Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: oZ2ccsZg2hD5fKgbxwMRn5NBoD+7g1pF1DHtaVHcJzY=
Subject key identifier: 74:CB:32:66:06:00:A8:BF:72:14:F1:BA:DC:75:C5:3C:45:7F:A7:9E
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 0198D5F15506AB466A68F7472126EE510B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 0682
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: t/Fd+Vhwx2E9E7eHVNkCS6090DYrKRTgP589GTYZJBY=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:55:06:ab:46:6a:68:f7:47:21:26:ee:51:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=74cb32660600a8bf7214f1badc75c53c457fa79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:9c:86:f2:8a:41:00:ec:24:fc:bc:cd:d3:
10:30:38:18:a8:b8:53:ca:e8:ac:29:0a:6a:aa:5f:
45:7a:b7:39:7d:3d:12:7e:87:fd:1f:a8:b7:57:28:
11:45:6f:b6:f4:5a:77:7c:24:3f:57:89:03:86:36:
49:c1:7b:07:b9:9b:43:c2:0f:1b:bc:c2:7e:10:f5:
ec:8c:75:e0:9c:4b:11:c8:cf:0e:58:7d:32:5c:02:
64:88:8a:69:96:d3:5e:77:c1:35:02:9b:d0:c3:58:
63:ca:a5:b0:f1:fe:41:92:3e:06:42:27:a9:f6:a9:
f4:ba:bd:a6:8d:94:5b:84:42:f3:39:a1:e7:bb:cf:
4d:8f:9d:14:37:47:d1:fa:9c:46:40:d6:f2:e1:f9:
65:60:c1:15:99:e7:0c:2d:81:34:88:8c:10:df:f2:
05:ac:11:d0:78:a0:2c:75:ed:86:d2:7e:fa:95:d1:
3c:92:6f:01:82:03:53:89:8f:a6:20:9a:db:4d:8d:
90:df:64:31:3c:34:be:13:b2:1a:65:9c:c9:71:07:
de:46:ca:20:52:3b:66:99:8a:6c:4e:63:e3:9d:45:
c6:ba:92:18:d9:b6:81:81:30:3c:cc:c7:5f:73:4f:
bb:90:d0:0d:c0:79:67:ef:c6:a2:92:86:c9:f1:51:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:32:66:06:00:A8:BF:72:14:F1:BA:DC:75:C5:3C:45:7F:A7:9E
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:aa:3b:1f:86:83:21:94:58:53:c0:82:7a:ef:d0:2a:23:
46:5e:cf:6b:10:31:b3:b3:ba:0f:83:c7:2f:a5:fa:c0:da:74:
80:1c:b1:29:62:4d:f5:40:5e:90:da:6e:93:89:7f:27:ac:46:
82:15:38:6f:ab:dd:1a:18:9e:0b:43:18:04:88:a8:b7:87:01:
b2:15:a7:6b:13:c5:62:56:ca:7d:a1:2e:b0:c0:3b:27:44:5a:
97:12:57:81:2c:4c:65:d5:e6:08:38:96:22:96:e8:c3:c8:7c:
9b:51:a0:e9:22:85:34:c4:15:81:c3:78:09:de:61:2b:e5:bc:
71:90:6a:e7:da:ec:b3:77:74:4e:dc:eb:03:8b:7b:0f:2d:fb:
88:f6:4e:e6:bd:e5:0a:49:bd:bb:ff:05:f8:13:07:7b:fb:52:
f6:4b:3b:36:d7:e2:e5:d4:f4:66:e4:da:37:93:87:8d:25:48:
ff:0e:20:0e:49:fc:ce:ad:0f:5c:81:66:9a:05:75:27:c5:39:
e0:2d:4b:b2:df:30:8a:4b:28:96:85:99:85:d6:f1:9b:dd:53:
33:f7:a6:c0:f5:74:a3:22:20:02:23:51:fb:40:f9:08:d9:c6:
b4:d1:ef:00:c5:46:44:7e:cf:45:7c:9b:48:56:7c:26:f0:0e:
8f:dc:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:17 2025 by rpki-client