Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File: EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier: Y7iA/pvIeGmBQOUowUCz0cTENlP5nZKdMBKP6RMFt8s=
Subject key identifier: D0:A4:88:F4:BE:8A:9D:83:61:89:3C:29:AF:84:C1:F1:59:1E:6B:BE
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer: /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial: 0199FAA16A205DE23631B41629954293792D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number: 0587
Signing time: Sun 19 Oct 2025 04:01:46 +0000
Manifest this update: Sun 19 Oct 2025 04:01:46 +0000
Manifest next update: Mon 20 Oct 2025 04:01:46 +0000
Files and hashes: 1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: 27SL9u8CLpFgRN0SDyfpIBOW1K6Uw0cbsXkgPcBCWCc=)
2: dT-7gvUmKAR5WGT1weDf35_tWbk.roa (hash: NJOvgAiJEABrTrfoUtz6F99mFqlhlTj/p2CGRz0AC/A=)
3: lfrxyQ19SAsFQTAfxpfODgpBEcI.roa (hash: tP1SfZ2YWGRxGZi2YvnE8mG56aRx0qKrWtbY178n7wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:6a:20:5d:e2:36:31:b4:16:29:95:42:93:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
Validity
Not Before: Oct 19 04:01:46 2025 GMT
Not After : Oct 20 04:01:46 2025 GMT
Subject: CN=d0a488f4be8a9d8361893c29af84c1f1591e6bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:49:83:be:6c:0b:e1:2a:1c:ca:ef:16:44:
02:22:a0:ef:38:d8:e4:a1:1d:35:16:6a:39:d5:40:
af:a6:cf:3f:dd:d2:c4:70:f0:71:7d:9c:e3:12:e5:
90:08:ae:e0:4c:31:31:3c:07:da:0a:90:89:f6:d9:
cb:ee:8e:4d:18:63:21:30:69:32:6a:39:aa:aa:73:
4c:dd:d8:5a:aa:8c:51:fc:4b:37:5a:21:66:f5:12:
1a:e7:e7:44:1d:de:49:3b:3c:97:1c:d3:14:e4:69:
d0:36:ce:aa:97:d4:b9:91:a3:3c:19:d8:28:b7:1a:
b1:0c:90:06:dd:a6:8d:c0:81:8d:df:ac:46:f3:f2:
1a:9a:da:f0:96:e3:70:01:d7:58:6b:98:76:76:7c:
21:f7:22:d0:d6:b8:d3:fc:13:7d:95:2d:5e:b4:da:
98:e2:e1:2d:49:42:e2:e8:48:2f:b7:ab:f8:34:c9:
65:5e:59:e2:d0:b0:6e:9d:93:2a:c8:91:39:69:cb:
ea:76:12:b2:34:ef:ed:87:53:a3:08:3b:ee:9e:f7:
a7:3a:40:2a:9b:25:55:d9:d4:ea:3f:e9:1e:51:4a:
e9:5b:8a:64:58:b3:35:70:b7:20:2d:95:78:a4:de:
09:3b:ed:30:9e:4b:74:5a:2d:35:ff:9c:4e:de:9c:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:88:F4:BE:8A:9D:83:61:89:3C:29:AF:84:C1:F1:59:1E:6B:BE
X509v3 Authority Key Identifier:
keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:a8:c6:f2:e8:c3:ec:a7:64:54:58:7d:4a:67:60:f7:95:
c4:27:ae:43:73:b1:44:54:e0:7d:1d:df:b9:5b:34:e2:ce:6f:
b1:62:70:ba:eb:66:c9:9b:5b:86:25:6d:c6:be:39:02:6c:82:
10:ec:4b:9d:c6:a1:18:47:9c:4e:5a:e4:ba:6a:ca:70:ab:87:
85:47:a8:41:f9:70:ea:f4:4a:a0:a1:ee:13:83:ce:6f:92:5f:
30:b5:3b:71:14:3c:60:82:0b:f8:f3:3a:cd:e9:22:23:4f:ce:
25:a2:2e:3e:92:29:df:f2:c7:5b:a4:f7:74:90:5d:99:99:93:
2d:7c:64:70:e5:c5:42:89:62:c3:9e:62:4a:40:f9:e6:b0:23:
17:f3:7e:b2:10:ba:27:dd:a4:b2:f5:aa:3b:2c:44:e4:e3:08:
7f:ec:de:53:cb:41:45:0f:ab:df:ec:a0:e8:42:c5:7a:94:03:
46:35:ab:c0:2e:a8:ce:72:9b:6e:64:c5:90:34:64:2a:d3:14:
72:7a:13:96:9f:01:ee:0b:f0:f0:4e:ce:f5:d8:ee:79:11:7e:
8f:65:a8:a5:52:0a:06:07:70:42:ab:31:67:10:2f:0a:cf:a5:
3d:a9:16:be:72:f1:18:da:fe:97:20:77:5b:7c:ca:e5:b6:f4:
52:ef:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:24 2025 by rpki-client