
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
File: EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft (raw, json)
Hash identifier: CZjvJMI/KnsU7x6ZXN6UugIPxhTcJCFOpo4UHKOy18Q=
Subject key identifier: 0E:B6:9F:20:00:4B:CE:AB:04:4A:27:98:8D:17:AC:17:13:AD:64:42
Authority key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
Certificate issuer: /CN=1015129921e7e15faef736024a4337340c857050
Certificate serial: 019A7112B2BACFA5BAC53B2271A2C1B90225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
Manifest number: AB
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl (hash: O38sNlOqVpE0Sz49iTNCEjeLmVdMZ7bLnRStNmnTgBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:ba:cf:a5:ba:c5:3b:22:71:a2:c1:b9:02:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1015129921e7e15faef736024a4337340c857050
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=0eb69f20004bceab044a27988d17ac1713ad6442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:fb:d8:51:e1:da:27:42:82:87:48:88:7d:
93:26:f2:ef:64:33:73:e9:da:85:6c:37:99:6c:2c:
eb:58:f0:e1:98:fb:d9:78:c9:ca:2a:e2:52:2f:03:
45:ca:23:d2:52:bb:e7:35:a3:2a:a6:07:b0:1f:1e:
0e:3a:61:a1:c3:a8:52:06:fd:31:52:cb:a8:97:f0:
32:de:ce:c2:0f:2c:48:4b:7c:9e:82:19:86:7f:00:
f4:4e:50:70:c2:ef:67:fa:b7:46:f4:d3:cc:08:e1:
80:3d:b3:b6:a2:09:7f:a2:80:60:bc:51:d9:ea:3e:
30:f2:20:91:ae:a2:88:92:97:f0:95:a5:98:4f:8c:
0d:17:a0:b0:d1:ef:51:61:3c:43:d5:18:9d:10:35:
56:67:03:77:d6:b2:68:3c:75:45:7a:ae:74:66:7c:
58:e5:3a:b3:28:97:49:8e:09:6f:a4:08:71:77:f9:
8a:fd:63:96:04:69:8c:28:11:5f:41:55:3d:56:17:
c1:69:12:28:e6:7d:07:65:08:18:6f:eb:0c:4e:c5:
b6:13:a7:a7:57:9e:bc:2e:38:9a:3c:2b:cf:1c:80:
8f:c6:ea:9f:4d:51:63:13:ad:4e:01:7f:b8:9e:62:
d8:6e:b6:71:e4:f8:93:a4:5c:28:fc:53:0a:2f:f0:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B6:9F:20:00:4B:CE:AB:04:4A:27:98:8D:17:AC:17:13:AD:64:42
X509v3 Authority Key Identifier:
keyid:10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:20:77:be:25:c2:59:39:82:69:2e:00:18:a2:1a:a5:32:
5a:6d:5d:f9:1f:51:53:95:4b:27:ee:b6:de:e2:a7:25:c2:e4:
a4:be:2a:0d:a2:e4:f8:1c:6a:2c:38:9e:53:a5:c4:46:e3:08:
6e:14:03:dc:3f:a5:7d:af:d6:41:93:32:3e:fc:ab:d2:1a:f6:
61:64:dc:f5:e5:22:a9:9d:8d:f9:10:5f:44:93:99:22:92:c8:
ab:e8:5b:69:e5:e1:b0:73:21:54:c0:48:37:6e:60:3c:af:2a:
cb:a5:3a:cd:1e:38:ed:ac:be:2c:9a:0a:fc:48:38:cd:af:95:
3f:7e:4a:8c:42:cd:cb:5a:a2:93:28:94:55:da:ed:98:26:59:
72:03:49:98:77:89:17:35:07:a5:22:6c:f4:ba:e8:34:78:50:
28:dc:61:be:f9:03:d7:41:4b:9e:d7:c8:a6:3e:a3:7c:84:c9:
3e:3e:32:84:37:80:28:51:37:86:0c:d0:3a:42:c9:77:b8:ab:
34:6f:50:5f:35:9d:f0:87:88:55:9e:95:f9:86:1d:79:27:20:
f8:14:2b:6b:fa:fc:5b:88:34:67:13:94:f8:ed:d4:66:4a:d3:
48:32:a1:89:3a:4a:33:3e:a1:5c:35:6f:fc:3c:bf:74:2d:73:
87:f6:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:37 2025 by rpki-client