrcMC
Ayq8bQ4eK0Nfj/Bc/SIVcsCtp19Rj1dLUUxe/U4yY4DLQL3guBQsdJzIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOi0A8Nd9I5VFuYWsoqtggzNts4MB8GA1UdIwQY
MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt
YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3
LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3wwgjQK
1cCb6hmr1zD4JenGvuPPZ7mb2R1DyH/JNqy8tEVQ8YfaBrnEHEMhmzvAMxHiU/y8
HuQNjQqc/Q8x8Wxun7dCPhLLBeIYoZudUPtF2B57GIgENwMZW4doiNyTwul+EzUh
ODzuhzO1nxIgj7WoYUu057psUsiF1FCnfgyuaI1nASaL8HHP0r9QBmgm1WBo5YCB
x77vlql6itlB0KoIAIBXxPd4ys2zNLth1ytT0QCjLTpa3c5DtrOE3IS0i5kKzKdv
VK3oP1hjnjpMjq96y7efIhf3/XXzd5KIB0ozvdGCkZf1sfPmCxpiKe9PerlU0Ry7
MU1eI6JLHoAWqg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:48:01 2025 by rpki-client