Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File: ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier: 5AeZ5Sv/+Dj9Wywm8C6sYFyuqIjoHWlc5reOZ9/lLaY=
Subject key identifier: DB:AD:40:BE:0F:92:09:AF:3E:8C:96:68:FD:F7:48:EE:21:98:6E:B4
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 019A4EF47ECE5A6765153B770949E19521A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number: 0918
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: QXeLRGgnCB4826ZgwoUsBpRtbvYOUQCXx+TagzHpUdA=)
3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7e:ce:5a:67:65:15:3b:77:09:49:e1:95:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=dbad40be0f9209af3e8c9668fdf748ee21986eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:ea:3a:fa:0e:ab:98:c9:79:ac:55:d6:25:
75:df:83:49:7d:7d:5c:46:18:0e:4e:80:df:96:73:
95:af:da:5d:da:39:17:36:46:02:69:4d:82:58:fe:
88:c6:df:51:09:1c:d0:fa:8a:e6:b1:d5:15:d7:9c:
ef:33:79:98:70:76:a1:fc:fd:6c:34:1f:13:47:7d:
c2:b2:5a:63:4a:fb:90:d8:8e:ae:60:73:96:83:d1:
2c:00:9a:08:3c:5f:3b:23:5c:e7:ef:03:79:0a:0f:
66:81:18:0b:53:43:ee:f3:e0:f5:f2:75:06:6f:91:
38:3f:8d:d1:f2:f4:ec:28:0a:fe:e0:d6:91:9b:43:
e6:a8:be:36:e0:7a:7d:a1:c0:82:88:00:4c:d6:c1:
dc:08:de:4a:e7:38:1f:4e:f0:02:56:ca:63:6e:f8:
0e:85:97:a1:29:c4:3c:81:17:95:dd:c6:46:53:e5:
f0:95:7f:8c:4f:b4:5a:2a:d1:58:de:74:e7:ad:cb:
e4:33:16:39:d0:03:8a:49:44:f5:22:09:5d:87:de:
bd:a3:67:0a:91:c3:9d:60:a2:c2:39:84:d0:ae:b0:
dd:92:62:13:f8:19:bd:13:8c:c0:da:98:e3:2d:31:
bb:f0:86:06:f7:53:ef:13:6b:c3:b7:0b:9f:58:57:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:40:BE:0F:92:09:AF:3E:8C:96:68:FD:F7:48:EE:21:98:6E:B4
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:00:84:45:8d:06:b1:9e:e5:5d:5d:2a:34:8f:07:b5:d1:
f3:2d:f1:c7:43:a5:d0:e5:42:b5:b8:e2:47:36:83:d6:2f:bd:
a9:d8:98:a3:06:64:32:72:3d:cd:ce:bc:6c:e9:3a:0a:29:96:
ee:c9:be:9d:99:53:64:d2:0a:bc:2c:8a:8c:a8:a6:e4:27:ca:
3a:1b:dd:a3:80:07:2c:a5:82:ed:18:60:e0:5d:95:5f:1f:49:
f3:32:6a:f2:5c:56:5a:18:97:1c:98:ff:83:6c:3a:6d:91:04:
78:57:6f:f1:67:ce:47:af:b8:a4:87:fd:fd:39:63:52:a6:5d:
c2:22:0d:77:68:e6:fb:ea:52:08:5f:d9:87:63:f6:51:0b:e4:
0d:37:9d:18:08:27:6f:f3:9a:5b:9d:46:bb:d7:67:29:e5:0d:
ad:af:f4:d6:bd:c6:cc:6b:6c:53:3d:4f:ac:8b:d9:d1:82:bf:
c2:8d:5d:cf:e0:12:c3:9d:26:90:5e:24:88:11:37:6a:72:aa:
35:2f:fc:f9:a8:8c:3b:77:57:5a:f1:34:e5:fe:3e:1e:6a:73:
5b:ad:05:f7:3d:ec:44:ee:94:a1:01:4c:63:3f:ab:15:dd:d7:
da:55:d1:df:29:74:95:6b:f5:70:e3:e2:ad:2d:5c:fc:93:87:
c1:4c:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:22 2025 by rpki-client