Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: HLTeJrrIDLcoM9ARiSSZ+aUCW4yhntNuR6qIROD4eqo=
Subject key identifier: EC:E9:71:6D:BC:29:A6:34:D3:35:42:0A:9F:CB:4F:C1:45:9A:EE:FC
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 0198D8BD5C7484472F301C9B967DED6609A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 21:02:25 +0000
Manifest this update: Sat 23 Aug 2025 21:02:25 +0000
Manifest next update: Sun 24 Aug 2025 21:02:25 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: MutLLhMNjeOvsLCQ87w/5Ew0F+lY4Vy4CM1VyTE4qQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:5c:74:84:47:2f:30:1c:9b:96:7d:ed:66:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Aug 23 21:02:25 2025 GMT
Not After : Aug 24 21:02:25 2025 GMT
Subject: CN=ece9716dbc29a634d335420a9fcb4fc1459aeefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:0e:bf:dc:58:b5:39:12:63:39:0b:04:0a:
5b:17:47:e1:62:eb:b3:72:03:49:da:20:31:c4:f7:
a1:b3:ae:21:b3:b5:96:b1:28:83:91:06:ea:3a:59:
d9:2a:41:4f:53:ca:0f:9b:48:9d:38:ec:06:64:a5:
0a:75:6b:b4:ac:92:fe:3a:d6:f5:de:b2:19:fa:ae:
e0:50:60:90:65:14:dc:ac:cd:9e:59:8b:cc:b2:ec:
eb:13:96:a1:c1:b7:f3:21:bd:2a:bc:a9:c8:77:45:
91:f1:92:29:ee:ae:8d:fb:04:2f:21:d8:57:ed:9f:
15:b2:5c:ce:0a:c3:c2:96:aa:95:3b:e1:5b:d4:c3:
d5:6c:c7:e2:b0:73:9e:c0:94:94:74:b8:6b:d8:ee:
74:75:3c:06:aa:b7:fb:84:82:8f:c4:c4:fe:0e:d5:
d1:8e:cd:55:b0:29:73:67:bd:a0:2c:3e:17:f3:80:
21:a8:95:54:24:b8:e7:88:9e:dc:d1:cb:66:de:43:
17:48:45:6d:e8:e9:a9:2e:2f:74:f2:e7:c3:6e:c4:
1b:61:91:c2:5e:e6:b6:05:8a:18:d9:05:82:ca:33:
9c:32:07:41:d0:63:18:be:9b:2c:af:0e:93:14:64:
42:5e:b9:8b:86:aa:16:37:6d:f3:21:b3:27:97:cf:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:71:6D:BC:29:A6:34:D3:35:42:0A:9F:CB:4F:C1:45:9A:EE:FC
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:be:39:a2:ca:9f:65:ab:64:f6:8d:0f:f6:d5:bd:39:fb:
6e:ae:f6:a6:70:d0:e3:d5:63:52:7b:86:ae:89:a7:a0:5f:70:
bb:eb:3c:a0:41:32:e5:4e:d8:d7:fe:a8:bd:90:a1:2b:69:de:
78:41:fc:3e:46:df:71:44:87:ad:d5:cb:f6:23:04:29:ee:8c:
7d:cc:a4:cc:b7:5b:b0:af:cc:35:8f:df:a7:b7:fb:a3:d6:2c:
f9:d4:ae:ed:1a:0e:3c:e0:c0:cf:8e:03:02:44:db:2e:e8:47:
8f:79:3b:fc:b8:c9:03:47:66:40:b1:78:9d:15:81:38:dc:50:
74:b0:38:cb:c8:f1:19:2a:05:87:08:68:a0:98:13:3a:10:2b:
ce:90:4e:70:33:11:f9:18:9e:e2:93:de:ff:94:92:ee:5d:7b:
2a:4c:bd:c9:6b:7a:c5:20:58:81:70:d5:3f:b4:05:83:f1:22:
10:93:fa:04:5f:f4:4c:90:d9:7d:6f:8d:3b:b2:50:b0:31:98:
1a:71:13:f5:35:47:c2:52:5a:3f:e7:8d:f4:1f:47:40:de:a9:
cf:17:ff:45:59:39:18:2d:91:43:aa:71:ad:29:44:09:07:13:
fd:9e:e0:90:f7:35:5e:e0:01:70:0d:26:4b:3e:ff:37:2b:2b:
e2:9b:f5:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvVx0hEcvMBybln3tZgmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzk3ZWI1ZjlhYTlhYmU1MjAwOGNlN2YyMWFiNDRhZmRl
ZWEwZDAwHhcNMjUwODIzMjEwMjI1WhcNMjUwODI0MjEwMjI1WjAzMTEwLwYDVQQD
EyhlY2U5NzE2ZGJjMjlhNjM0ZDMzNTQyMGE5ZmNiNGZjMTQ1OWFlZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAOv9xYtTkSYzkLBApbF0fhYuuz
cgNJ2iAxxPehs64hs7WWsSiDkQbqOlnZKkFPU8oPm0idOOwGZKUKdWu0rJL+Otb1
3rIZ+q7gUGCQZRTcrM2eWYvMsuzrE5ahwbfzIb0qvKnId0WR8ZIp7q6N+wQvIdhX
7Z8VslzOCsPClqqVO+Fb1MPVbMfisHOewJSUdLhr2O50dTwGqrf7hIKPxMT+DtXR
js1VsClzZ72gLD4X84AhqJVUJLjniJ7c0ctm3kMXSEVt6OmpLi908ufDbsQbYZHC
Xua2BYoY2QWCyjOcMgdB0GMYvpssrw6TFGRCXrmLhqoWN23zIbMnl885cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzpcW28KaY00zVCCp/LT8FFmu78MB8GA1UdIwQY
MBaAFBB5frX5qpq+UgCM5/IatEr97qDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEt
OGRiNzA4MzQ3NDM4LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEtOGRiNzA4MzQ3NDM4
LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1C+OaLK
n2WrZPaND/bVvTn7bq72pnDQ49VjUnuGromnoF9wu+s8oEEy5U7Y1/6ovZChK2ne
eEH8PkbfcUSHrdXL9iMEKe6MfcykzLdbsK/MNY/fp7f7o9Ys+dSu7RoOPODAz44D
AkTbLuhHj3k7/LjJA0dmQLF4nRWBONxQdLA4y8jxGSoFhwhooJgTOhArzpBOcDMR
+Rie4pPe/5SS7l17Kky9yWt6xSBYgXDVP7QFg/EiEJP6BF/0TJDZfW+NO7JQsDGY
GnET9TVHwlJaP+eN9B9HQN6pzxf/RVk5GC2RQ6pxrSlECQcT/Z7gkPc1XuABcA0m
Sz7/Nysr4pv19w==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:25:12 2025 by rpki-client