Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: Qp0jGw9RNhbx45HcYrVF+57ub1NZ5CaA8QcL2jMYp6A=
Subject key identifier: AC:65:85:F0:B6:5B:5A:3F:2D:30:5B:74:3B:23:8A:17:74:B3:C4:A9
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0197B5C4DCC9981A275CC7B3878E4E401E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 09:01:07 +0000
Manifest this update: Sat 28 Jun 2025 09:01:07 +0000
Manifest next update: Sun 29 Jun 2025 09:01:07 +0000
Files and hashes: 1: Aj2rrW4FZK0RLp7ijlwRcBGnmjk.roa (hash: eHBzjeIspzBgFyylIbpkt8jQHfok+Ou4W1bdzs7LSxY=)
2: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: //UJg5sapKXiOpCz42hFJunWyfVgpi89okQSiKyrgaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:dc:c9:98:1a:27:5c:c7:b3:87:8e:4e:40:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Jun 28 09:01:07 2025 GMT
Not After : Jun 29 09:01:07 2025 GMT
Subject: CN=ac6585f0b65b5a3f2d305b743b238a1774b3c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:e1:fe:92:9a:16:13:e2:9f:a5:0d:be:77:
64:58:17:fa:13:28:ac:6b:75:b1:b2:b8:5a:8d:e4:
ec:b3:0d:33:f0:97:a8:9f:ed:ce:b0:ba:20:1e:95:
2b:58:f1:49:bd:92:19:68:1b:98:54:76:d3:5a:99:
8e:8d:78:18:05:c8:9b:08:b1:0e:da:8b:b1:65:82:
d1:23:2e:8d:95:8d:d8:50:c2:b3:5c:bc:37:5d:d7:
ec:4d:a5:07:91:1f:66:85:dd:6b:05:17:0c:02:53:
8d:51:e8:94:a2:89:80:9c:80:f5:5e:cb:b7:d8:84:
1e:88:ec:30:26:17:32:4d:19:75:e7:6f:51:f7:30:
6a:c6:d5:f8:d0:e1:e5:74:f9:9d:39:f2:a4:a6:cd:
a8:28:7e:e6:41:f7:55:03:58:19:f3:09:57:a2:9c:
4d:80:d6:ed:7f:d7:06:0b:86:46:5b:b4:3f:f8:d2:
21:ef:6c:e8:50:3f:32:8c:f9:d3:7c:df:6a:c6:ee:
b8:d1:6d:50:c2:68:b6:05:aa:01:f8:98:20:8b:26:
e3:d7:06:bf:d4:40:53:9f:fe:53:39:7d:ee:c6:38:
ee:55:78:f7:5a:0e:6f:9e:cb:46:17:83:be:46:57:
c1:fe:f0:82:c0:31:b8:3c:f2:6a:64:7f:9d:58:9e:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:85:F0:B6:5B:5A:3F:2D:30:5B:74:3B:23:8A:17:74:B3:C4:A9
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2a:ba:7c:a8:44:bc:09:56:2b:46:b9:15:5d:af:07:c2:d1:
bb:2a:ef:70:43:46:8c:13:e3:d2:93:9c:fa:8b:57:7d:a6:7b:
c7:ff:d9:93:fe:4e:f5:9a:eb:8e:66:6e:e6:83:ea:c8:ad:92:
3c:e2:b7:f9:be:8f:cd:41:05:bf:67:3b:a6:11:e3:8f:2a:70:
63:6b:d4:d4:df:9a:00:ef:21:8a:b3:9e:ca:dc:75:d5:6a:f1:
e8:44:f4:da:08:f8:c2:32:6c:22:b6:a7:8e:82:57:26:f1:3f:
e9:2d:5a:ff:bc:21:bd:01:51:cf:f2:b4:c6:09:b2:c1:0f:38:
08:70:f1:77:11:e9:ea:a3:9d:97:65:c2:28:78:17:c9:22:9e:
9c:5e:3b:d4:e2:48:76:2a:17:dc:93:ef:09:21:6d:2e:a0:cb:
8b:0e:67:5a:9e:69:f8:ad:ef:8a:59:2c:36:52:1a:ad:d4:a5:
48:ba:47:37:b4:f2:a6:90:d9:18:f9:d7:98:c1:bd:fb:7a:5d:
4a:72:b6:a0:90:43:0c:0b:9f:c4:cf:b1:16:1a:f9:88:25:44:
ca:ca:29:84:33:ba:a3:bd:62:99:c8:31:59:f9:d6:87:f3:98:
ac:03:54:27:5c:a9:ca:85:8e:d6:87:2e:5c:35:ab:59:fd:32:
44:5d:6b:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xNzJmBonXMezh45OQB54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjUwNjI4MDkwMTA3WhcNMjUwNjI5MDkwMTA3WjAzMTEwLwYDVQQD
EyhhYzY1ODVmMGI2NWI1YTNmMmQzMDViNzQzYjIzOGExNzc0YjNjNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zvh/pKaFhPin6UNvndkWBf6Eyis
a3WxsrhajeTssw0z8Jeon+3OsLogHpUrWPFJvZIZaBuYVHbTWpmOjXgYBcibCLEO
2ouxZYLRIy6NlY3YUMKzXLw3XdfsTaUHkR9mhd1rBRcMAlONUeiUoomAnID1Xsu3
2IQeiOwwJhcyTRl1529R9zBqxtX40OHldPmdOfKkps2oKH7mQfdVA1gZ8wlXopxN
gNbtf9cGC4ZGW7Q/+NIh72zoUD8yjPnTfN9qxu640W1Qwmi2BaoB+Jggiybj1wa/
1EBTn/5TOX3uxjjuVXj3Wg5vnstGF4O+RlfB/vCCwDG4PPJqZH+dWJ68fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxlhfC2W1o/LTBbdDsjihd0s8SpMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyq6fKhE
vAlWK0a5FV2vB8LRuyrvcENGjBPj0pOc+otXfaZ7x//Zk/5O9ZrrjmZu5oPqyK2S
POK3+b6PzUEFv2c7phHjjypwY2vU1N+aAO8hirOeytx11Wrx6ET02gj4wjJsIran
joJXJvE/6S1a/7whvQFRz/K0xgmywQ84CHDxdxHp6qOdl2XCKHgXySKenF471OJI
dioX3JPvCSFtLqDLiw5nWp5p+K3vilksNlIardSlSLpHN7TyppDZGPnXmMG9+3pd
SnK2oJBDDAufxM+xFhr5iCVEysophDO6o71imcgxWfnWh/OYrANUJ1ypyoWO1ocu
XDWrWf0yRF1raw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:57 2025 by rpki-client