Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: scKRYFGVLxgkT84x9j3E9pdm2Q5aixSR/77K1zHGABM=
Subject key identifier: 64:C7:5F:6B:93:30:16:C5:DC:62:F2:1B:F0:25:8F:DD:E3:A6:AE:40
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0197801F8E65DBE1611C54F777EDCC6AA3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0F01
Signing time: Tue 17 Jun 2025 23:00:41 +0000
Manifest this update: Tue 17 Jun 2025 23:00:41 +0000
Manifest next update: Wed 18 Jun 2025 23:00:41 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: mguM7kDurPwHNGjsCs6eHOXCzUHW7ftzEdlFbC9Lne0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:8e:65:db:e1:61:1c:54:f7:77:ed:cc:6a:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jun 17 23:00:41 2025 GMT
Not After : Jun 18 23:00:41 2025 GMT
Subject: CN=64c75f6b933016c5dc62f21bf0258fdde3a6ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:2a:5e:ec:45:b6:0d:d5:0d:a1:75:b5:90:
ec:4a:45:45:cb:90:bb:d5:b1:e4:51:2c:87:14:e2:
cc:ff:8e:68:f5:5d:94:29:f5:73:5f:50:c2:0f:db:
f0:28:cf:10:12:e4:91:94:d6:52:38:8e:e2:b7:1e:
26:79:fa:a6:cc:0c:00:20:21:6e:b9:57:d5:da:c2:
d0:39:40:62:49:cd:07:18:ce:b2:66:67:1f:60:2e:
93:a6:89:21:be:82:13:f2:c5:10:66:a2:37:ff:9e:
67:1e:3f:39:ef:99:ad:71:b0:70:36:64:20:95:61:
19:b7:3e:45:ab:05:63:89:d3:8b:02:00:00:18:81:
dc:1f:6f:70:26:9b:a0:e0:dc:1e:51:50:c4:53:1e:
c0:52:0b:26:54:e4:1c:ff:e6:88:3b:07:66:ff:2e:
ed:b9:d6:c9:34:2c:4c:ee:44:0b:12:e4:e0:52:76:
0d:24:7a:ad:e1:95:21:5c:f4:a6:b6:f6:d6:92:c5:
08:e7:35:bf:46:f1:6f:71:97:6b:41:9e:74:38:14:
79:e5:c4:76:ee:ef:a0:a5:f4:b4:5c:6d:aa:20:0d:
90:77:e8:a0:83:0a:07:47:15:14:1f:e9:84:ad:89:
29:06:0c:30:0d:16:37:b2:b9:98:40:c7:c0:b8:a4:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:5F:6B:93:30:16:C5:DC:62:F2:1B:F0:25:8F:DD:E3:A6:AE:40
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:33:7b:ac:f7:14:e4:a6:1c:61:7d:43:4f:b6:06:f1:19:52:
1d:68:96:e4:2a:80:0e:57:fc:93:91:f8:bd:cf:01:77:28:e6:
5a:89:0a:b1:c3:eb:89:3b:93:e3:ab:59:c5:f8:4e:f6:3d:c3:
ac:1d:de:ff:08:a3:bc:48:bd:a0:c1:4e:75:e6:be:f5:40:ac:
37:6a:a9:3e:c3:74:1a:65:ca:2b:73:e2:91:e8:32:e9:79:2b:
d5:81:7f:c3:fe:37:10:8a:a1:07:8b:83:46:d3:80:ba:34:0a:
05:3b:c4:3e:73:bc:47:b6:f9:3c:6f:07:b6:65:f1:f7:1a:a5:
47:b7:fb:bb:e0:72:ce:6b:fa:d1:9a:6c:88:86:0c:bf:7b:63:
2c:c5:9c:80:f8:c3:77:a6:d3:8c:8d:76:df:c5:03:ad:1a:52:
0d:59:2f:e7:f0:69:03:2c:60:73:d3:b0:62:3d:3e:c0:b2:a5:
36:7c:bd:7e:db:63:a0:cb:c3:39:7e:95:cc:cd:8b:aa:84:a3:
43:4b:61:96:08:be:ae:3f:1f:8e:b8:c0:6d:cb:5c:25:57:2f:
80:e3:36:4d:44:11:03:bc:00:e9:3f:37:48:3c:7f:39:b8:33:
0e:5e:3a:d1:5b:94:f2:80:c3:7a:a1:bb:94:6c:ed:2b:6e:31:
ee:53:43:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAH45l2+FhHFT3d+3MaqPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjUwNjE3MjMwMDQxWhcNMjUwNjE4MjMwMDQxWjAzMTEwLwYDVQQD
Eyg2NGM3NWY2YjkzMzAxNmM1ZGM2MmYyMWJmMDI1OGZkZGUzYTZhZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03oqXuxFtg3VDaF1tZDsSkVFy5C7
1bHkUSyHFOLM/45o9V2UKfVzX1DCD9vwKM8QEuSRlNZSOI7itx4mefqmzAwAICFu
uVfV2sLQOUBiSc0HGM6yZmcfYC6TpokhvoIT8sUQZqI3/55nHj8575mtcbBwNmQg
lWEZtz5FqwVjidOLAgAAGIHcH29wJpug4NweUVDEUx7AUgsmVOQc/+aIOwdm/y7t
udbJNCxM7kQLEuTgUnYNJHqt4ZUhXPSmtvbWksUI5zW/RvFvcZdrQZ50OBR55cR2
7u+gpfS0XG2qIA2Qd+iggwoHRxUUH+mErYkpBgwwDRY3srmYQMfAuKQstwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTHX2uTMBbF3GLyG/Alj93jpq5AMB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTN7rPcU
5KYcYX1DT7YG8RlSHWiW5CqADlf8k5H4vc8BdyjmWokKscPriTuT46tZxfhO9j3D
rB3e/wijvEi9oMFOdea+9UCsN2qpPsN0GmXKK3Pikegy6Xkr1YF/w/43EIqhB4uD
RtOAujQKBTvEPnO8R7b5PG8HtmXx9xqlR7f7u+Byzmv60ZpsiIYMv3tjLMWcgPjD
d6bTjI1238UDrRpSDVkv5/BpAyxgc9OwYj0+wLKlNny9fttjoMvDOX6VzM2LqoSj
Q0thlgi+rj8fjrjAbctcJVcvgOM2TUQRA7wA6T83SDx/ObgzDl460VuU8oDDeqG7
lGztK24x7lNDmw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 07:45:59 2025 by rpki-client