Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File: EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier: AUe7N+VXPJ8pndUM03lrVYVt0NsF8mhUWV5OYwsS2Ks=
Subject key identifier: A9:78:A5:AB:66:E0:62:95:CA:34:9D:01:5E:E9:A0:E6:13:59:BF:1C
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 0199FFFE7D8CB01C2ECB89AA41C728744C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number: 0F58
Signing time: Mon 20 Oct 2025 05:01:32 +0000
Manifest this update: Mon 20 Oct 2025 05:01:32 +0000
Manifest next update: Tue 21 Oct 2025 05:01:32 +0000
Files and hashes: 1: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: IWSHhlhrrurChmkgB2iRI7ZeKUFcWFdRLFjC4joOf5E=)
2: Fi8wX9cISGjJ7ycNTDrnhsS2nfM.roa (hash: HuNKcd4RHVijmwuiGKzg2wYioOAAJSYuv1pU/fwGAiA=)
3: OVlT_pQqA08Q1UrNiKWeQjISths.roa (hash: R9hMVU1azsLDsV2kScsNqSIvknc94xA2JDe9jn5I16c=)
4: QRJe2bGhDZl-uF_MksH_-yAAdPM.roa (hash: sJzer8Dgec7IoDEanf1HmkhPf2w8HE2htP6s/ryl3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7d:8c:b0:1c:2e:cb:89:aa:41:c7:28:74:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Oct 20 05:01:32 2025 GMT
Not After : Oct 21 05:01:32 2025 GMT
Subject: CN=a978a5ab66e06295ca349d015ee9a0e61359bf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:a3:ec:36:16:58:e7:83:cc:44:32:f7:d0:
91:b3:36:36:de:5a:58:56:94:55:5a:2e:6a:33:46:
84:d0:74:df:54:18:3e:1f:3c:c1:19:88:9f:85:c2:
87:0a:6d:4e:02:5f:63:a5:d3:b5:32:39:53:18:df:
9b:37:31:3b:f5:c1:85:e9:6e:56:af:fd:52:41:59:
16:46:6c:19:78:1d:fe:db:0b:67:74:6c:fc:4d:7a:
63:74:a3:08:fc:ba:51:ce:fc:40:24:cb:3e:60:17:
2d:72:9a:a8:f0:ac:07:c3:1a:eb:d6:0f:9c:de:d4:
2c:c5:a9:6d:b0:27:45:82:d1:4a:25:89:32:65:29:
28:0d:79:20:df:52:c7:6e:7e:ef:1d:a4:94:66:ca:
4f:ba:c5:3d:3c:90:b9:81:a9:32:b3:28:42:bc:b5:
71:36:ff:ea:90:db:bd:92:bd:c2:5a:ee:3a:b3:b9:
3d:5b:6f:b0:0f:c3:2a:34:20:29:f8:ab:f1:a1:52:
9b:6f:aa:35:77:5f:a7:dc:0e:1c:25:ac:ae:a1:e2:
c0:b7:1c:b7:cc:ff:15:1e:40:31:7c:78:16:1b:3f:
97:f5:a5:a3:a0:0e:89:21:4c:f3:b1:78:55:03:70:
20:b6:95:63:ac:9a:2f:09:bc:c6:6f:1e:8c:6b:c4:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:A5:AB:66:E0:62:95:CA:34:9D:01:5E:E9:A0:E6:13:59:BF:1C
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:55:54:6b:f8:54:81:65:79:2d:0e:2b:fd:fe:d8:54:e4:8a:
24:b1:cf:b1:0b:51:b9:94:12:e5:0b:98:10:f2:a4:ec:ae:b9:
ba:46:7f:e6:dd:71:03:f4:e6:78:6a:3d:f9:f5:7d:c2:65:1b:
58:92:ed:d3:f6:92:5a:69:ec:5c:2b:5d:d4:fa:7d:62:a0:84:
42:60:cf:cc:dc:48:55:4b:49:1d:3e:93:e6:b3:19:f5:bc:b2:
ca:ed:c3:1a:55:e4:9e:a5:b3:d6:58:06:e7:87:89:bd:17:d9:
36:10:3a:49:f2:bb:7b:35:51:1e:40:6e:55:a3:ac:f7:60:be:
94:bc:72:e9:6c:ad:ef:a7:2a:f7:8a:46:dd:0f:26:76:91:29:
82:12:b1:dd:3b:65:17:6a:b9:0a:e7:f1:b4:40:6f:f2:85:ba:
82:3b:b8:34:72:14:c8:91:1a:38:c8:07:9e:0b:d0:19:36:89:
45:26:1c:5a:9a:9e:5c:72:5c:97:72:fc:35:cf:c3:01:c4:d3:
e4:20:9d:0c:c3:10:64:db:86:9b:d6:f8:74:83:fe:67:70:28:
2c:63:1d:29:c3:e1:cd:9e:63:59:34:81:cd:8c:65:2b:3c:0f:
f1:b7:94:97:81:72:ee:50:19:a8:8d:4d:28:56:0f:9d:26:30:
ce:b2:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:17 2025 by rpki-client