Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: zxLUi6yjC3qN4oD0ZtE5vqSvNVG3XrNP0FWkqaN0On0=
Subject key identifier: B3:9E:19:1B:32:2D:45:24:79:87:3E:0B:D9:1D:54:00:20:0A:A1:74
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 019A4F62A3BC8BE7B833DF3CFB7F17807194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: AN26VVV4OHM3tAC2FCXK+6rFs7aIFG1pqeSvzo5/SCg=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a3:bc:8b:e7:b8:33:df:3c:fb:7f:17:80:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=b39e191b322d452479873e0bd91d5400200aa174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:81:c9:c6:15:15:74:d7:af:2a:5b:f5:df:
e0:33:bc:eb:0e:74:53:8d:75:1a:73:ec:da:cd:73:
56:5c:10:27:0a:9a:f0:99:e6:46:94:02:23:c6:b8:
eb:6c:d3:0d:d0:2b:d1:b8:00:ed:62:8a:10:06:18:
0b:4d:dd:e9:36:ae:2a:af:78:27:aa:bf:c9:b3:37:
76:19:f0:e4:90:30:64:7f:50:ad:6e:ec:db:51:44:
f9:33:ad:44:69:62:93:d2:da:e3:a9:a4:c3:31:25:
6a:7f:a0:6e:ce:88:b8:e9:84:f2:0b:74:f1:d6:12:
c0:f6:91:4a:e6:8f:e9:90:0a:81:a1:15:e8:2c:a7:
01:d2:87:08:6f:b1:41:79:b4:fa:83:a5:d1:15:09:
aa:74:38:12:0b:88:84:da:4f:b8:0f:61:39:69:dd:
f1:34:3e:fb:9c:21:c5:a7:c3:5a:42:f8:37:bc:4f:
3f:8b:1e:35:3e:26:07:63:9e:8c:b9:1f:55:48:cc:
f3:26:70:0f:ae:17:71:a0:46:e5:f7:f6:1d:b8:b5:
5a:5a:18:56:5c:7d:37:95:ed:0b:bd:92:92:fe:93:
81:1c:93:93:69:c2:ff:35:97:65:d7:e6:72:ca:5f:
6a:c5:f2:e9:18:95:bd:f9:89:89:cf:08:34:1d:94:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9E:19:1B:32:2D:45:24:79:87:3E:0B:D9:1D:54:00:20:0A:A1:74
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4c:77:b0:60:3d:28:27:bc:5f:e6:74:bd:b0:83:03:98:ee:
c4:b6:db:62:21:26:69:b1:3a:d1:87:f3:41:72:50:3a:8f:51:
d6:cd:8a:9c:b8:7f:3b:fc:69:db:29:6b:21:cb:56:bc:c8:c1:
06:3e:42:ea:1e:e0:4c:0c:9e:d5:3f:76:8a:2d:56:f2:92:95:
fc:55:7a:fb:b5:e2:f1:fc:20:64:e8:af:7a:b0:59:14:1b:f1:
4e:4d:83:8c:22:b0:a3:c1:59:c5:a7:ae:23:a4:67:52:ce:22:
87:a4:2a:ec:10:a9:bd:c2:44:74:20:4a:0a:43:84:7a:c9:50:
b3:4f:6f:36:56:3c:65:af:bb:53:8d:65:3a:88:88:7c:85:b3:
05:8a:60:e3:ef:50:b6:3a:8e:70:a4:8d:7d:91:6a:08:b4:e5:
aa:fd:a1:30:18:8f:77:e9:c6:ca:a7:c4:38:f6:1d:50:b2:3b:
4e:1b:1c:5a:f1:ec:dd:e1:44:16:c6:6e:f6:8c:02:b0:a3:5b:
71:4f:ac:b0:80:62:34:d0:80:5c:4e:32:56:7b:53:dc:a3:e3:
51:53:dc:8e:74:e1:df:14:45:a9:25:5e:0f:27:ea:4a:38:e3:
a0:af:ea:38:d8:84:02:6c:32:2d:7f:2c:4a:5e:87:74:87:b4:
a3:4d:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:04 2025 by rpki-client