Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier: zR+RxgusWG0c+t3mXcsDEQMvCTzLeE5+foXA3P/H4sk=
Subject key identifier: 6A:E8:D3:01:BB:42:E6:E6:26:79:BF:66:D7:16:DD:69:84:98:45:64
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 0198D69886697D4A63E7DE6AE8DEE1EEB97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: D0m10XHh552xb+jdF98PpVtxyLlSAuDqfp0rMly/je0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:86:69:7d:4a:63:e7:de:6a:e8:de:e1:ee:b9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=6ae8d301bb42e6e62679bf66d716dd6984984564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:a8:2b:9e:ea:3b:c0:93:13:5d:12:fa:97:
26:64:9e:3f:26:ab:f6:b9:6d:6d:4e:3a:e3:27:47:
ce:4e:bf:56:7b:a2:80:26:a6:89:d7:b4:c9:ba:60:
23:f5:af:39:7c:98:63:72:df:4d:ea:2e:4e:92:21:
28:af:1d:d1:05:2c:da:83:13:92:8c:2c:10:24:1c:
20:7a:dd:a0:4b:04:c9:87:13:ba:8a:58:e4:db:d1:
c8:4a:58:d0:c0:53:38:31:98:63:b6:60:f4:45:a5:
ba:86:cc:64:cc:8c:ee:bd:13:60:bb:f8:3a:b9:69:
4d:0e:20:15:10:28:0f:2b:b8:66:7b:5b:cc:5b:47:
4c:a3:45:f9:c1:72:98:5f:0b:60:86:ff:1e:78:7d:
4c:87:e3:8f:a7:8a:5e:f3:f4:81:85:fd:36:72:d0:
72:9c:dd:dd:9f:c8:2c:23:de:0d:8b:77:76:7b:94:
85:29:85:b7:d2:f0:a4:80:ab:59:de:30:c3:f4:85:
42:9b:64:67:6d:6c:e9:eb:09:83:0d:15:09:29:56:
7e:67:8e:e9:10:2d:3b:a9:6f:11:89:41:9e:2c:40:
b8:9f:45:75:b8:6d:63:05:8a:7b:56:2d:5b:7a:81:
32:ce:2f:d4:00:60:d6:e7:16:d1:4e:91:7d:30:e8:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:D3:01:BB:42:E6:E6:26:79:BF:66:D7:16:DD:69:84:98:45:64
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:53:57:b9:31:92:0b:dc:e7:97:62:17:42:d1:3d:42:4d:
2c:a1:82:11:41:83:b0:83:5d:34:9b:51:ff:f1:5a:1d:cc:8b:
b3:9f:09:26:69:ec:91:bb:c7:2f:24:cc:4c:b2:9e:f3:0c:a4:
11:d7:81:07:d6:35:d0:67:ec:bc:35:f7:52:e0:15:c9:29:ff:
d1:af:53:cc:45:68:af:60:3f:11:b4:83:90:39:78:8f:e1:69:
64:be:91:b6:76:ab:19:fc:98:f3:e7:a6:6f:3d:b5:4e:a9:dd:
66:5a:e6:97:b4:69:b3:0e:7e:0b:df:e1:c5:64:43:5b:db:0e:
83:33:bd:79:ce:ea:3c:ee:39:2b:48:89:58:b5:44:fb:c8:00:
6f:d4:86:67:a5:61:67:ae:0b:7d:89:92:f3:4e:ba:54:39:6b:
e0:66:78:d0:a2:ba:07:b4:da:94:6c:7b:74:ae:00:99:10:10:
f3:ef:db:91:64:a8:cd:87:39:f0:c8:b7:a5:c7:39:3e:7e:ab:
66:99:35:07:7e:e8:f2:0a:2a:63:5f:6d:5a:b9:db:77:41:04:
c2:87:56:ae:88:bb:f3:f5:03:65:6a:62:f3:d7:57:19:32:c3:
f5:64:80:48:10:b7:4c:d6:6e:00:f5:06:52:82:0a:fa:bf:3d:
92:88:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:53 2025 by rpki-client