Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: th0v9SIxEzi/mh5iQNpzyOkHB3gp/4NN+Bb+U1P8cto=
Subject key identifier: 44:F4:25:9C:24:A0:B7:47:CD:5F:00:28:AA:3B:27:7C:7C:25:F2:70
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 01988B104CC6E2C97C1493FD88B20CC36CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 19:02:37 +0000
Manifest this update: Fri 08 Aug 2025 19:02:37 +0000
Manifest next update: Sat 09 Aug 2025 19:02:37 +0000
Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: VwU7ctIYZ7y1lgGwOfEBlzHQOIXAxr2ls6w9ra8BdZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:4c:c6:e2:c9:7c:14:93:fd:88:b2:0c:c3:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Aug 8 19:02:37 2025 GMT
Not After : Aug 9 19:02:37 2025 GMT
Subject: CN=44f4259c24a0b747cd5f0028aa3b277c7c25f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:ef:db:fc:24:5d:40:bd:7c:da:25:80:c7:
04:fd:07:54:e7:4c:b8:f6:8e:07:db:33:5a:af:2b:
aa:7f:00:59:82:df:ec:68:30:da:e5:f4:3f:8f:30:
e2:29:f8:d7:c9:7e:04:0b:9a:14:42:fa:a2:84:fc:
b4:5e:7a:ed:e8:7e:e1:9a:37:0d:56:1e:5c:6f:33:
38:d6:e4:39:5f:c7:30:03:f0:b4:14:ff:1e:c9:74:
bf:df:fc:30:7e:f1:5d:d3:39:87:ee:33:37:ca:c0:
33:df:39:03:8b:dc:cf:d7:ef:9f:61:1e:ce:1b:e5:
12:33:7f:62:ca:21:bd:e8:57:da:fc:23:76:90:f3:
4c:04:7c:32:97:7b:26:60:ec:dc:21:13:90:fc:fc:
a0:ff:a3:14:5d:80:9a:41:68:c2:41:ef:3f:03:82:
3c:15:f4:5a:bf:21:cf:17:cf:2f:5a:ca:60:98:aa:
fe:9e:d0:e8:d8:48:77:39:e3:e9:bc:ee:1f:93:27:
a2:94:50:10:d1:5b:bb:e4:23:ce:7f:94:4a:ae:b5:
8a:60:8b:5d:46:aa:6b:c8:10:ba:c3:f6:a5:b9:fb:
e7:e4:ed:a4:ac:f1:ae:8c:e2:e8:c9:c8:de:68:ce:
ca:ea:0b:20:c8:b0:09:f6:4a:44:d6:21:f8:a0:c6:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:25:9C:24:A0:B7:47:CD:5F:00:28:AA:3B:27:7C:7C:25:F2:70
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:85:69:3d:e2:04:d5:99:fd:87:a0:d2:4b:83:1a:db:c0:
c6:2d:33:8b:77:88:5a:25:27:ac:c9:22:86:95:2f:bb:0c:f4:
a8:d3:90:c5:84:2b:1b:71:29:eb:ba:2e:54:6b:35:de:c6:ed:
61:3b:b3:ce:83:82:20:47:b0:2f:d0:27:9c:a6:12:66:43:b1:
a1:7b:e6:b1:69:69:ea:a5:d3:28:2b:43:b6:eb:f4:19:4c:88:
ed:b6:c8:22:ba:24:07:e9:c8:05:e2:87:c1:7b:82:1e:e4:4d:
59:24:9d:49:e3:89:cd:29:7d:9e:60:3b:e3:f8:6b:80:2c:1c:
b3:01:15:e2:3f:59:59:34:87:15:09:85:17:ba:e1:39:00:e3:
33:ae:a0:6b:50:4d:1e:14:c6:f5:52:1e:63:26:e3:b5:36:c1:
57:21:03:45:80:d1:15:44:51:9d:88:b4:79:69:f3:cb:8f:01:
67:da:90:3a:c5:dd:18:11:c9:16:d7:88:58:c6:af:98:05:61:
d3:b5:1b:14:4f:21:b2:5e:9f:f3:fe:b2:ed:55:aa:2d:3a:62:
dd:47:a6:58:9f:a2:d3:97:a0:70:ce:9a:50:75:b8:73:d5:98:
07:a5:18:34:2c:24:ec:9b:de:53:2b:6b:13:4f:30:b8:52:f8:
98:19:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:10 2025 by rpki-client