Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: tmecEnSUGTW1TWS0GK/nK/6aiLPosV/Id6pFkDU2ecI=
Subject key identifier: BF:2B:1A:AF:FD:09:24:56:85:3E:34:81:91:A6:62:D7:53:3D:94:FB
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 0199FC58D40B16746CE25A0B873A601FE21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: 01FE
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: G5/MpMmrlDCtEiwMFRC9TrHDpAegxmy+zvqspO7SxGQ=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d4:0b:16:74:6c:e2:5a:0b:87:3a:60:1f:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=bf2b1aaffd092456853e348191a662d7533d94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:fe:7b:1a:6b:f5:b8:a4:e4:48:73:6b:80:
39:4c:5e:4b:ea:bb:de:ea:ae:f6:71:fc:e3:d2:8c:
cf:62:d2:3f:70:bb:2d:e7:9f:f1:78:2b:10:56:76:
e4:c2:62:06:eb:87:d5:8a:75:30:b6:c0:e3:ec:d3:
39:f6:3b:a1:bc:5c:0b:56:8c:d3:41:cf:b2:10:48:
f9:15:1f:2e:49:c2:1b:f9:bb:89:90:42:92:0a:f6:
53:68:de:b0:e6:28:78:0f:06:f0:c4:4a:e4:a1:81:
ce:a6:09:4d:fb:61:37:56:cc:a8:d2:00:48:de:8b:
3c:dd:e2:8e:87:0e:a7:c4:a3:67:30:dd:f3:6c:5e:
2e:4d:08:2a:d2:eb:d8:25:70:1f:fc:40:ec:c3:6f:
d2:c8:86:5d:b0:83:8e:44:e3:a8:a3:0b:3f:59:6b:
89:5d:66:ae:f9:c8:db:05:6f:57:54:f9:aa:e7:b2:
6b:32:41:99:7a:a9:ed:55:69:ce:28:95:16:26:0e:
81:ce:e3:b1:24:9d:be:d2:e9:9f:8d:57:c8:18:8b:
4a:bc:05:6f:31:80:40:a7:32:fb:53:55:82:8c:99:
99:b1:87:5c:a1:29:ae:1c:3b:f2:8c:e3:92:c3:19:
7e:25:8c:db:39:4e:64:f7:53:c7:38:ae:be:71:92:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:1A:AF:FD:09:24:56:85:3E:34:81:91:A6:62:D7:53:3D:94:FB
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:0d:83:57:6b:92:2a:25:95:d8:0e:a7:64:f7:44:22:ce:
47:90:72:aa:e0:b0:61:03:f3:68:9f:8f:be:64:dd:94:40:21:
d6:ff:c2:8e:4d:86:af:0f:a4:a5:02:c1:43:88:f9:75:50:1f:
b0:f6:f9:e5:cd:6c:5d:56:36:58:a8:90:e1:d1:f8:e2:7a:4e:
31:fd:28:78:ff:bb:b4:a0:36:e7:69:33:a1:0b:ca:8f:3a:2d:
a4:17:c8:2f:34:91:e1:a1:7c:cd:08:a1:c4:ca:b1:de:d8:1c:
97:04:7d:b3:f6:09:c3:2d:16:90:70:87:6b:a9:78:9f:17:c3:
4f:ea:ab:5f:98:f5:9b:0e:8e:35:11:fc:12:8f:4f:0c:64:2a:
ef:0b:61:0d:04:d9:7a:2c:b8:99:d6:92:f1:2c:77:7f:f5:d8:
f3:88:4d:22:dd:a7:9a:48:07:c1:0f:7a:8f:d1:f6:6b:e4:9a:
53:0a:14:1c:77:a0:f9:75:05:f5:2a:bc:31:06:58:d8:4e:14:
e7:21:74:97:9c:e4:3a:3e:5f:3a:92:8e:14:a6:f4:b2:33:34:
72:86:08:6b:2e:d6:64:44:81:97:40:f0:ed:e8:5e:8a:67:ff:
0b:a9:de:a9:4c:4a:f3:1f:96:cb:d4:ec:ff:bc:73:d8:3b:d6:
e1:91:b4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNQLFnRs4loLhzpgH+IaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx
ZmUwN2EwHhcNMjUxMDE5MTIwMTQzWhcNMjUxMDIwMTIwMTQzWjAzMTEwLwYDVQQD
EyhiZjJiMWFhZmZkMDkyNDU2ODUzZTM0ODE5MWE2NjJkNzUzM2Q5NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU/+expr9bik5Ehza4A5TF5L6rve
6q72cfzj0ozPYtI/cLst55/xeCsQVnbkwmIG64fVinUwtsDj7NM59juhvFwLVozT
Qc+yEEj5FR8uScIb+buJkEKSCvZTaN6w5ih4DwbwxErkoYHOpglN+2E3Vsyo0gBI
3os83eKOhw6nxKNnMN3zbF4uTQgq0uvYJXAf/EDsw2/SyIZdsIOOROOoows/WWuJ
XWau+cjbBW9XVPmq57JrMkGZeqntVWnOKJUWJg6BzuOxJJ2+0umfjVfIGItKvAVv
MYBApzL7U1WCjJmZsYdcoSmuHDvyjOOSwxl+JYzbOU5k91PHOK6+cZLSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8rGq/9CSRWhT40gZGmYtdTPZT7MB8GA1UdIwQY
MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt
YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw
LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdQNg1dr
kiolldgOp2T3RCLOR5ByquCwYQPzaJ+PvmTdlEAh1v/Cjk2Grw+kpQLBQ4j5dVAf
sPb55c1sXVY2WKiQ4dH44npOMf0oeP+7tKA252kzoQvKjzotpBfILzSR4aF8zQih
xMqx3tgclwR9s/YJwy0WkHCHa6l4nxfDT+qrX5j1mw6ONRH8Eo9PDGQq7wthDQTZ
eiy4mdaS8Sx3f/XY84hNIt2nmkgHwQ96j9H2a+SaUwoUHHeg+XUF9Sq8MQZY2E4U
5yF0l5zkOj5fOpKOFKb0sjM0coYIay7WZESBl0Dw7eheimf/C6neqUxK8x+Wy9Ts
/7xz2DvW4ZG0+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:07 2025 by rpki-client