Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: 5dR/gWJ0zH7X0i+kO+/kBa+ihMZC+qdvbwn1pweCS30=
Subject key identifier: CF:EF:EC:1D:B2:BE:D4:D9:DE:FD:35:A8:8A:9C:4C:69:31:53:32:62
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019A2F32930E245A99F737C7EE412861AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 168F
Signing time: Wed 29 Oct 2025 09:00:34 +0000
Manifest this update: Wed 29 Oct 2025 09:00:34 +0000
Manifest next update: Thu 30 Oct 2025 09:00:34 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: 2gyL5sBExq6+INSkUfcQ2irxRIFeRBLE6w14MU1lSe8=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:93:0e:24:5a:99:f7:37:c7:ee:41:28:61:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Oct 29 09:00:34 2025 GMT
Not After : Oct 30 09:00:34 2025 GMT
Subject: CN=cfefec1db2bed4d9defd35a88a9c4c6931533262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:b1:ef:43:aa:7a:d1:4c:e9:cb:29:60:a1:
ac:c4:b2:e5:35:14:92:54:44:97:7e:ec:78:26:aa:
93:06:10:3d:9b:c3:ea:42:7c:c4:21:59:a3:40:2e:
c5:c6:5a:46:86:c5:91:09:e1:82:9d:ba:1f:a1:19:
ee:f0:fb:e1:8e:49:51:cd:08:93:de:c5:06:2e:97:
0f:ab:59:db:80:83:ba:a7:dd:58:9d:46:d3:0b:98:
e5:3c:fc:d4:f0:fc:67:7b:aa:4e:1f:64:65:54:b4:
d5:a8:86:ea:2e:b3:2d:01:54:b6:25:7a:4d:3d:51:
ee:9c:e9:fc:e6:01:b2:cb:23:c6:0b:73:ed:85:ca:
a7:f2:b9:dd:f5:ea:87:1b:b3:73:da:37:67:8b:e0:
b8:45:cc:a9:d8:6e:91:ef:45:ca:17:84:9e:bc:42:
bd:7b:6b:2e:c3:07:b1:54:83:c9:ae:2a:69:b2:48:
7e:e8:95:d2:78:62:38:25:d7:02:f9:6e:53:08:68:
00:8e:90:a5:72:30:d7:5e:65:ef:97:b2:c0:95:cf:
33:c2:eb:f5:a4:4f:25:da:29:c9:07:99:6d:0a:83:
e8:e5:3b:d5:26:de:2d:84:6f:2f:16:80:36:05:64:
4e:b2:dd:77:9e:bb:0c:cd:cb:40:65:87:da:94:1b:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:EC:1D:B2:BE:D4:D9:DE:FD:35:A8:8A:9C:4C:69:31:53:32:62
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:1b:97:cf:d8:19:72:52:11:ea:c5:99:e0:7f:39:23:4d:
54:da:e5:e2:44:0e:3f:a3:5b:7d:a2:0f:d0:41:a7:9b:00:21:
a0:75:86:ff:40:bc:22:e3:dd:fc:fb:69:09:47:48:e6:fe:54:
9f:02:0a:43:56:cc:c6:76:7d:ea:41:79:0e:14:bb:87:a0:4f:
31:22:19:e0:3e:5d:27:d9:f5:87:88:87:27:6a:61:64:63:c0:
82:62:0a:55:6d:4b:92:2c:38:fd:45:61:ea:ee:f4:9f:d9:e2:
53:17:85:ad:61:56:00:d3:b3:d1:22:8c:c2:01:4b:ec:10:bb:
03:0e:62:3d:cc:3e:dd:fe:9d:cc:3d:48:39:28:4c:05:45:d4:
f0:45:f7:89:98:ea:85:e5:28:73:87:92:59:9a:83:00:c8:26:
b9:1c:65:51:3c:7c:d8:b3:25:86:7c:30:eb:21:29:52:eb:34:
67:0b:f8:8a:a8:84:2c:45:46:b0:3a:c7:46:48:5d:8f:f7:34:
bd:41:92:0a:c2:26:ca:e2:31:12:df:11:08:59:b5:f0:8e:99:
cb:c4:a8:de:03:c2:d0:bd:db:1e:a4:be:65:8b:e9:95:4e:d7:
de:47:18:3e:a8:0a:29:f3:71:da:08:87:4f:e2:9e:4b:2b:fc:
5f:1e:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:41:38 2025 by rpki-client