Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: CMu77Ajqz+98EknYjfZagDeuIdVTZB4+H4HQ+WzMtIQ=
Subject key identifier: 39:53:CA:21:67:C5:3D:AB:5A:9A:24:A3:59:64:68:1D:4F:5B:12:28
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019953788891F446BD3DADCC043F655AA9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 06C3
Signing time: Tue 16 Sep 2025 17:00:32 +0000
Manifest this update: Tue 16 Sep 2025 17:00:32 +0000
Manifest next update: Wed 17 Sep 2025 17:00:32 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: g+NpD5RtHhYlvb8nX3BRyLKSFNd/fKTnN7VXvq86SOM=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:78:88:91:f4:46:bd:3d:ad:cc:04:3f:65:5a:a9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Sep 16 17:00:32 2025 GMT
Not After : Sep 17 17:00:32 2025 GMT
Subject: CN=3953ca2167c53dab5a9a24a35964681d4f5b1228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:37:af:8b:a3:ac:3a:51:1e:7a:a2:76:a6:
32:ee:35:cd:7d:b1:89:4d:d6:43:3f:d4:01:3e:f4:
35:2a:26:b4:2b:dd:0a:3b:a6:38:ca:04:ed:96:83:
f2:22:01:f8:69:52:e3:96:b1:a7:cb:2c:78:f0:e9:
ed:c9:d1:14:c5:78:ed:c4:07:46:b9:c2:fb:c0:2c:
76:f7:af:44:d6:d2:1d:0b:d4:8d:d3:1c:26:31:82:
75:49:6a:87:16:31:1b:d4:8e:f7:bd:f6:7c:72:18:
9a:eb:37:5e:7f:7c:55:34:d3:cb:6a:5b:a0:9c:e3:
b3:58:7a:87:28:28:bb:11:71:bd:ee:13:95:3b:fd:
88:d9:ec:c5:2a:e7:20:fd:54:5a:b2:13:90:d2:46:
d9:e3:83:af:ef:d9:62:6a:43:33:f8:e4:2f:80:70:
a4:72:e2:46:4d:20:eb:d4:0f:0f:69:3e:5f:cd:5b:
12:2c:63:9a:43:28:56:4b:dd:1f:a8:92:34:6c:87:
d5:e8:be:4b:a1:1c:95:d4:92:ab:7a:cd:e4:b6:a3:
86:b6:92:06:d7:d1:ec:2d:69:f5:db:9c:09:d0:eb:
29:9c:af:b3:d0:97:38:02:c6:e9:1d:11:c9:93:ee:
9f:b3:38:32:cf:57:02:ea:66:82:ea:04:ba:a1:35:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:CA:21:67:C5:3D:AB:5A:9A:24:A3:59:64:68:1D:4F:5B:12:28
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:e5:48:7c:dc:02:f5:46:b4:8d:ca:62:ae:9c:7e:78:f7:
05:3e:ff:01:1d:7e:3a:4b:1e:d6:1f:e9:e4:77:e8:cf:a0:b9:
70:c6:f8:a5:22:2a:3c:ef:73:3c:ef:19:76:a2:e4:17:14:93:
4a:c7:ee:b4:a9:43:fd:52:ce:63:cc:89:58:aa:97:a6:16:bb:
03:db:6b:c8:17:28:f1:31:da:74:27:8c:d5:00:e0:23:a9:75:
f1:fb:45:34:b5:8d:64:28:6b:d1:de:2c:e9:b5:dc:c1:23:0b:
fd:78:09:f4:51:d2:6d:8c:d3:31:f1:e5:a4:e7:65:17:f1:ed:
5e:e9:9d:d2:37:56:4e:c0:9c:09:43:a3:07:7f:49:46:61:81:
f8:45:a8:ea:c3:70:c7:55:f4:8f:9b:02:93:7e:97:98:e4:ae:
75:49:45:92:fc:0d:43:b4:b7:d4:d4:a1:8c:f4:be:0b:38:d1:
09:c9:c9:76:3d:b3:44:2f:f0:3b:f7:bc:8c:60:0e:42:f7:75:
08:5b:ed:cf:94:5f:e2:71:b4:a1:6d:96:cf:88:4a:00:af:e9:
cc:aa:dc:b4:4b:3c:c4:8f:90:d2:50:09:25:02:aa:5d:49:a3:
5e:f6:f2:88:88:6e:4f:31:60:fe:de:45:fa:a3:71:5f:63:15:
ff:d0:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:00:16 2025 by rpki-client