Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File: EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier: SPAVadOTzYhcdGljFCTX4wxEwLZZxJXOv+mnINNetoQ=
Subject key identifier: A3:ED:23:B2:5F:C2:DD:A3:5B:4A:69:2A:D7:61:A6:97:AA:86:2D:EB
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 019A50071DF438880FA101A6E932CA4E78B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: kB3dMAOBqy1QjwBlIR/FXsdxyPhjBsocCfNCtqeZpTo=)
2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1d:f4:38:88:0f:a1:01:a6:e9:32:ca:4e:78:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=a3ed23b25fc2dda35b4a692ad761a697aa862deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:43:68:14:a9:69:3d:b6:5e:44:27:65:35:
50:bd:46:8c:52:53:e5:f7:f4:54:52:0f:a8:3f:3b:
53:7a:93:e3:0d:29:cb:3d:08:93:4b:cd:69:72:db:
9f:38:ad:01:a1:a4:b1:95:5e:06:70:66:9a:bf:3c:
4d:9a:18:9a:ca:f1:ee:52:ba:3a:28:38:99:a8:67:
6f:6e:56:48:9b:d5:9c:2a:ca:75:0b:54:28:44:a3:
17:01:8d:6a:6c:eb:b8:f6:6e:99:b2:1c:d2:85:89:
09:32:75:80:1d:40:77:df:73:8c:af:04:d5:36:bb:
ee:1d:f9:a9:bf:de:d1:e9:02:8f:4b:9d:e8:63:f2:
e5:14:2d:bf:71:ee:83:21:c6:d9:29:cb:37:ab:88:
6f:af:35:d0:7a:93:72:50:0f:03:c8:4b:67:2b:36:
4a:7b:f8:44:88:5b:13:9c:66:81:60:7c:56:8d:17:
92:a0:5e:22:8c:06:84:ef:ab:17:7f:cd:a2:6e:01:
4a:02:28:c2:a1:72:bb:ff:f3:0f:76:da:f3:21:64:
9f:b1:ae:36:4b:f6:6d:1f:b2:47:a6:ec:37:d4:08:
23:c8:08:6d:bd:ef:a3:f4:8e:7b:36:bb:8c:23:aa:
d8:eb:1a:cd:70:88:68:c4:9c:17:bb:fa:87:9f:49:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:23:B2:5F:C2:DD:A3:5B:4A:69:2A:D7:61:A6:97:AA:86:2D:EB
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:74:1e:0d:ab:c0:52:b4:92:3c:93:42:6c:93:45:87:8a:
46:93:f0:79:1f:72:78:41:05:46:92:5b:ff:2a:63:49:66:0e:
61:31:ff:17:ee:3e:9f:86:54:63:24:fd:07:77:8f:d2:4e:e3:
03:07:5d:da:fc:05:b1:fa:53:2e:11:c3:f8:f4:3f:8c:5d:bd:
54:28:20:de:b7:5f:16:5c:b0:c3:6b:21:ce:bd:f6:f4:96:77:
29:db:d5:00:f6:2d:d8:6b:2f:20:b4:a1:1f:75:dd:fb:31:50:
52:24:dc:e2:1a:bd:b4:50:fe:ba:fe:e3:49:92:09:6f:05:35:
f8:d6:1e:05:63:0a:7c:a1:71:90:b0:dc:d3:d3:e4:3c:68:03:
9f:3b:29:8f:14:45:6d:3e:a1:3d:16:59:a6:73:45:44:8d:60:
4d:9c:01:be:0a:f6:84:23:15:a7:30:7e:ce:fc:ac:ee:7f:d2:
21:a6:e8:24:76:58:c3:71:57:96:1a:65:d9:e6:9c:7b:c7:d7:
78:ce:66:34:3c:e0:eb:e2:4b:06:ac:52:e5:b6:96:ef:05:89:
e6:43:b4:a4:03:b0:d0:35:e2:0e:a5:55:46:62:88:92:1c:15:
43:d9:25:2e:1b:0a:8c:f3:45:6b:ba:3b:15:f8:4f:6f:9c:57:
ec:54:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:18 2025 by rpki-client