Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: o1Hzr3VF7tgN7Ksyj5tGWdkIMDsvL+8dDVdFNHP6sD4=
Subject key identifier: F2:C0:37:C9:C8:66:56:29:F2:C9:B8:EA:60:60:09:1D:5D:6A:2D:19
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0198D5F1AD823B0C7AE5FC9C43A28914B7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: 6GFPk1qurZRG1uAJiZSau3qFh5ud6J2uQ3rrHfv2Vgw=)
2: piqGQMX4oirPFvgG8Iq_EgyaZlA.roa (hash: bp50gBIVG7X/XZgCWoEMLtteWAtAXpTyJaa7OoH3Wr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ad:82:3b:0c:7a:e5:fc:9c:43:a2:89:14:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=f2c037c9c8665629f2c9b8ea6060091d5d6a2d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:fd:be:91:d1:91:33:41:99:f8:27:e1:11:
66:55:f7:d7:00:83:10:3c:b3:5e:27:74:5d:2d:28:
d5:08:af:5d:40:cc:1f:e6:41:31:f4:7e:48:2f:ea:
cc:90:a9:88:dd:d6:9c:2b:8d:a6:6b:d7:a6:0d:3d:
bf:93:ab:85:b7:c8:d4:3c:03:17:08:b2:b0:77:b4:
84:04:8d:81:0a:d6:8c:0f:57:ee:b4:19:98:05:b8:
79:93:37:06:b1:f5:cf:e1:18:44:81:4c:e5:af:3a:
c1:d7:84:19:f9:19:45:6b:05:cb:07:54:0d:84:54:
86:cb:26:95:63:8a:1c:01:f3:9c:95:1d:e3:da:ca:
2c:2b:f2:49:c7:80:11:e6:eb:94:8f:20:a8:29:fd:
22:8a:31:f3:c4:b7:4f:c3:0a:c2:c1:6f:2e:0d:bd:
bc:7a:f1:73:3b:e1:bc:57:d5:eb:e6:93:ab:ba:b3:
db:3f:59:37:29:2b:ca:d9:2c:7f:b9:e6:11:0a:59:
0a:d4:5c:03:ef:1d:a5:9f:72:01:85:5b:bf:5a:62:
48:42:40:7f:22:19:98:39:e5:54:f5:5c:a1:56:21:
f5:e9:2f:7b:fd:23:94:57:14:fd:95:16:92:a7:20:
c6:8c:85:ed:9c:09:b3:fb:43:c2:61:ed:51:99:db:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:37:C9:C8:66:56:29:F2:C9:B8:EA:60:60:09:1D:5D:6A:2D:19
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bc:fa:38:7b:3a:1c:f5:dd:bf:c1:45:1d:f7:87:29:50:be:
af:e4:94:50:11:e0:d4:60:18:78:23:dc:da:e5:81:7a:3e:1b:
ae:22:4b:b4:10:e0:4d:59:fb:e0:da:32:a0:f1:80:b5:40:47:
18:bd:1f:ab:bc:1a:7b:be:b8:3e:83:72:34:ab:66:ee:82:3d:
dc:8a:73:f5:fd:4a:dc:2b:b7:72:60:c5:b6:8f:61:05:81:77:
02:e4:49:16:26:65:e6:d2:01:b5:b3:4f:4c:86:f4:62:55:84:
8e:e9:02:fe:19:78:c3:ec:23:5b:21:07:4b:e8:e6:2d:b5:ac:
c3:4b:e5:72:a6:4c:12:58:a0:6b:96:80:a9:0a:51:1a:54:49:
ae:20:d6:e7:c7:61:ca:03:4e:95:74:94:d0:7e:57:63:f2:34:
e0:11:fd:cd:a6:2d:07:b9:35:40:40:22:1c:e5:a1:88:c1:9a:
c6:27:be:01:59:cd:c1:94:28:85:4b:2e:03:d0:da:94:fb:d1:
e6:74:e8:90:cb:d9:26:5f:19:58:42:e3:e2:e7:1c:21:ff:a0:
40:51:ff:cf:7a:db:53:dd:44:1a:64:25:e1:4b:4d:0a:d1:d1:
54:05:77:80:bc:68:46:99:da:a7:75:61:01:75:ab:47:6e:c5:
21:59:d1:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8a2COwx65fycQ6KJFLfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjUwODIzMDgwMDQyWhcNMjUwODI0MDgwMDQyWjAzMTEwLwYDVQQD
EyhmMmMwMzdjOWM4NjY1NjI5ZjJjOWI4ZWE2MDYwMDkxZDVkNmEyZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHP9vpHRkTNBmfgn4RFmVffXAIMQ
PLNeJ3RdLSjVCK9dQMwf5kEx9H5IL+rMkKmI3dacK42ma9emDT2/k6uFt8jUPAMX
CLKwd7SEBI2BCtaMD1futBmYBbh5kzcGsfXP4RhEgUzlrzrB14QZ+RlFawXLB1QN
hFSGyyaVY4ocAfOclR3j2sosK/JJx4AR5uuUjyCoKf0iijHzxLdPwwrCwW8uDb28
evFzO+G8V9Xr5pOrurPbP1k3KSvK2Sx/ueYRClkK1FwD7x2ln3IBhVu/WmJIQkB/
IhmYOeVU9VyhViH16S97/SOUVxT9lRaSpyDGjIXtnAmz+0PCYe1RmdtTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLAN8nIZlYp8sm46mBgCR1dai0ZMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLz6OHs6
HPXdv8FFHfeHKVC+r+SUUBHg1GAYeCPc2uWBej4briJLtBDgTVn74NoyoPGAtUBH
GL0fq7wae764PoNyNKtm7oI93Ipz9f1K3Cu3cmDFto9hBYF3AuRJFiZl5tIBtbNP
TIb0YlWEjukC/hl4w+wjWyEHS+jmLbWsw0vlcqZMEliga5aAqQpRGlRJriDW58dh
ygNOlXSU0H5XY/I04BH9zaYtB7k1QEAiHOWhiMGaxie+AVnNwZQohUsuA9DalPvR
5nTokMvZJl8ZWELj4uccIf+gQFH/z3rbU91EGmQl4UtNCtHRVAV3gLxoRpnap3Vh
AXWrR27FIVnREg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:00 2025 by rpki-client