Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier: dT9uR7LUkLq1oVatiET5unOrJgfv8yNKQDlX23y4yg0=
Subject key identifier: DC:11:9C:E4:8E:C7:47:AA:DF:0C:08:E3:97:B6:23:54:A1:C5:5A:47
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 019A239C5C3DDF535B5AFC49C10BF2FB1FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 03:00:41 +0000
Manifest this update: Mon 27 Oct 2025 03:00:41 +0000
Manifest next update: Tue 28 Oct 2025 03:00:41 +0000
Files and hashes: 1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: 1xPuA5WOd7FanVWyptDAuaPjE6RBgLR9zCpIjbw0jjg=)
2: avJEaghetulkdy61P3vVvRtnwao.roa (hash: isq8BGshz+w5RQmqprep+yBn/iuxAmpetPcOYQFYWJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:5c:3d:df:53:5b:5a:fc:49:c1:0b:f2:fb:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Oct 27 03:00:41 2025 GMT
Not After : Oct 28 03:00:41 2025 GMT
Subject: CN=dc119ce48ec747aadf0c08e397b62354a1c55a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:86:bb:2d:34:bf:8c:8b:63:6b:8d:cf:85:
45:47:99:b8:28:16:9b:97:13:73:a0:4f:27:84:70:
93:ec:05:46:fb:e2:00:9a:5c:55:66:e2:7d:5e:e2:
5c:2e:c6:cc:e1:3a:42:27:5a:10:17:29:86:00:7b:
8e:81:51:b6:bb:f2:fe:c2:7a:60:6b:8f:67:3f:5d:
a3:ba:ae:ff:4e:f1:1b:ba:f7:44:fa:45:f6:a4:88:
7c:d5:71:64:66:8d:2d:a3:b8:da:2d:86:5c:ac:46:
95:c2:90:c4:75:76:94:76:57:6c:e4:4c:fa:e6:63:
7b:f1:61:35:98:d7:6a:0a:d3:0a:1a:5a:5a:40:14:
24:f7:a9:c2:0b:6e:44:f4:54:41:ad:5a:63:4c:b5:
72:94:d1:b3:4f:9f:4f:17:ad:30:20:dc:cf:fe:c2:
7b:06:78:a0:f5:c2:bc:3c:99:66:a2:24:14:25:c3:
09:f9:0f:49:16:f7:3a:d9:70:c8:5c:12:1d:61:e8:
c3:85:a0:74:85:d3:0f:9d:4b:0c:72:96:35:bc:34:
b9:44:e7:6f:27:a0:37:5d:fe:06:d4:e2:44:c0:e2:
a6:53:84:90:72:92:7b:a6:1e:ab:44:86:e8:05:5b:
e6:90:5b:2e:d2:a4:bf:01:ca:57:81:72:bb:cb:2a:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:9C:E4:8E:C7:47:AA:DF:0C:08:E3:97:B6:23:54:A1:C5:5A:47
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:2d:23:ce:51:27:4d:12:06:d5:16:35:f7:d9:c3:78:b7:
bf:d5:85:2c:13:71:99:8b:3b:c7:0c:88:b1:21:16:c9:18:1e:
b4:6d:b0:3c:e0:c3:2b:d0:fe:7d:59:5f:09:64:b3:3d:04:f9:
1d:c6:78:93:ed:1b:f3:a1:71:92:02:b7:bf:49:52:d6:64:a8:
ff:47:99:f3:8a:29:7e:4f:cd:5b:e3:c3:4e:6c:b4:ea:b6:51:
31:7d:1c:88:73:d5:20:06:fe:e8:1f:dd:a1:6d:16:9b:af:50:
22:22:4b:c3:3a:0a:f4:76:56:eb:01:7d:0f:2f:ac:9d:c0:84:
63:6b:b1:66:00:58:99:37:93:eb:91:ac:44:51:c2:37:f3:52:
fc:e8:33:46:de:d6:94:b2:a1:b3:fe:a3:61:aa:b1:0f:a7:1b:
2b:24:38:c8:23:b9:8f:54:5e:bb:c8:ab:fb:aa:77:0b:f8:9f:
70:eb:01:bd:19:b5:1d:fe:79:df:29:83:88:3e:36:e6:5f:38:
a1:fa:0b:c7:f2:2c:3e:46:c5:f7:71:56:2e:51:9c:2f:30:b1:
07:ed:38:f7:07:65:ec:d9:12:13:ac:b5:94:b8:74:75:46:5f:
66:8b:20:cd:cd:f5:c0:ce:f2:05:08:ad:bb:fd:e2:c1:97:fb:
ea:05:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:21:10 2025 by rpki-client