Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: r4eVmQYMhmbD/cZnvIlpF2xCDfhvXcjGpe7gn5DNQA0=
Subject key identifier: 3A:2D:E6:58:07:CB:53:98:FB:26:6C:2D:EE:74:03:C3:0C:FA:50:F5
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 0198D5157829F8FB55678DAAAF96EC4515EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 04EF
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: LOYO4lueTvlLmqemcAoBWBie9tHp2pfQYNAiRomgpsw=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:29:f8:fb:55:67:8d:aa:af:96:ec:45:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=3a2de65807cb5398fb266c2dee7403c30cfa50f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:9a:37:06:61:0c:84:f5:0f:c4:05:49:91:
a0:0b:83:bd:a2:94:8e:2e:27:6c:d8:1c:94:6f:68:
df:11:30:16:2c:2f:fc:0c:42:1a:c0:d8:2a:c4:1c:
3e:b4:eb:6c:9f:e5:fa:73:e8:88:98:36:eb:d3:0a:
d9:fe:d4:cd:c7:0f:2d:f9:10:17:ea:11:c0:b1:b1:
1e:e8:55:3d:88:0f:ae:2b:50:39:c9:68:88:9a:38:
1d:4c:de:0f:a1:7d:7b:7b:df:f4:42:b4:71:3b:9e:
9d:a9:9e:c5:4e:56:1f:d7:91:3c:79:2d:b4:63:e8:
5c:00:76:3b:d8:f3:ec:b6:2c:bc:25:7a:78:26:4a:
bd:25:b4:43:18:0f:d1:b7:09:3f:c3:24:19:b3:ce:
8c:d9:a5:ac:ac:ee:69:ed:54:55:5b:76:71:40:de:
98:0d:8c:a1:a2:c0:bf:e9:1d:fc:cd:07:ed:e2:a1:
d3:97:c8:ee:c9:d7:87:20:59:35:e2:dc:66:f0:82:
ff:0e:e9:a3:8d:87:ef:bf:27:67:ab:1c:02:3e:18:
67:ff:66:92:c7:d6:b2:52:3e:34:d4:86:e6:48:8f:
9e:fd:86:6c:9d:a7:4c:7f:6a:22:2f:70:29:31:cc:
4c:75:4a:81:66:81:01:dd:c7:27:49:55:1f:61:bd:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:E6:58:07:CB:53:98:FB:26:6C:2D:EE:74:03:C3:0C:FA:50:F5
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:6d:83:54:61:88:5b:bd:88:bc:e2:01:df:9b:e4:6f:86:
6a:38:59:e6:ed:4c:e1:d1:d1:62:bc:0a:0a:7c:a7:c7:62:41:
c2:a8:97:b4:e3:c3:c2:50:dc:a5:03:a7:c2:56:23:48:89:d3:
e2:5d:3b:ca:cb:04:26:8e:c2:00:03:a8:87:bb:c3:a1:06:75:
62:85:5b:60:2a:43:c6:4e:fc:97:46:38:f0:e8:b0:8a:0d:cb:
55:a4:1e:68:78:3d:b2:e0:20:d9:24:e1:52:cd:64:80:d4:9b:
fc:94:cc:23:8c:85:a8:5c:b6:f8:80:6a:25:7f:7c:35:d7:11:
1b:39:34:38:87:91:d8:69:8c:7b:34:81:50:1d:87:e8:50:ca:
25:4f:ef:68:37:5d:ce:0e:18:f8:c8:77:82:11:fe:d7:7c:8a:
9d:f1:df:0a:12:47:9a:14:2d:51:3e:43:2e:39:88:8e:de:d6:
2f:2a:42:e8:71:a6:40:cc:d2:70:5c:31:2a:63:76:5e:45:8c:
6e:52:1e:1d:d1:b1:fa:5e:e4:7d:cf:a3:e4:c4:4f:00:57:18:
f6:e4:78:d8:bd:fc:70:06:b3:ff:96:9f:39:ee:21:45:69:e3:
d3:75:97:e4:75:18:0d:4f:51:d4:f6:97:99:a4:69:5b:19:32:
dd:f6:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:34 2025 by rpki-client