Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: T050pCRV1FPxbyHZpYwp0I4gGvbrh3+KhM2fLo7Le7Y=
Subject key identifier: 8B:F0:61:D2:AC:F2:27:3D:5B:75:9C:20:F2:E0:78:EF:9E:10:0F:3A
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019A72261E20F4EE69C92F254C122B5C47EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: i8WV5kc9sBgNbXqpj2zZlEbCOi/fO8puPm7WnlU6xpg=)
2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1e:20:f4:ee:69:c9:2f:25:4c:12:2b:5c:47:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=8bf061d2acf2273d5b759c20f2e078ef9e100f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:56:ba:23:63:a3:b4:f0:36:be:91:40:4a:
1d:d9:0a:2b:d6:d6:1c:d7:8f:bb:6b:39:43:3f:28:
88:4d:7c:2a:7e:a4:b1:01:8c:c8:e4:e5:34:23:f3:
4a:b6:01:dc:9a:34:06:d6:d5:98:d1:91:66:0c:76:
15:ca:bc:29:86:09:6a:54:ea:c3:99:56:4d:47:04:
5a:a4:34:18:e3:8e:67:35:0a:de:27:cd:76:61:62:
dd:5d:ed:f1:24:16:e9:e8:e4:52:c0:6e:28:84:9d:
b1:61:8b:07:39:c7:08:2d:76:e5:00:91:e6:a8:64:
a9:5b:39:02:75:be:47:91:7f:47:0f:90:7a:bf:a1:
db:91:26:b8:12:5d:3c:5b:83:e9:47:eb:b7:0d:27:
54:b5:e6:c8:6d:88:7f:ca:3e:4f:66:34:f0:a8:ca:
88:27:d2:0f:88:bd:ae:68:a6:ad:bc:e4:8d:8b:c1:
d4:80:bf:48:31:2b:ee:63:c6:45:f2:22:6e:c4:be:
88:c2:02:9c:0d:ba:3e:aa:11:a5:0c:0a:0c:34:7d:
76:d6:74:ca:0d:5a:8d:aa:5b:82:22:d5:c6:70:04:
d2:12:9e:2d:a7:20:04:f1:f9:28:8e:d8:a9:93:05:
7d:33:8a:80:93:b3:cd:c2:14:c7:d0:b5:0f:14:d1:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:61:D2:AC:F2:27:3D:5B:75:9C:20:F2:E0:78:EF:9E:10:0F:3A
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d0:83:b5:73:df:51:88:96:24:b3:9d:71:69:a7:20:40:e8:
fc:71:05:f1:b0:68:7c:57:76:ba:89:7f:ac:f5:ed:66:3c:e9:
f8:bb:22:1d:f3:66:07:af:28:1c:0e:40:1e:75:49:f4:3b:1d:
1d:d2:f2:56:61:3f:2d:4e:f0:10:b2:51:be:a5:2f:ff:aa:13:
e0:28:2e:61:12:95:b8:57:d5:52:c7:69:e6:59:ca:a1:ce:f3:
37:f1:26:53:a3:ba:05:4e:a4:aa:3c:fe:8d:38:34:ab:67:f3:
68:23:5b:65:a7:c6:37:b2:5d:c7:28:36:a6:12:fd:df:c0:94:
c4:e8:22:83:0a:7f:09:d0:97:d9:dd:96:e5:32:8c:5c:8f:99:
23:b8:96:02:e9:56:ef:24:5f:b9:07:cf:a3:a5:6a:61:35:4d:
68:5f:48:32:fd:1b:4c:4a:bb:41:9b:ac:52:74:43:df:4f:7a:
5a:d2:c7:75:db:a7:b7:f5:87:dc:af:56:46:4e:e4:e8:8b:92:
f7:5b:9f:4e:77:12:19:a4:25:2d:b4:3d:cd:9b:0f:0a:36:23:
e0:20:0c:68:d0:db:18:07:75:a4:2f:db:84:3e:38:da:99:d1:
28:ff:20:e5:af:4e:74:d8:8f:71:63:2c:17:f5:27:23:86:a8:
1f:44:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:37 2025 by rpki-client