
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier: 3AFb7kX2RCjwdDRdAHP/N9bfpMG3qAjDTgpkWTUw7UE=
Subject key identifier: 83:41:32:04:55:38:EA:E2:9F:29:D5:54:03:D8:47:52:88:B0:F8:03
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019A52D199294E6491507458266888E9B9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 07:00:59 +0000
Manifest this update: Wed 05 Nov 2025 07:00:59 +0000
Manifest next update: Thu 06 Nov 2025 07:00:59 +0000
Files and hashes: 1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=)
2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: yTNQzdpIkmtxjaNneJBMh2UiIeh7qniA0cPiJKQtzco=)
3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=)
4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=)
5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=)
6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=)
7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=)
8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=)
9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=)
10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:99:29:4e:64:91:50:74:58:26:68:88:e9:b9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Nov 5 07:00:59 2025 GMT
Not After : Nov 6 07:00:59 2025 GMT
Subject: CN=834132045538eae29f29d55403d8475288b0f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fd:4e:d3:1c:27:a8:2f:73:e6:38:16:22:3a:
13:91:ba:81:90:5a:2f:22:83:4c:93:dd:ed:29:c5:
fb:7b:2f:ff:57:74:8b:e3:99:36:f6:6c:62:6f:72:
90:15:58:96:9d:f5:b4:9e:46:f6:61:57:c4:f6:b5:
9e:af:ba:3e:a1:14:94:df:16:a1:96:2f:00:38:af:
9f:10:9f:f9:1c:c2:eb:ca:73:08:61:60:b6:ac:5c:
6d:fa:12:05:b5:e2:36:20:2d:f6:ed:55:5a:cf:ef:
c3:83:48:60:e9:b3:02:54:6f:ec:31:2e:92:3b:b7:
e1:88:b5:46:64:96:09:35:9a:0d:f6:08:70:d2:54:
05:20:4e:4c:2b:6d:8e:4e:1c:07:84:1e:46:8f:11:
55:62:4c:b4:60:b8:ab:72:32:89:93:98:40:ce:8e:
f2:7e:fb:2c:b9:42:4c:32:3e:da:8d:4c:6d:df:3b:
2b:b0:07:c1:cf:30:9c:30:68:de:a4:4f:0d:7a:2b:
36:9b:48:ce:27:cf:86:97:da:7e:68:f8:40:19:83:
e1:f3:26:21:b7:3e:c4:69:ef:28:d2:03:66:29:36:
c1:a6:50:71:3c:7a:cf:76:30:ec:cd:f0:53:a6:cc:
c6:21:db:50:46:7d:72:32:61:95:ea:3a:1b:e1:19:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:32:04:55:38:EA:E2:9F:29:D5:54:03:D8:47:52:88:B0:F8:03
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b5:c8:3c:27:26:7d:4d:e7:7f:29:75:55:b0:0b:a7:44:01:
68:fe:2a:3f:57:45:34:76:04:f5:ee:fd:7e:16:4f:4a:2e:be:
34:a0:39:cc:fd:7d:7c:59:4d:56:d1:8b:3c:b2:d5:e0:e0:a0:
44:66:47:b0:50:a9:df:06:26:14:3f:a5:4e:0b:7d:07:79:93:
d3:b7:29:43:b8:62:bd:70:b6:41:77:0e:c7:ed:5e:64:2b:ed:
43:21:76:7f:68:e0:50:33:da:7c:70:8e:ba:d1:67:76:98:3d:
28:47:d6:4d:d7:5d:33:2f:7e:f2:43:6d:9f:36:51:39:e2:13:
e2:b7:05:b4:1b:d4:7f:29:b6:66:57:34:4b:8e:da:2a:60:8a:
60:47:86:86:31:c5:0e:46:45:33:19:a8:56:2e:0c:8e:27:1e:
f2:1d:c2:dd:0e:bb:0e:33:9b:64:34:4b:8b:57:52:43:82:0b:
48:d2:ce:eb:e2:4a:0f:3d:c4:10:16:d7:e4:3d:75:91:52:9f:
bb:5c:a8:77:93:49:74:23:2c:76:3d:6d:0a:d2:59:f7:c8:5c:
e0:93:81:e4:64:80:e2:28:e4:a6:ac:b8:be:e9:82:75:ba:1b:
a9:13:99:14:c2:29:3f:65:59:57:fb:99:9b:2a:df:dd:82:db:
71:da:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:06 2025 by rpki-client