Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier: gM8M76T1IOvHu4TTZVykOcZBNDn/2wgFmTw3ClXhhJI=
Subject key identifier: 02:A2:69:EB:15:8D:EE:B5:29:F3:51:E7:01:71:8C:FF:04:D7:AE:1D
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 019A4EF4ECEFD8DE22EC0CB12DBC765BBC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number: 1416
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: ds5XBfChUvhDtXV7Sq4lmY3QxuC8n/eDjfQMHE6VJZw=)
3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ec:ef:d8:de:22:ec:0c:b1:2d:bc:76:5b:bc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=02a269eb158deeb529f351e701718cff04d7ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:e3:c0:de:10:c4:89:1f:b0:c2:50:af:bd:
e0:28:da:9c:38:35:7d:ea:9e:04:54:8d:5b:b7:d0:
14:e1:3c:4b:70:dc:a6:2b:5d:9a:e5:25:6e:5c:5f:
a7:91:23:b2:7d:4b:e1:b4:6b:03:5d:bb:2f:37:d0:
62:38:9e:27:cf:d2:54:04:d1:17:11:a4:63:46:d9:
ac:c9:44:b9:51:2f:e6:15:93:24:e0:21:e8:a5:56:
39:41:bd:0c:1d:a5:a5:d4:c1:50:40:33:fb:06:34:
e4:a8:78:df:34:e3:6b:87:a0:85:f8:80:70:39:ff:
fd:fd:69:4f:c1:a8:90:23:93:15:2f:e3:8a:b2:16:
e4:e1:a9:76:6e:00:7c:97:4f:a8:ac:1b:6f:2a:c1:
72:93:8e:5a:15:32:8d:11:bb:a9:c1:aa:01:01:40:
09:cf:c8:6d:55:a3:45:ea:ab:be:2e:04:56:39:0f:
75:45:1d:c4:b2:41:0f:d8:21:05:0f:bf:0c:99:28:
e2:b8:42:74:d4:f9:63:4a:cc:fe:71:06:03:68:c7:
b4:ac:21:ea:e3:5f:fc:b4:6a:c0:69:8b:85:00:76:
1f:d9:07:a3:37:3f:66:ad:b6:fc:7a:0f:21:51:cc:
39:4b:aa:c5:b6:ff:6c:ed:a4:ea:e6:a8:07:33:30:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:69:EB:15:8D:EE:B5:29:F3:51:E7:01:71:8C:FF:04:D7:AE:1D
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9b:92:d0:a5:45:a7:51:63:de:ef:96:31:cd:ae:ea:b1:68:
24:a1:2a:dc:18:a1:17:61:cc:8f:a6:21:56:58:79:7c:55:86:
e3:8d:2b:f4:6c:d1:54:18:7a:18:8d:eb:69:f4:69:27:d2:96:
06:ba:e4:70:17:09:46:1f:a1:5d:f9:27:f5:ea:a2:58:63:14:
27:3c:43:4f:17:63:d5:cc:ea:e5:a5:5c:dc:79:b6:5b:d5:0f:
2d:e5:7f:ea:15:d6:96:08:b8:b7:bd:af:7c:15:8a:9b:ec:fb:
6e:a9:a6:7d:78:74:f8:75:76:d1:f9:91:81:1e:93:06:c3:4c:
f5:3d:2a:0c:46:32:6b:5b:dd:61:fb:9e:90:f9:45:14:0e:bb:
d9:53:96:9e:0f:4b:f9:90:eb:e7:83:3b:01:3f:33:c8:dd:6a:
c9:b7:33:de:e1:03:e9:21:5e:9e:3f:5f:96:4a:25:9e:09:12:
07:39:a0:c9:81:4f:3f:73:6e:77:6d:05:0b:ed:03:79:01:69:
c8:91:e2:32:fe:a2:7a:fe:c9:b8:80:aa:16:01:89:9b:f1:6d:
5c:15:ba:bb:95:7c:69:92:dc:98:d8:b7:24:f1:4d:27:98:02:
29:36:af:49:88:18:ec:50:02:10:54:91:ea:48:80:c5:f6:66:
4b:c4:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:45 2025 by rpki-client