Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File: EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier: WJbsRZF+yeGcEzG+HmUJyTL/a5HIMFqmHbcxTSgq/Qk=
Subject key identifier: 2C:2C:2C:73:62:C1:49:4E:77:1B:05:95:92:C1:5F:9F:E3:9C:09:65
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer: /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial: 0199FD348307F3C120562A94FBDBCB0B706D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number: 171E
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: mjqgm0HPOcDwb3I071nAjvTiUI3UFn9A/zQTSgWe8xY=)
2: UG72Y5tjPOVdDYZoF2OJHRvox8w.roa (hash: XSbgvIj2Ch+LSBHjiAOVtaCvcu1spJNttU+pKEof9y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:83:07:f3:c1:20:56:2a:94:fb:db:cb:0b:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=2c2c2c7362c1494e771b059592c15f9fe39c0965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:30:ee:30:02:ca:10:fb:83:c5:17:06:6c:
68:57:8f:57:43:e7:89:85:32:35:0b:33:38:26:47:
11:3e:67:91:81:14:82:5f:f9:4d:80:84:36:29:7a:
af:29:94:05:26:fe:b2:3a:c8:8a:e3:a9:17:82:bd:
1e:41:91:7b:42:43:27:23:3f:85:89:f6:e0:54:2b:
72:13:13:6b:0f:f8:17:72:50:3f:e2:7d:f5:5d:f1:
af:50:f2:c1:65:ba:02:ea:68:ee:de:71:d2:ae:ba:
97:7c:d3:a1:12:af:b8:60:6d:49:89:a2:43:31:20:
32:e0:76:f6:5a:90:31:cf:cf:5e:ef:d3:ee:3f:05:
5c:5d:f3:aa:ee:52:a2:c5:10:a4:bc:c0:bb:a3:34:
d4:b8:f1:2a:f6:99:da:ff:5f:04:2f:a5:b0:de:b3:
9e:0f:c4:14:53:21:7b:da:d0:7d:fc:56:03:21:7f:
b9:38:49:c5:a0:51:22:b6:59:d9:f9:11:f3:59:a9:
b3:b8:84:31:f3:0d:4a:63:7d:dd:c0:5b:bd:77:99:
33:45:b2:c2:28:7c:d4:67:80:c0:1d:f1:79:08:bc:
2a:74:bb:ed:5a:3a:60:01:ef:1c:2e:86:bb:8e:32:
52:ca:7b:ec:da:ec:74:ea:8d:21:52:11:a5:90:66:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:2C:73:62:C1:49:4E:77:1B:05:95:92:C1:5F:9F:E3:9C:09:65
X509v3 Authority Key Identifier:
keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:45:2e:cb:bd:51:81:76:0a:6c:51:0d:8b:bc:5d:6a:30:
11:87:fb:40:6f:96:53:8d:cb:7d:c0:b8:d7:c0:c7:1e:41:b2:
65:ce:b5:90:68:02:8e:41:71:cc:a7:59:ff:ac:68:7f:52:d3:
cf:0d:46:ba:6e:55:5b:96:47:26:08:8a:08:b8:7b:a7:6e:44:
4e:6d:3a:cb:2f:28:ac:c8:72:0e:50:e3:88:52:74:d1:ec:0b:
c7:2c:01:0f:a0:e2:ff:e4:70:2a:af:56:51:11:00:c5:23:a2:
11:f9:0a:4f:f0:85:84:e3:f8:3f:af:a7:90:be:49:cf:cc:21:
bb:29:f3:aa:bd:0a:ac:92:e8:e6:1c:31:7c:6b:f5:f3:c5:5a:
cc:8a:44:51:75:19:74:42:ae:65:51:4d:ad:2a:3a:ce:01:ba:
11:70:c5:7a:30:7c:15:af:ae:8d:8d:64:c1:a6:b9:38:4b:0d:
89:99:a7:81:05:21:91:47:cc:8d:99:e2:3e:65:51:c8:d7:92:
b5:8b:85:c4:7a:92:bf:b8:29:05:48:7d:67:0c:31:66:aa:d2:
7c:ff:96:f2:00:46:e6:bb:cd:93:1a:75:d0:39:b6:50:a9:41:
98:45:00:08:0b:ca:f7:d2:37:8f:47:32:5c:02:53:e4:86:7c:
b6:d9:5a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIMH88EgViqU+9vLC3BtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzRkYjk2NDAyZmY1Y2YxODc1NjQ1NjBlYThmMTNlZWVi
NWZmZWIwHhcNMjUxMDE5MTYwMTQxWhcNMjUxMDIwMTYwMTQxWjAzMTEwLwYDVQQD
EygyYzJjMmM3MzYyYzE0OTRlNzcxYjA1OTU5MmMxNWY5ZmUzOWMwOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEAw7jACyhD7g8UXBmxoV49XQ+eJ
hTI1CzM4JkcRPmeRgRSCX/lNgIQ2KXqvKZQFJv6yOsiK46kXgr0eQZF7QkMnIz+F
ifbgVCtyExNrD/gXclA/4n31XfGvUPLBZboC6mju3nHSrrqXfNOhEq+4YG1JiaJD
MSAy4Hb2WpAxz89e79PuPwVcXfOq7lKixRCkvMC7ozTUuPEq9pna/18EL6Ww3rOe
D8QUUyF72tB9/FYDIX+5OEnFoFEitlnZ+RHzWamzuIQx8w1KY33dwFu9d5kzRbLC
KHzUZ4DAHfF5CLwqdLvtWjpgAe8cLoa7jjJSynvs2ux06o0hUhGlkGaoXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwsLHNiwUlOdxsFlZLBX5/jnAllMB8GA1UdIwQY
MBaAFBB025ZAL/XPGHVkVg6o8T7utf/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEt
YWI0MGI1OGEyODkyLzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8xZTFkNjktMGJmZC00MGFmLTg4YjEtYWI0MGI1OGEyODky
LzEvRUhUYmxrQXY5YzhZZFdSV0RxanhQdTYxXy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnipFLsu9
UYF2CmxRDYu8XWowEYf7QG+WU43LfcC418DHHkGyZc61kGgCjkFxzKdZ/6xof1LT
zw1Gum5VW5ZHJgiKCLh7p25ETm06yy8orMhyDlDjiFJ00ewLxywBD6Di/+RwKq9W
UREAxSOiEfkKT/CFhOP4P6+nkL5Jz8whuynzqr0KrJLo5hwxfGv188VazIpEUXUZ
dEKuZVFNrSo6zgG6EXDFejB8Fa+ujY1kwaa5OEsNiZmngQUhkUfMjZniPmVRyNeS
tYuFxHqSv7gpBUh9ZwwxZqrSfP+W8gBG5rvNkxp10Dm2UKlBmEUACAvK99I3j0cy
XAJT5IZ8ttlatA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:20 2025 by rpki-client