Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 77Yi0E6UV2/gyut7km9D6SL6NB6J3iJaAJJUxuMntRA=
Subject key identifier: 5C:FA:37:EA:4C:A2:6D:88:44:26:69:5D:A7:5A:76:5D:B4:17:0A:D0
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 01993802D3DC2282528E6CE0D558E70AA608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 160F
Signing time: Thu 11 Sep 2025 09:02:13 +0000
Manifest this update: Thu 11 Sep 2025 09:02:13 +0000
Manifest next update: Fri 12 Sep 2025 09:02:13 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: S3+pa3KdgaKo3rJc6CqG0dbsvszIdUSCUbWzoLV7WR8=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:d3:dc:22:82:52:8e:6c:e0:d5:58:e7:0a:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Sep 11 09:02:13 2025 GMT
Not After : Sep 12 09:02:13 2025 GMT
Subject: CN=5cfa37ea4ca26d884426695da75a765db4170ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:da:36:4b:b6:3d:b7:9d:92:c1:0d:7e:34:
d7:f6:a6:81:c9:d6:52:ba:96:4b:77:02:52:1a:3c:
14:f1:01:57:67:96:02:2d:78:e4:61:c5:44:df:41:
fc:78:eb:be:ed:a8:9a:da:e6:37:4f:9f:a9:46:b3:
f4:13:4e:39:59:ff:55:5c:04:a4:fd:63:cf:66:2e:
e7:ff:f9:18:30:8c:ce:86:52:7b:dc:83:b0:95:0d:
fc:30:40:ef:50:d0:b2:f8:bc:f8:28:06:3b:4d:bb:
00:0f:11:db:87:ff:2a:ad:ed:04:89:04:f4:f9:3d:
50:83:0d:cb:80:a9:e5:0f:8e:55:cc:eb:a5:72:97:
12:32:af:f9:35:4f:9d:13:1b:f8:49:8d:9e:b8:31:
e9:57:8f:89:15:72:c8:35:c0:bc:5b:6b:c2:3d:55:
a6:37:de:e9:8c:ce:02:b3:d2:c6:a0:92:b7:30:6c:
f1:30:ac:a4:aa:28:f8:8d:b6:77:0b:a4:0e:32:bd:
b7:43:ea:02:56:06:39:32:38:c5:c0:7e:5d:01:2d:
c0:b9:92:8e:26:47:55:28:05:1a:0b:3a:c2:76:68:
b7:aa:51:5f:59:c6:7e:4a:6f:97:8a:38:ae:7c:15:
77:39:e3:9c:fd:97:27:fd:f7:04:62:52:b0:e0:7f:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:37:EA:4C:A2:6D:88:44:26:69:5D:A7:5A:76:5D:B4:17:0A:D0
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7e:b4:65:0a:1d:13:4d:ce:85:63:37:0b:4d:ed:95:7a:9e:
e5:3b:be:02:02:96:cc:5b:07:d5:24:4b:cc:f1:6f:3d:8b:7d:
ca:87:2f:eb:93:8f:8d:be:4b:c8:b3:5a:a8:12:26:0a:57:78:
c3:1c:d4:65:48:85:54:29:16:c3:75:52:34:c0:53:85:8f:65:
7b:f4:e0:80:67:7a:3a:55:3a:93:8d:e3:16:be:a7:f6:aa:be:
91:05:45:60:27:82:2c:7b:f3:26:7d:1a:8e:ef:d7:b9:c5:9f:
1f:3a:98:11:9e:4a:52:03:7d:8e:e8:06:f9:f6:00:66:14:a2:
a3:9c:c0:34:23:f8:0a:3f:5f:d3:fd:33:b1:b3:37:45:31:5c:
c7:48:38:ef:3e:6a:99:9d:75:d9:df:44:89:60:55:06:87:99:
fb:cb:1f:8c:4b:13:15:16:ce:c0:f0:ce:82:2d:84:35:ad:be:
bd:78:82:cf:ba:98:8f:08:47:47:bf:ab:0c:99:0e:b3:b7:86:
45:bd:33:77:01:ca:55:12:d3:e2:dc:a2:fd:b9:45:db:fa:d3:
01:f4:41:96:20:e6:f6:3c:0d:ba:07:d0:c6:fb:37:2b:09:23:
5f:1c:58:b7:a8:d0:2e:3c:b7:56:01:4c:1a:36:55:71:d2:f8:
81:4a:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:48:38 2025 by rpki-client