Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier: h512fYt1UhtDLAS9DY83EooUdGeTep01rxdryRLDxPw=
Subject key identifier: 0F:5D:B4:9D:F0:88:97:43:3E:4B:C9:A3:43:9A:73:49:9B:10:2E:D6
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial: 0199FDDA8F02210EB326D9B0440E4D229717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number: 022A
Signing time: Sun 19 Oct 2025 19:03:03 +0000
Manifest this update: Sun 19 Oct 2025 19:03:03 +0000
Manifest next update: Mon 20 Oct 2025 19:03:03 +0000
Files and hashes: 1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: MeZ+EGiAFHLMygEfyBg20itE1pFL34YHSit6n0T143c=)
3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:8f:02:21:0e:b3:26:d9:b0:44:0e:4d:22:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Validity
Not Before: Oct 19 19:03:03 2025 GMT
Not After : Oct 20 19:03:03 2025 GMT
Subject: CN=0f5db49df08897433e4bc9a3439a73499b102ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:01:54:47:60:25:4b:d2:a7:83:d8:98:48:
e0:ab:28:94:6d:f7:6e:7f:a1:f5:aa:d2:fe:31:fb:
d4:9a:4d:93:bb:e9:9e:ec:c8:4e:e5:86:da:9b:c4:
ea:ac:a2:a4:af:e7:6c:73:68:f9:e7:dc:fa:99:45:
1e:37:53:c8:80:5d:2c:3e:20:36:3a:7b:d4:c3:6c:
a0:56:a0:91:1a:45:ed:e3:48:b8:99:55:a2:60:d4:
52:be:92:0f:fb:dc:b4:f3:5e:4d:08:10:58:f7:e5:
35:63:e7:ce:4d:6d:8c:6b:69:34:33:20:9f:19:2d:
f1:a8:c7:92:2d:d5:04:ac:ab:5e:2f:e7:c3:f2:cb:
92:4b:50:4c:ff:57:4b:bd:3d:a5:e7:90:36:fe:e1:
83:a5:46:3f:9a:43:e9:98:4b:c3:07:5b:03:8c:48:
ad:a9:65:e6:64:e5:4c:27:52:f1:37:d3:3f:5f:e6:
4d:13:b8:2f:9d:e3:7c:1a:df:d4:01:cc:55:1d:b1:
63:25:45:b6:49:6a:86:33:96:fa:63:c7:4d:1a:80:
c4:3e:7c:ce:9a:03:32:f4:b0:c6:a4:f7:9c:79:dd:
be:36:38:22:f8:04:cd:a2:3a:b1:6a:c6:69:30:87:
c8:1d:4c:57:24:af:84:2b:1f:60:41:73:5b:cc:d4:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:B4:9D:F0:88:97:43:3E:4B:C9:A3:43:9A:73:49:9B:10:2E:D6
X509v3 Authority Key Identifier:
keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a7:3e:8c:a0:a8:a0:f4:f0:ee:ac:f8:ac:26:0d:f7:c5:95:
41:ac:dc:c1:f6:1a:ce:c6:3a:a1:28:08:3a:a2:22:24:42:f8:
f3:53:d7:1f:2e:93:64:9e:bd:79:27:04:45:3e:22:b8:a3:3b:
05:62:87:2c:8e:e0:08:9d:c5:66:e3:5c:53:64:20:54:0a:f2:
9a:cc:b0:5b:b2:f6:a6:26:18:5a:89:c6:6a:52:cb:80:ca:23:
ba:20:a7:6a:12:56:f2:90:4c:3f:ea:ac:07:e6:02:84:2c:1c:
8e:9d:2a:c2:63:bb:0f:bc:bf:45:1e:3e:a0:74:1f:4a:1c:83:
2b:7e:1a:b7:27:25:09:b0:54:79:54:f3:0b:6f:7e:a2:a7:f4:
c2:b7:20:ba:7f:80:d2:4f:96:00:77:19:07:17:67:00:c1:ca:
8b:b8:89:1c:68:7d:08:bd:5b:14:70:79:db:78:de:6c:86:63:
68:77:1a:69:7e:a0:c4:5d:e9:64:e7:73:dd:96:31:fd:f1:10:
96:d0:7b:31:64:c5:34:0b:5b:3e:d5:85:6b:54:1c:48:7c:e4:
d5:f0:d0:3d:71:ff:03:5a:fa:c4:09:f4:1e:56:37:6f:fa:5d:
59:ff:28:13:1a:1b:2b:b3:d1:2c:47:41:9b:71:05:93:e9:b8:
57:30:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:01 2025 by rpki-client