Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: 3Z+ezYAkBqyhlVKotL5G3sMyNvkxYvfGUehGp9t+mOI=
Subject key identifier: DE:4D:A4:FB:4A:41:DD:F5:C2:5E:50:E3:A7:94:46:7D:02:34:B8:38
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019A73389C9A2AA567655CE75B72A1A197EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0758
Signing time: Tue 11 Nov 2025 14:01:21 +0000
Manifest this update: Tue 11 Nov 2025 14:01:21 +0000
Manifest next update: Wed 12 Nov 2025 14:01:21 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: K1ngjXBUVz9ZIZhGtYgn5ngQftVzeADCI6eTUszpNYE=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:9c:9a:2a:a5:67:65:5c:e7:5b:72:a1:a1:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Nov 11 14:01:21 2025 GMT
Not After : Nov 12 14:01:21 2025 GMT
Subject: CN=de4da4fb4a41ddf5c25e50e3a794467d0234b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:aa:9d:41:4f:38:82:db:41:1f:d9:8d:6f:
ed:2e:e8:d1:95:01:27:01:79:b5:6f:ba:57:d6:11:
e0:5d:a0:c4:13:b6:8e:92:3e:86:1f:dc:18:33:8e:
8c:94:9b:ed:ba:69:92:8e:78:54:dd:2c:b6:5f:a0:
33:e6:92:46:b7:d9:9e:07:8d:9a:7b:25:b2:2b:ba:
2b:7f:c5:0c:6b:08:94:1a:2e:21:ec:9a:ac:41:2f:
73:d7:a3:ae:c3:1a:4a:11:77:51:09:83:a6:a1:b0:
1b:4f:c7:7d:ed:bb:bc:6a:ad:bc:97:3c:1b:29:6c:
92:99:34:79:93:b5:3d:1c:73:d5:7e:97:13:c1:87:
a5:54:a5:3a:ae:af:99:bd:e0:b3:a1:73:de:d5:2d:
38:89:22:33:af:87:db:d9:5a:c3:a8:72:4a:fc:b9:
cc:e7:a7:e1:1c:c1:2b:cc:4e:fe:81:42:23:c5:8a:
9c:85:71:a2:91:0f:70:4e:8f:72:bb:3a:e3:85:16:
d5:fb:9a:bc:d0:bd:eb:d3:b1:3b:be:ea:1c:4a:4f:
e4:e0:56:d5:be:3b:d3:58:dc:fe:bf:43:74:70:54:
ba:a2:b6:d2:3c:70:d6:9d:a9:9b:ba:1f:9a:c0:ef:
a6:00:ed:cb:f4:8a:30:ce:79:3a:26:35:5e:4b:4e:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:A4:FB:4A:41:DD:F5:C2:5E:50:E3:A7:94:46:7D:02:34:B8:38
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:75:25:88:f1:47:17:e2:d5:e0:a8:2e:53:6c:cb:71:98:
99:2f:c8:ac:0f:81:d2:21:a8:83:dd:1d:bc:5d:56:d3:6b:e4:
d9:3c:04:17:3b:8d:2d:50:f0:10:5e:0f:ce:9a:ba:a5:a6:9c:
b6:9e:64:77:eb:6b:ed:d9:e0:72:47:1a:27:cb:24:8d:1c:ae:
2c:79:39:e2:d1:50:35:ac:2f:25:b7:62:11:25:e9:26:40:aa:
fa:3b:85:3d:ad:c6:8a:b8:de:09:a8:02:e7:a1:72:3d:21:3e:
49:0f:c6:6d:ef:bd:95:6a:f7:cc:16:d0:cd:e5:30:9a:a8:1b:
46:7f:fa:25:b2:dd:79:2b:d4:a2:dd:71:bd:7e:7a:e5:4d:a2:
48:5c:3e:8f:55:ee:d0:1d:64:14:5a:bd:bf:3d:56:75:9f:69:
d1:ac:10:da:37:c3:88:54:52:fb:21:bb:15:93:0e:35:6c:73:
3e:f7:68:83:b8:72:d3:40:a7:68:73:9e:58:88:a4:63:d3:3c:
74:87:65:9b:ec:3b:3f:14:1c:28:e4:06:82:c7:a2:7e:75:93:
2e:3e:b0:8f:7b:d7:bb:aa:d0:e4:15:ef:12:4d:2e:86:69:02:
83:46:69:ce:0f:9e:ac:7f:a4:3e:4a:c2:09:bd:6e:72:83:4f:
d2:8f:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:38 2025 by rpki-client