Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: voes/o28QdF9kCGStEeLgU2U/ScGYs1rOzArd9u1zbw=
Subject key identifier: 8D:16:A9:B6:03:70:F4:5C:59:02:CE:A0:46:51:27:F9:27:01:36:C2
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 0198D516024E8FF7F08A486C412C155C77D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: /Iotbt9puwKhcp4Kn9Eo0csyLrW0XSfYArM5uaxOvwU=)
2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:02:4e:8f:f7:f0:8a:48:6c:41:2c:15:5c:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=8d16a9b60370f45c5902cea0465127f9270136c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:d7:03:1a:aa:9d:73:e0:5f:ba:e8:67:40:
82:c9:f7:59:a9:43:a8:14:f9:ef:03:55:c4:11:57:
5d:81:f4:ce:de:f8:05:be:3d:1f:08:a1:68:8d:57:
39:a4:c7:f8:cb:59:34:9b:73:ee:81:ed:06:39:74:
b7:ac:e9:1c:d8:16:9a:23:8f:cf:ce:4a:0e:7d:e1:
79:3d:4a:bd:ad:a0:fe:9f:e2:a5:53:1e:85:79:7c:
91:27:60:25:ba:bc:d4:27:c5:73:da:15:0d:df:5d:
ca:57:e9:d1:11:7c:73:79:c4:8f:62:e4:65:38:ef:
0a:24:05:25:ea:00:85:16:2c:31:13:f6:a2:3c:e8:
b0:70:98:b5:5e:56:52:56:79:ff:41:77:8e:75:b7:
d4:4f:cc:5b:ff:ce:fb:32:66:02:34:62:ec:1d:9e:
ab:50:ab:95:62:87:cf:cf:87:79:a7:6b:d7:f4:b5:
4f:59:7a:6e:2d:0e:83:36:c3:ab:fd:63:ab:93:49:
89:54:d9:3b:af:c2:18:cb:36:2b:ed:2d:df:7e:c4:
72:82:5f:86:40:0c:41:5b:bb:b8:48:65:d0:86:16:
4e:0c:17:e5:4a:b8:1c:2b:98:19:7d:f6:60:fd:60:
0e:0b:cf:3b:81:10:7f:05:16:53:54:ed:c1:8c:9a:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:A9:B6:03:70:F4:5C:59:02:CE:A0:46:51:27:F9:27:01:36:C2
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:e8:fa:60:b9:b3:33:c0:79:a0:1c:9a:47:46:cf:ff:62:
e7:8d:2b:84:5c:d5:20:82:ba:49:e3:a8:b3:67:ec:9a:40:f6:
e0:8f:e2:dc:fa:c7:ad:1b:29:47:ab:19:a4:8b:e9:ed:db:eb:
e6:ab:31:ca:87:28:3a:d7:2f:d1:88:fc:d7:54:9e:86:c9:35:
e8:6c:b1:a6:86:4f:90:b6:55:e7:00:20:ac:fb:15:8d:0d:0c:
9a:9c:c7:f3:b6:94:b7:70:b5:93:5d:77:ad:77:f7:45:95:ca:
d3:13:be:a0:d2:da:ab:f8:83:0b:8a:11:eb:61:b1:a6:67:1e:
76:86:c1:3d:4f:d8:c8:14:35:ae:3e:73:97:0b:09:dd:de:95:
9a:de:ca:94:98:3c:2b:a3:fe:c1:bd:fc:cf:cb:8e:27:0d:05:
49:1c:e3:4f:e1:be:62:3c:a9:d8:fd:35:ed:68:82:ec:c4:7c:
ec:09:66:20:2a:e5:72:86:04:10:60:10:36:6a:e1:16:6c:36:
68:7f:76:2d:d4:65:f1:36:3e:5a:02:ae:6d:34:ac:91:12:b3:
32:d9:d1:30:ed:b0:03:07:dd:05:20:cc:bc:52:2d:ce:78:3d:
db:d2:18:e1:3c:46:e8:0b:24:be:94:dc:78:a7:4c:32:bf:6e:
05:54:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:51 2025 by rpki-client