Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: UvG0OKKgjjTxYqDaFGQyNfl9vtzOPrL0aKEP3LPerDA=
Subject key identifier: 07:2C:05:6A:22:12:C7:FB:41:66:69:ED:17:20:1F:7B:75:09:F4:38
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019879AD15D467A90DCE3912624DC17EDEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 10:00:43 +0000
Manifest this update: Tue 05 Aug 2025 10:00:43 +0000
Manifest next update: Wed 06 Aug 2025 10:00:43 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: Hlnn8U6qF1Jb+LfmZpBAt3f+g/Z/snKMVyQL2NhjABs=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:15:d4:67:a9:0d:ce:39:12:62:4d:c1:7e:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Aug 5 10:00:43 2025 GMT
Not After : Aug 6 10:00:43 2025 GMT
Subject: CN=072c056a2212c7fb416669ed17201f7b7509f438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:78:4e:ae:c7:bf:d8:8f:de:5a:5d:08:bd:
bf:e1:4e:f8:20:64:cc:09:66:6a:60:3f:56:99:b7:
f7:42:07:d7:98:62:a7:96:50:4c:91:06:e4:24:6f:
dd:1b:67:9c:ec:b7:f7:24:8d:07:db:c6:15:c2:70:
52:9e:3e:8a:82:a8:fc:11:bc:5f:e1:3a:3e:56:f4:
79:47:f0:d9:f5:0b:37:a7:65:e3:09:73:0a:c4:6a:
65:c1:64:40:69:bb:2d:1b:07:49:8a:de:e7:7f:c6:
ba:26:75:12:11:6a:79:02:f5:4e:b4:68:87:3b:74:
8a:da:f1:76:9f:35:0a:a4:fa:6f:04:65:f7:b2:f6:
fc:97:35:b4:12:bf:30:55:f7:60:08:24:3a:9b:57:
37:44:4d:f7:a0:22:13:a2:0d:2f:06:c0:c9:99:18:
17:24:96:b6:b1:99:94:d5:f2:27:db:66:85:86:69:
03:48:0c:f9:e5:76:1e:22:c7:6a:01:e3:c3:b9:22:
31:5b:e2:8d:ba:c0:dc:88:a8:f6:c8:c6:b4:0f:97:
c3:e5:0e:5c:7f:24:f6:2d:63:41:97:d7:50:8a:5f:
2d:ce:81:1c:78:17:40:c7:3c:c2:34:a5:78:75:7f:
33:0a:1a:39:30:6b:63:1a:10:06:6f:c8:db:c3:e2:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:05:6A:22:12:C7:FB:41:66:69:ED:17:20:1F:7B:75:09:F4:38
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:00:1a:4d:9d:dc:be:1c:cb:21:0d:b1:6a:77:f5:db:51:bf:
e6:7b:59:a6:60:c3:0e:20:e2:3e:74:11:20:73:53:1a:b4:f0:
f1:a7:0f:14:0f:b5:07:12:07:62:23:f4:82:c4:50:25:ce:16:
0b:80:2c:c0:e4:59:6d:ed:7e:25:41:74:a3:b6:ff:dd:1c:74:
ba:11:c8:ad:9d:b9:64:f1:79:1b:ad:22:74:e1:5c:3b:f6:56:
56:39:99:13:5f:93:17:38:4f:20:5c:01:56:90:ad:ae:75:db:
bc:08:6d:b4:9f:9d:7b:db:fb:2a:17:dc:77:ba:46:ca:b0:ea:
e9:9b:c6:a1:a8:fc:8c:87:fe:9a:4c:d7:14:ed:60:10:b4:f1:
b7:46:ce:f9:47:6c:c6:9c:a8:94:14:cd:0a:0b:b4:39:b3:2a:
bc:e4:6c:97:ba:fa:64:89:3d:42:f7:39:24:a5:f4:d9:1d:cb:
7f:e1:88:aa:c1:19:2d:d8:8b:ae:8e:3d:02:b9:37:3e:05:54:
1f:c5:53:42:03:80:77:bc:64:82:e7:aa:aa:88:21:9c:36:2e:
1c:25:13:86:69:38:5f:07:20:6a:c0:a1:2d:af:71:eb:c4:bf:
67:4d:14:d9:e9:b5:f7:f0:6a:88:fd:57:dc:bf:bd:0d:94:29:
e1:04:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:44:44 2025 by rpki-client