Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: FBk7D86Il41snWEOjt5D6LPnanPim2TtH6XWMZNwJew=
Subject key identifier: 80:F9:89:AD:6D:64:22:1E:14:4A:44:E5:0F:A2:7A:45:93:0B:21:F7
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 0199FDDA0505DB6E094857F3943A542B1573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 13EC
Signing time: Sun 19 Oct 2025 19:02:27 +0000
Manifest this update: Sun 19 Oct 2025 19:02:27 +0000
Manifest next update: Mon 20 Oct 2025 19:02:27 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: ljzsQXBQiHBT0DpfDcT0yrHzXcJq/9NyhTWWsG31LCM=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:05:05:db:6e:09:48:57:f3:94:3a:54:2b:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Oct 19 19:02:27 2025 GMT
Not After : Oct 20 19:02:27 2025 GMT
Subject: CN=80f989ad6d64221e144a44e50fa27a45930b21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:4c:ff:6f:08:78:63:ea:ab:6d:2e:10:c5:
41:ad:a8:97:70:58:66:a0:59:c7:55:35:ad:e5:49:
6c:fc:24:8e:85:eb:2d:3d:ae:1e:ab:c2:e8:6e:82:
e9:b6:eb:83:4f:3d:6c:49:fa:8b:0d:2a:a9:ed:9e:
02:d1:df:12:99:4e:59:c2:b2:7a:ed:1e:fa:f5:87:
72:2c:85:39:84:4b:7a:78:e1:10:23:bd:69:12:da:
32:8c:ce:b1:43:70:c1:36:18:e4:9e:48:15:da:69:
6e:a7:22:33:2e:5f:ec:d0:f9:97:3f:0b:e7:be:a1:
09:38:23:57:0e:da:ac:ee:3d:2c:f6:62:db:7f:65:
f9:c3:c9:41:29:1c:2d:b6:61:58:a1:01:4c:fc:48:
fc:7e:bf:62:84:51:22:67:5c:24:49:e5:98:ad:c0:
db:05:40:66:20:ea:d8:79:c6:c4:3b:a4:46:f6:ee:
21:28:7f:c9:07:59:83:95:11:fc:2f:98:e7:35:64:
ab:38:6f:06:21:10:4e:62:97:36:0e:9a:54:69:6b:
32:ac:52:1a:76:45:ee:d7:7d:2a:79:2f:9f:70:23:
a2:75:f6:05:e0:3e:19:ff:fb:4c:9f:d3:19:01:0a:
1c:8b:91:ac:68:64:77:2c:27:5a:aa:9d:a0:3e:c5:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F9:89:AD:6D:64:22:1E:14:4A:44:E5:0F:A2:7A:45:93:0B:21:F7
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:70:1e:20:04:f2:7d:34:43:93:0c:27:a3:f0:10:5b:2e:
f5:6e:2d:4c:44:df:d8:40:2d:c6:9d:ea:b3:22:bb:62:aa:3f:
0a:c0:54:3c:47:1f:02:18:39:c1:00:20:f2:6f:9a:19:97:8f:
43:95:1e:3a:94:bb:35:75:d7:43:3d:29:14:3f:13:b9:73:dd:
73:71:2d:b6:99:a9:9f:7e:0e:b5:34:4c:71:79:3c:2d:9b:49:
05:dd:25:9e:d9:eb:33:8b:75:b0:bd:2f:bf:dd:bb:2c:2f:ea:
a5:be:2a:5a:bf:b5:33:43:a8:ed:59:65:7c:d4:f3:22:8c:89:
76:2b:11:2d:76:0e:c7:19:fb:1a:1d:d7:fc:90:af:7f:e0:02:
91:7f:9f:e4:f9:c2:13:a9:c7:2d:1b:28:43:ef:20:a6:93:bf:
5a:21:7c:68:25:01:b2:de:5a:f7:48:a0:ac:77:f7:54:5f:70:
7c:b9:31:f0:8c:7d:8e:59:3e:e9:e2:69:74:e9:fb:1e:68:1d:
9b:06:31:4f:e9:ba:6f:f8:de:16:38:8a:ff:b9:81:4f:c7:e8:
e3:e0:fa:da:1d:15:73:26:a9:43:a3:ad:9f:6d:bc:f8:04:15:
1b:98:e6:be:f4:74:40:af:3d:de:74:ee:13:90:99:e4:29:9b:
13:16:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:50 2025 by rpki-client