Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: S8sXe6k67IURxBD7EZkEpcefZIww6hMKGgjgEljVlYM=
Subject key identifier: 74:2F:62:A9:E6:C9:02:26:1D:54:4F:61:3C:62:7D:68:9C:B3:DB:52
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019A4E86680B230553FD8210327305AA98C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 1075
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: P4grkxphOQ5pfrI5lNbv27cRkqHANXY9w2sxMblBnRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:68:0b:23:05:53:fd:82:10:32:73:05:aa:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=742f62a9e6c902261d544f613c627d689cb3db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:1d:e6:90:79:92:bf:e1:f8:c4:20:8b:fc:
09:ee:da:97:1c:59:a3:0d:ed:c2:37:f9:04:b3:bd:
bf:b1:db:3d:cb:ff:5a:79:08:59:3b:da:9e:d4:45:
de:9b:77:c2:d5:c0:fa:8d:7b:ec:9b:e1:03:2f:23:
13:4f:0a:5b:f1:3b:b9:a7:bb:8f:8a:90:45:8b:59:
3b:35:83:36:74:bd:06:3b:7c:ec:03:cb:6d:1d:4a:
a1:28:88:f8:78:03:69:a3:b4:a7:c5:08:60:1d:9a:
0e:06:e0:e4:f9:ba:05:d6:6b:8a:76:ce:62:3e:a9:
4f:ad:19:cc:1c:8b:2f:89:33:c6:93:87:61:ce:d9:
46:60:9d:37:4e:f5:59:b7:0c:8d:8e:7c:fa:db:56:
ea:03:c0:22:fb:40:eb:b3:95:f3:15:98:b1:02:f6:
dc:73:1c:1a:51:97:d3:ac:ed:f1:f8:07:b5:58:be:
32:de:6a:7d:7c:18:1c:57:1d:07:b2:e9:a0:9a:a9:
0b:6e:6e:c2:d7:7f:8b:16:eb:8e:31:16:81:bf:c7:
b5:5d:e4:c6:b3:3d:b4:3b:84:61:7f:12:84:50:ff:
fe:d4:64:87:9e:8c:ef:11:97:24:3b:e4:58:c1:bc:
02:b8:3a:db:bd:01:c6:d2:f6:65:59:f6:44:0c:24:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:62:A9:E6:C9:02:26:1D:54:4F:61:3C:62:7D:68:9C:B3:DB:52
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:17:6a:df:c2:9d:51:7c:ae:bf:b9:73:ed:7d:b3:0d:99:
52:8d:56:4f:64:81:d6:80:4e:9c:fd:dd:af:94:f5:31:a0:ea:
71:08:86:32:30:ee:6f:27:4e:2b:32:af:2e:2f:ca:f2:b5:45:
fd:f4:b7:c9:5c:34:1b:6a:82:0d:46:43:0b:9d:50:cc:d3:a3:
77:74:3a:43:05:cb:a3:26:62:e1:46:1b:64:72:81:a2:08:1f:
2f:01:2a:5d:49:8a:2a:cb:15:7b:ff:7e:eb:8d:49:7a:a3:5f:
64:cf:8e:17:54:72:60:d3:67:34:0c:51:ec:de:c6:7f:28:6f:
3d:07:52:cb:10:bf:3a:a1:bd:da:06:00:64:b8:5c:7c:ae:67:
70:16:d7:7b:52:97:70:a9:5e:74:0c:9f:d7:1f:77:ef:ac:21:
76:b1:01:27:0a:87:71:49:c8:f7:38:63:84:ca:e3:4e:d5:97:
3c:c9:7f:72:19:12:e4:52:6d:40:ea:c1:ab:67:aa:ff:97:db:
a1:59:89:5f:ba:4e:74:22:3b:dd:bc:33:dd:f9:2e:db:3f:42:
7f:e2:4f:f1:8e:73:2d:43:8d:03:66:62:5a:0b:e4:44:81:c3:
9e:17:4d:06:13:e0:f8:f3:7c:e8:dd:c0:fa:fd:e5:15:b5:7f:
69:41:cb:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhmgLIwVT/YIQMnMFqpjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjUxMTA0MTEwMDIyWhcNMjUxMTA1MTEwMDIyWjAzMTEwLwYDVQQD
Eyg3NDJmNjJhOWU2YzkwMjI2MWQ1NDRmNjEzYzYyN2Q2ODljYjNkYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk90d5pB5kr/h+MQgi/wJ7tqXHFmj
De3CN/kEs72/sds9y/9aeQhZO9qe1EXem3fC1cD6jXvsm+EDLyMTTwpb8Tu5p7uP
ipBFi1k7NYM2dL0GO3zsA8ttHUqhKIj4eANpo7SnxQhgHZoOBuDk+boF1muKds5i
PqlPrRnMHIsviTPGk4dhztlGYJ03TvVZtwyNjnz621bqA8Ai+0Drs5XzFZixAvbc
cxwaUZfTrO3x+Ae1WL4y3mp9fBgcVx0HsumgmqkLbm7C13+LFuuOMRaBv8e1XeTG
sz20O4RhfxKEUP/+1GSHnozvEZckO+RYwbwCuDrbvQHG0vZlWfZEDCToDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQvYqnmyQImHVRPYTxifWics9tSMB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzQXat/C
nVF8rr+5c+19sw2ZUo1WT2SB1oBOnP3dr5T1MaDqcQiGMjDubydOKzKvLi/K8rVF
/fS3yVw0G2qCDUZDC51QzNOjd3Q6QwXLoyZi4UYbZHKBoggfLwEqXUmKKssVe/9+
641JeqNfZM+OF1RyYNNnNAxR7N7GfyhvPQdSyxC/OqG92gYAZLhcfK5ncBbXe1KX
cKledAyf1x9376whdrEBJwqHcUnI9zhjhMrjTtWXPMl/chkS5FJtQOrBq2eq/5fb
oVmJX7pOdCI73bwz3fku2z9Cf+JP8Y5zLUONA2ZiWgvkRIHDnhdNBhPg+PN86N3A
+v3lFbV/aUHLQw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client