Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File: EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier: OVTBgRPt62PdSuZG6yuEvasW+6CC9r//GwRzVV0gPgo=
Subject key identifier: 8B:82:30:C1:29:FD:95:8A:98:F3:D5:1A:EA:C7:35:F7:7E:4F:99:13
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 0199FE0FE03BAC0D12F2F1DF3F4FA7D49C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: pdQxRqOSflvLFa9Pg2wylX1JcDAzwAjrn/eIj1BDcKk=)
2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e0:3b:ac:0d:12:f2:f1:df:3f:4f:a7:d4:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=8b8230c129fd958a98f3d51aeac735f77e4f9913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:7f:a3:93:92:41:86:1b:61:d9:ae:62:48:
6f:2e:04:8d:12:c1:08:9d:dc:d1:fd:2e:aa:4f:47:
dd:8c:d7:c4:aa:ab:b7:6c:c4:07:31:1c:2f:4b:81:
30:09:eb:5f:09:d0:9d:02:71:dd:57:f2:20:f1:e6:
9d:6a:66:e4:12:48:a2:82:e6:83:64:42:7a:6e:bc:
cb:39:a4:e1:f4:47:14:fc:0f:b2:35:2b:6e:19:5a:
2e:67:5d:39:f3:84:3e:82:07:ed:de:14:9c:0e:19:
b6:d5:f2:3d:c0:0a:ec:bd:91:8e:4c:00:20:87:b6:
6e:2d:b6:98:d2:3a:19:cb:f3:9b:b1:9c:41:db:30:
e1:02:28:e6:65:49:f3:5f:d9:cf:7b:f5:27:58:5b:
1b:3b:5a:b7:07:9c:1d:0f:7a:62:08:94:20:6c:b5:
e6:97:25:65:15:9e:f5:82:f6:56:cc:1e:ca:57:ba:
35:7f:73:21:4d:e5:e1:31:c5:1b:5b:95:82:70:79:
94:2e:9c:f8:4f:65:4d:a9:bf:f6:f2:17:c0:5f:bb:
ea:b8:5e:08:dc:5e:2b:34:18:e3:8d:f0:18:03:15:
81:f8:5d:1b:8c:53:0b:60:36:6b:4b:68:98:32:b1:
83:57:27:07:49:f2:0e:fd:eb:c0:d7:f0:c6:2a:2a:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:82:30:C1:29:FD:95:8A:98:F3:D5:1A:EA:C7:35:F7:7E:4F:99:13
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:ea:c8:bb:46:f0:ab:c8:cd:d6:b2:d2:89:09:6a:3d:71:
0c:35:15:a4:e7:ef:c1:7e:e7:3f:00:36:6d:c6:46:6f:c6:d5:
05:c9:07:8d:ab:c6:ab:fa:61:c5:f1:76:43:d7:df:97:51:e3:
8c:39:7a:bf:1c:5f:bb:87:23:b1:2e:7a:0f:ae:ec:57:49:61:
49:4d:be:ee:1e:7e:06:6f:1f:68:5d:8a:c5:26:b7:b1:4c:1f:
03:fe:f5:cc:89:18:fd:aa:7d:6a:99:62:81:4c:1b:60:8b:a4:
f2:15:50:de:86:42:2d:c0:77:f1:35:33:68:d5:33:98:07:e5:
49:ee:b7:58:2c:5b:6f:00:d5:51:91:79:21:f3:ce:44:7e:a3:
f4:71:1b:d5:10:ea:4a:cd:f7:4e:45:f2:5e:8f:8d:2d:3e:3e:
eb:32:be:1e:b2:ec:0f:f5:36:bb:f4:b4:c8:65:68:cc:8b:3c:
93:ca:14:18:b9:ff:86:47:26:83:e8:50:6e:44:fc:05:2d:ff:
53:b2:4a:37:23:f0:18:45:7d:bb:f2:3f:0a:e3:bd:fc:a8:9c:
c6:39:bd:8e:e6:fa:b0:ad:67:14:e5:76:63:62:6f:71:83:6e:
54:8f:9c:52:ff:20:e3:18:af:6a:32:42:43:38:7f:39:ac:a1:
4a:60:1f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+A7rA0S8vHfP0+n1JyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjUxMDE5MjAwMTE3WhcNMjUxMDIwMjAwMTE3WjAzMTEwLwYDVQQD
Eyg4YjgyMzBjMTI5ZmQ5NThhOThmM2Q1MWFlYWM3MzVmNzdlNGY5OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHR/o5OSQYYbYdmuYkhvLgSNEsEI
ndzR/S6qT0fdjNfEqqu3bMQHMRwvS4EwCetfCdCdAnHdV/Ig8eadambkEkiiguaD
ZEJ6brzLOaTh9EcU/A+yNStuGVouZ10584Q+ggft3hScDhm21fI9wArsvZGOTAAg
h7ZuLbaY0joZy/ObsZxB2zDhAijmZUnzX9nPe/UnWFsbO1q3B5wdD3piCJQgbLXm
lyVlFZ71gvZWzB7KV7o1f3MhTeXhMcUbW5WCcHmULpz4T2VNqb/28hfAX7vquF4I
3F4rNBjjjfAYAxWB+F0bjFMLYDZrS2iYMrGDVycHSfIO/evA1/DGKiqHKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuCMMEp/ZWKmPPVGurHNfd+T5kTMB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlDqyLtG
8KvIzday0okJaj1xDDUVpOfvwX7nPwA2bcZGb8bVBckHjavGq/phxfF2Q9ffl1Hj
jDl6vxxfu4cjsS56D67sV0lhSU2+7h5+Bm8faF2KxSa3sUwfA/71zIkY/ap9apli
gUwbYIuk8hVQ3oZCLcB38TUzaNUzmAflSe63WCxbbwDVUZF5IfPORH6j9HEb1RDq
Ss33TkXyXo+NLT4+6zK+HrLsD/U2u/S0yGVozIs8k8oUGLn/hkcmg+hQbkT8BS3/
U7JKNyPwGEV9u/I/CuO9/Kicxjm9jub6sK1nFOV2Y2JvcYNuVI+cUv8g4xivajJC
Qzh/OayhSmAfew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:43 2025 by rpki-client