
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: pfrIHCZG0MukIt79HD4o5nh27TzuLbJgEML9XHiaW7s=
Subject key identifier: 5D:15:66:D9:0F:75:32:89:BD:58:E5:DA:02:BA:ED:0D:B8:C8:43:BB
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 0199FB0EFB453410AAD6963F103B15FF4476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: qPXo3xe6ZY3+j9dAIzdl1CNJlKtDsECrrT85tC7x+Zc=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fb:45:34:10:aa:d6:96:3f:10:3b:15:ff:44:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=5d1566d90f753289bd58e5da02baed0db8c843bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:f9:ed:ff:84:c4:c5:91:78:62:66:b2:48:
5f:89:e9:c3:a9:9e:16:aa:28:df:e5:44:41:ca:8b:
ad:5a:7f:ed:42:2f:b4:65:f4:00:58:67:2b:e9:d6:
41:00:59:27:d6:f0:1e:0b:bf:ea:d0:ad:aa:7d:a1:
3c:0c:17:41:e8:d3:af:2e:4c:a5:c0:66:67:61:98:
bc:f9:04:91:16:d9:17:46:fe:d9:71:c0:89:28:1f:
df:74:2f:6d:a2:e9:30:65:e4:90:88:46:90:1a:85:
77:3c:7b:3a:a6:31:4b:c0:f8:12:81:35:66:66:f3:
e7:29:aa:b9:e0:49:95:f1:fc:cd:e5:0c:a3:c8:98:
5b:df:fd:41:df:0a:50:05:c2:d9:53:a6:7a:06:5f:
e2:88:f4:34:ed:87:00:c4:36:ce:da:52:e8:84:cb:
4e:a8:a4:13:23:04:d0:a2:d2:01:ce:60:53:6e:14:
1a:2c:86:52:eb:18:f7:d2:3e:0b:5d:20:5a:f6:11:
b3:38:36:50:fc:51:2d:3c:74:4f:99:7c:ea:ca:55:
e0:53:d2:e4:6f:11:b8:76:24:22:dc:a7:ef:1c:44:
6e:73:62:b6:cc:a0:35:60:7d:b2:6b:cf:62:49:70:
25:4c:9b:7f:2f:c8:ab:ea:28:a1:ad:c5:78:ed:65:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:66:D9:0F:75:32:89:BD:58:E5:DA:02:BA:ED:0D:B8:C8:43:BB
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:3b:e1:d3:01:13:51:0d:36:e0:e0:f4:e9:ef:bd:10:4d:
b9:78:6a:50:fb:21:ae:a7:b9:d2:0c:2b:70:5a:82:99:21:2a:
93:7c:25:8b:36:7f:65:16:f6:b1:98:af:67:52:42:6c:3b:bd:
df:c9:e0:d3:a3:15:d9:b3:b4:e1:2d:6d:48:f5:21:37:43:1e:
e4:32:79:85:c5:70:60:8e:6a:a3:3d:d3:0c:ab:76:a3:4e:81:
d2:c0:83:44:33:6f:af:f8:b9:80:b4:fa:70:7d:55:5f:2c:6f:
a5:3f:e3:ec:35:12:ce:d8:fe:d2:9c:fa:68:5f:7a:9b:51:1d:
a7:7a:5f:08:95:ef:e4:4b:b3:5d:b3:1c:b5:36:b2:63:56:1b:
73:75:6e:16:54:df:b6:f6:e6:e2:04:f3:3b:86:a0:5b:a1:30:
01:71:ff:b7:72:a4:e5:53:10:7f:e4:71:49:ff:20:87:ab:6f:
58:09:7c:70:ce:e4:e1:92:89:da:05:6a:7c:cb:ce:36:cd:69:
f4:b3:3b:7a:a6:86:a6:83:ce:7f:e6:a0:32:5a:6e:42:28:9a:
7d:c2:ce:12:5e:df:ae:f7:d9:ae:e9:90:90:d5:67:19:c9:cb:
87:18:20:9f:a4:fb:95:19:f7:e9:4b:a4:1b:f4:9a:80:2c:ad:
27:8f:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:58 2025 by rpki-client