Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File: EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier: eJ86JOZsxRLzm8Enze5JtATRmT0exOC3trhV9FCBDpI=
Subject key identifier: F3:BB:BB:4C:D8:BB:9C:F6:93:B1:36:EB:FE:FC:71:C4:AF:3C:55:EA
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial: 019A4B4E67FF61D438C6E5116E7043E88A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number: 170E
Signing time: Mon 03 Nov 2025 20:00:20 +0000
Manifest this update: Mon 03 Nov 2025 20:00:20 +0000
Manifest next update: Tue 04 Nov 2025 20:00:20 +0000
Files and hashes: 1: 4QR_9ICDY1eAjAMQinzDvd_fSbM.roa (hash: QOGIl5yTiA09+cvbQSor4wKyODpGweFUOGDGmoa5Fkw=)
2: 4TPUxBZQjPMFC7b1mfrFjCvLGlY.roa (hash: JkcUiwxVUZ6Y1IABb79mPduZ40ATbeXmGRW1UsM28Lg=)
3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: uWO6hrVSKIvedYWBWBIhdr7mX99WGaMqZs/roYMRKh4=)
4: Wo-dX3lQK__8wGgqhbqIC_egjRY.roa (hash: Kje1K6kIBEP6yfvrAyyBJragoqmu73LHVFRq0DMX108=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:67:ff:61:d4:38:c6:e5:11:6e:70:43:e8:8a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Validity
Not Before: Nov 3 20:00:20 2025 GMT
Not After : Nov 4 20:00:20 2025 GMT
Subject: CN=f3bbbb4cd8bb9cf693b136ebfefc71c4af3c55ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:b7:e9:f0:fb:ee:a6:82:79:22:51:76:d9:
5e:72:d2:cb:9e:05:d5:43:be:88:bb:a8:99:29:76:
04:26:7a:92:fa:ab:74:8c:97:8c:6e:e8:19:0c:99:
92:b1:50:87:d0:0c:b2:9d:fc:f3:14:a4:a2:12:8f:
77:11:cc:26:b0:a9:0e:01:78:85:ba:ee:4e:af:59:
b2:4c:7f:3d:08:1c:e5:52:ab:d0:99:77:8a:48:19:
b3:8f:7c:79:a4:42:25:55:b9:0e:9d:da:10:d3:c5:
de:12:3c:ba:7c:e7:23:ff:59:e8:4b:d4:2e:a3:04:
99:58:a6:b8:5c:dc:36:be:a1:11:ca:dd:f9:b2:e7:
31:cc:34:4e:92:12:45:81:75:d7:40:32:d7:be:c0:
35:34:7c:12:cc:1f:97:e6:02:72:ea:d0:99:3e:01:
cd:8b:ce:f2:b5:4d:03:32:7e:c2:bd:22:34:91:80:
53:d4:39:e6:d1:ff:f1:ed:76:04:78:41:55:44:2f:
46:ce:85:54:2d:bd:69:6f:9c:bd:f3:f7:4f:6f:58:
e8:7a:f5:a4:a0:17:bd:08:14:38:6e:86:4f:5c:84:
c5:45:eb:92:bd:30:c1:03:e3:ef:8f:49:e6:26:d9:
21:f4:03:1c:84:be:64:ac:ec:de:b9:d4:b5:d6:cc:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:BB:4C:D8:BB:9C:F6:93:B1:36:EB:FE:FC:71:C4:AF:3C:55:EA
X509v3 Authority Key Identifier:
keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:66:48:57:da:a3:66:cb:bf:e9:6a:2d:2e:14:03:b1:72:
6d:42:a9:4f:ed:0c:cc:92:af:a0:17:93:a1:b0:27:70:a2:77:
4e:92:32:87:5f:18:11:c6:9d:66:a3:29:f0:60:9b:91:72:b7:
74:f0:3e:af:f8:b8:8e:52:d2:f0:53:f1:fb:11:40:dd:44:61:
8b:14:c4:65:0e:19:d4:93:40:6a:64:d7:3c:7d:f7:1e:e6:94:
14:ce:48:57:9b:92:ed:17:e1:ac:f5:31:87:c2:18:e1:63:b5:
04:4f:1c:b5:06:2c:21:7f:a2:bd:c9:c8:0e:e1:6d:22:63:1f:
13:14:43:90:b7:b6:6e:a1:5d:89:05:6c:51:ff:94:22:04:d2:
9c:bf:a6:b5:6e:8e:3b:61:01:04:af:40:0c:8d:37:29:8f:9f:
6e:01:ad:92:e8:91:77:78:77:df:2d:43:5a:bc:6e:47:82:84:
d1:fb:d1:58:29:92:f8:97:9d:93:d3:ed:b9:0a:eb:92:5c:32:
0b:c7:43:a9:e8:47:c9:61:b2:ad:ac:d2:71:67:9b:4f:47:8e:
cd:9b:43:ef:8f:b2:ec:96:dc:0d:10:79:94:20:02:99:f0:ec:
f2:d9:70:1c:93:e6:f6:58:2d:97:46:95:03:75:71:59:f3:84:
ef:59:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:19:34 2025 by rpki-client