Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier: sl9Jki0zrl/wqUIeQvHdArUC5OHw8TWq+LYINY+hLZI=
Subject key identifier: A7:9C:1E:BD:26:3E:20:51:4C:D9:8A:20:28:0F:B5:81:2D:38:54:98
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial: 019A4EF3F93FBE9D9310565BBABE60781B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number: 0697
Signing time: Tue 04 Nov 2025 13:00:03 +0000
Manifest this update: Tue 04 Nov 2025 13:00:03 +0000
Manifest next update: Wed 05 Nov 2025 13:00:03 +0000
Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=)
2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: +dkfvAxLXqZNSDLdcIDIbme5s56sLqW8P8w9RAvMgRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:f9:3f:be:9d:93:10:56:5b:ba:be:60:78:1b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Validity
Not Before: Nov 4 13:00:03 2025 GMT
Not After : Nov 5 13:00:03 2025 GMT
Subject: CN=a79c1ebd263e20514cd98a20280fb5812d385498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:9d:10:72:2b:fb:77:2b:c0:d3:34:02:cc:
03:b1:d3:30:9c:3a:7c:85:71:a2:0b:66:8a:98:88:
7b:57:9b:8a:31:df:5a:53:4c:1f:48:c5:6b:f9:2d:
bd:ea:cc:e1:97:c4:10:da:15:d6:10:a7:bb:b9:b4:
f4:67:f4:c4:ef:4c:0b:0e:83:30:e2:21:92:f6:ba:
7f:7a:9a:9e:2e:e4:39:c9:2c:38:1b:bd:be:4b:1a:
79:ab:74:ad:93:ea:13:7f:d5:40:0a:0b:88:47:88:
20:44:80:13:dd:de:9a:e6:11:7b:bb:bb:e0:ac:87:
8f:ce:51:d2:33:76:d1:6b:0d:97:7c:21:1f:fa:22:
8d:8f:ce:ab:0b:ff:5d:aa:46:01:bd:4b:1b:c1:30:
c2:53:a9:c3:df:6a:d3:19:6d:0b:26:1c:e2:94:de:
f9:ac:4b:7e:69:95:a0:3a:55:45:bf:38:21:7b:37:
83:c2:90:30:b1:9b:1f:91:a4:b0:0b:8c:7e:c2:76:
26:04:f7:f8:83:f0:d5:62:35:59:98:12:57:03:a6:
ac:57:1a:5c:56:45:a7:65:64:2b:fc:c3:ea:d8:ef:
a5:f2:d3:17:7b:c0:e6:6f:68:e6:99:bc:e1:7e:62:
7b:70:17:ca:22:75:77:a0:7b:b4:35:6a:de:9f:b0:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:1E:BD:26:3E:20:51:4C:D9:8A:20:28:0F:B5:81:2D:38:54:98
X509v3 Authority Key Identifier:
keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:be:31:43:ed:dd:ae:d1:47:22:28:72:d7:2f:62:a0:ba:
9c:b0:e1:14:52:d6:27:44:e3:52:9e:ef:46:3a:1c:29:38:8a:
f4:22:b7:84:87:84:86:fc:2c:89:c6:7b:39:61:a0:e1:77:83:
62:fd:e3:96:00:36:77:51:1c:3e:a5:e6:5a:ba:04:79:e1:cb:
a6:ff:2c:f6:49:2f:40:23:d2:67:42:13:85:03:ad:8f:18:27:
95:f9:d9:15:65:69:a2:23:d4:d0:63:4f:96:1a:ce:98:e7:03:
c1:3a:ab:51:47:6d:ab:85:1a:9b:7e:a7:f8:9f:50:99:90:46:
1a:ec:00:ad:7b:76:fd:0f:e9:b8:ca:86:e7:99:fa:63:32:58:
3a:23:58:fa:ce:9f:3c:d5:d1:d0:c7:ca:c6:53:cb:e5:06:83:
a2:2d:56:8c:82:45:12:30:80:dc:fa:94:3c:c7:53:4e:41:3d:
c0:c8:d1:da:83:15:e7:de:82:eb:f0:96:3a:60:31:60:10:2c:
e7:2b:c3:f8:c8:f4:f7:7f:4a:e3:83:93:8b:e3:04:64:55:da:
13:23:02:64:43:d3:30:9c:68:e8:de:80:fb:2c:8f:8c:81:04:
12:11:d2:66:0e:cc:b5:31:77:90:93:ba:6a:17:81:54:6c:5c:
9a:ab:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:58 2025 by rpki-client