
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: nPfvk75UtXuAhZ8XriXxjptNP0QN2VIlRAx6iSyPJJw=
Subject key identifier: 75:D9:70:C1:8D:A1:59:94:C2:D9:46:D3:E2:E4:C6:5F:AC:0D:53:1B
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 0199FB7CA1669007542CEB1E10419F0BA1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 071A
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: tp/xXtTlFyAW6wk9944PvPFsm4C09sjCfOkT4HAfUgo=)
2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a1:66:90:07:54:2c:eb:1e:10:41:9f:0b:a1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=75d970c18da15994c2d946d3e2e4c65fac0d531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:4b:d0:1d:0c:d6:c9:66:90:d1:74:fe:65:
b3:0c:d2:cc:8e:5b:5f:1b:f6:f0:87:1e:f2:66:65:
18:9f:1f:2b:f9:bc:87:08:76:5b:a3:5c:dc:25:9d:
13:c2:03:ae:c6:c1:84:ca:ea:6c:8f:a2:0c:94:0a:
a4:52:c5:4a:5b:f7:d1:f6:2a:d7:76:7c:76:7f:20:
76:51:d4:6f:62:6e:2e:97:50:e3:0d:e5:56:88:f6:
b5:64:a5:4b:ac:df:dc:ce:ab:3f:96:f5:bf:be:6a:
f5:5c:d3:b9:d5:65:fa:62:0a:35:5e:81:c5:45:9b:
89:65:1f:81:a9:cf:04:b3:90:be:f3:f4:10:d8:5f:
16:49:23:14:5f:60:4a:59:5e:f5:99:34:c6:39:15:
60:0c:bf:ef:88:c5:c8:bf:bb:c2:cd:ef:ea:74:03:
c2:f4:c5:dd:d4:7e:ef:f9:84:8f:35:54:c6:e6:70:
ca:19:a7:a6:98:bd:ff:3f:8d:e8:39:72:b9:42:c1:
06:cd:dc:be:f0:93:96:a3:8f:63:3a:c9:6e:07:bc:
61:2f:c1:43:ea:a1:89:27:26:56:a1:a3:7e:0d:3d:
40:52:b0:17:44:9f:12:37:b8:ff:98:fb:ad:22:29:
1c:da:ea:bd:c0:88:d2:a1:ca:37:e4:95:8c:37:b4:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:70:C1:8D:A1:59:94:C2:D9:46:D3:E2:E4:C6:5F:AC:0D:53:1B
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:06:c7:2e:a6:e0:f7:09:16:45:57:ec:5d:46:e1:3e:99:
a2:96:30:5c:9f:68:50:52:e9:6b:b6:19:d3:bc:cf:80:86:20:
c9:1b:cb:18:43:e8:a8:ab:21:62:cb:4f:cf:ac:62:7c:f3:79:
cd:2b:97:cc:d1:c4:6a:b7:60:f3:50:cd:70:7e:85:3a:f2:60:
43:e4:6f:56:b5:1e:25:a1:59:67:12:15:d9:35:18:26:42:b2:
99:6b:db:5b:20:02:f2:4e:3b:72:4c:35:d1:d1:bf:05:f4:92:
a7:a4:2f:8e:7b:e9:c9:05:43:34:d7:40:82:04:6b:48:b0:1b:
b0:32:e4:2e:a6:0e:4e:a4:5a:99:58:01:10:37:72:08:ab:ba:
38:30:db:c4:08:81:67:28:76:09:21:70:32:a1:75:e8:76:1b:
8f:28:cc:a0:f3:4b:ca:97:4f:e7:25:c7:4c:61:cc:72:ed:db:
0a:3d:6a:d8:10:fb:ac:c4:69:af:91:f0:1d:88:1a:45:8c:54:
af:f1:f7:c2:9c:29:ec:64:c4:49:17:4f:67:7c:ed:11:b1:9e:
a5:ca:3e:96:f1:f3:18:a5:03:b4:a9:ba:30:be:01:f1:de:8e:
a3:db:c8:5a:d0:8f:89:6d:dd:73:d0:3d:9c:d3:a7:01:46:74:
b1:3a:92:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKFmkAdULOseEEGfC6G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzZjMTYyNzhmYzgyMWUxZWVmOTMyZmRlYTliM2RkNjNj
YTZiMjEwHhcNMjUxMDE5MDgwMTEyWhcNMjUxMDIwMDgwMTEyWjAzMTEwLwYDVQQD
Eyg3NWQ5NzBjMThkYTE1OTk0YzJkOTQ2ZDNlMmU0YzY1ZmFjMGQ1MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48JL0B0M1slmkNF0/mWzDNLMjltf
G/bwhx7yZmUYnx8r+byHCHZbo1zcJZ0TwgOuxsGEyupsj6IMlAqkUsVKW/fR9irX
dnx2fyB2UdRvYm4ul1DjDeVWiPa1ZKVLrN/czqs/lvW/vmr1XNO51WX6Ygo1XoHF
RZuJZR+Bqc8Es5C+8/QQ2F8WSSMUX2BKWV71mTTGORVgDL/viMXIv7vCze/qdAPC
9MXd1H7v+YSPNVTG5nDKGaemmL3/P43oOXK5QsEGzdy+8JOWo49jOsluB7xhL8FD
6qGJJyZWoaN+DT1AUrAXRJ8SN7j/mPutIikc2uq9wIjSoco35JWMN7TSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXZcMGNoVmUwtlG0+Lkxl+sDVMbMB8GA1UdIwQY
MBaAFBB2wWJ4/IIeHu+TL96ps91jymshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQt
ZDQ5NGQ5OTdkMzk4LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84MmIxMGUtNjM4Zi00MjY3LWJjMjQtZDQ5NGQ5OTdkMzk4
LzEvRUhiQlluajhnaDRlNzVNdjNxbXozV1BLYXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFsGxy6m
4PcJFkVX7F1G4T6ZopYwXJ9oUFLpa7YZ07zPgIYgyRvLGEPoqKshYstPz6xifPN5
zSuXzNHEardg81DNcH6FOvJgQ+RvVrUeJaFZZxIV2TUYJkKymWvbWyAC8k47ckw1
0dG/BfSSp6QvjnvpyQVDNNdAggRrSLAbsDLkLqYOTqRamVgBEDdyCKu6ODDbxAiB
Zyh2CSFwMqF16HYbjyjMoPNLypdP5yXHTGHMcu3bCj1q2BD7rMRpr5HwHYgaRYxU
r/H3wpwp7GTESRdPZ3ztEbGepco+lvHzGKUDtKm6ML4B8d6Oo9vIWtCPiW3dc9A9
nNOnAUZ0sTqSWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:41 2025 by rpki-client