Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: 95is9Q7ALOnE40Zdhma/vVFcyMXGA5c3ZCeC0Rm7KrY=
Subject key identifier: C3:6D:88:DE:8D:AC:70:34:D0:0E:40:E2:32:C5:B3:14:23:3E:26:E4
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019A4E4F9453A59F409E2FFDA55DEF4BC5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: S5j8v4sWsErWz8uOU/V/VT4IRuxCvyJmJZFo4D12+Jo=)
2: h8XcxNlg2XITkIVJEK1ZC2_6O-w.roa (hash: Uox6k3C3t/z5iyZxizryiDRbognV5cGwqRlM+dbYzjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:94:53:a5:9f:40:9e:2f:fd:a5:5d:ef:4b:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=c36d88de8dac7034d00e40e232c5b314233e26e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:b6:7b:57:e6:f8:ac:17:8b:c9:8e:7b:90:
69:5c:a8:c2:f2:10:e6:f5:ba:6d:c3:25:10:77:63:
eb:90:35:68:38:b2:76:6d:f2:cb:3b:d7:1d:8c:97:
1c:13:46:5f:c1:6a:dd:f0:df:97:20:96:ab:70:f5:
f5:92:a2:6f:ba:53:1b:c2:02:eb:03:94:20:96:01:
3f:db:4c:25:1e:b1:d8:05:f9:b9:aa:23:d3:f5:e8:
b2:c7:5a:4f:5d:65:d1:cb:25:da:df:70:da:9a:c8:
47:42:32:26:37:9a:59:de:17:44:7f:df:fe:30:97:
5b:ed:ce:60:4a:fe:75:db:c8:ab:8a:e2:6f:d7:b7:
3d:24:1b:01:53:70:a6:fc:2d:7e:dc:92:6e:e3:25:
57:db:61:f1:45:01:63:de:3a:00:ad:70:b2:9e:06:
d5:fc:7d:db:a0:ff:ed:95:3b:7b:4e:7e:21:df:5f:
63:cb:d7:f7:fa:63:d6:01:45:ac:93:2a:26:58:ef:
db:0e:6c:b8:3b:f1:25:c2:1e:f0:7d:6e:a9:c7:d5:
7e:59:ab:a1:d8:41:31:ff:4d:f8:6e:ff:85:1c:a5:
94:94:fd:2c:60:fa:ab:6d:33:27:5f:74:e3:ea:9e:
3f:d8:9f:4b:66:4f:5d:26:22:a3:cb:60:5f:2d:f8:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6D:88:DE:8D:AC:70:34:D0:0E:40:E2:32:C5:B3:14:23:3E:26:E4
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:c4:a9:f0:18:21:f2:99:60:0c:b0:21:1a:02:a5:99:2a:
58:e5:ff:a7:4f:ae:d7:09:79:4c:59:05:5b:ac:7b:d4:55:ba:
c9:e9:96:15:9a:8b:8e:d3:3d:7c:34:d6:f5:b9:8e:28:19:9c:
ff:3a:7f:c3:07:3d:1c:26:c4:d8:38:9f:30:ee:66:35:b9:0f:
40:99:c7:56:c8:af:f7:6b:52:b8:03:e8:1b:21:da:8d:bb:ad:
6e:ad:a6:0a:97:f8:e6:e8:db:04:0f:a3:a3:66:c4:db:41:18:
67:c7:e0:d0:57:db:06:23:75:ea:c5:d7:08:c0:8b:f2:e0:79:
d2:c4:96:80:bc:50:b9:d1:a5:68:92:52:b9:a4:43:ca:b2:86:
9f:bf:ee:fe:b0:09:22:09:48:b1:4e:ee:94:d3:e4:48:26:fa:
49:5a:74:ba:d9:a9:bc:f7:2a:08:52:64:41:3d:23:49:86:ad:
3a:12:cc:12:76:86:c2:b5:f1:8d:42:ab:a1:bc:18:52:4e:d9:
d7:3c:12:3a:47:fb:0e:2b:4c:9e:d2:00:75:31:2c:b0:6c:66:
55:2c:23:4e:cf:fd:6e:d0:f0:ad:a0:3c:e1:d6:78:78:ba:ad:
21:1f:3f:52:f0:60:69:4f:8a:81:0e:15:ff:68:65:9d:bf:5c:
85:68:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:42 2025 by rpki-client