Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: prRTcCwu6kvpi1HR4iIAA5ijQUSO5qjPvXS6dWrN/88=
Subject key identifier: 4B:E9:65:0D:68:AD:28:27:98:7E:4C:77:CB:66:CD:47:E2:EF:89:2B
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 01987B9D17ED6F6C824F9FCC347AB2E56192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 15AC
Signing time: Tue 05 Aug 2025 19:02:29 +0000
Manifest this update: Tue 05 Aug 2025 19:02:29 +0000
Manifest next update: Wed 06 Aug 2025 19:02:29 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: n9g2rtaxm232QZ+kZORfLCc6yO23A4xRbN7VQvm0XNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:17:ed:6f:6c:82:4f:9f:cc:34:7a:b2:e5:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Aug 5 19:02:29 2025 GMT
Not After : Aug 6 19:02:29 2025 GMT
Subject: CN=4be9650d68ad2827987e4c77cb66cd47e2ef892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:ed:fc:9c:60:7b:8b:a8:8c:79:48:12:03:
d0:44:f8:b7:a1:e4:6d:af:30:26:aa:65:24:36:c4:
53:d3:0e:e5:9f:72:a8:96:4a:de:e4:c6:ec:94:f6:
51:3b:d0:de:e6:d3:da:fb:f8:35:d9:5b:c9:50:19:
2a:00:c4:54:34:28:d5:db:4d:1f:4e:94:89:55:da:
58:fb:80:2e:4b:c3:d4:17:92:ee:7b:0f:f1:00:6b:
5e:48:89:a2:f5:3a:a5:89:47:43:8b:9e:8d:e7:42:
e8:7c:d9:77:50:ae:41:74:fb:23:ba:12:35:a2:39:
a9:f2:bc:7a:b8:9e:5e:a1:25:41:c4:c8:fa:a6:68:
52:6b:49:18:d7:9a:6a:48:0a:0e:eb:e9:73:b3:c7:
0f:cd:07:62:f3:eb:45:e1:6f:3e:84:f5:e3:67:0f:
53:fa:b2:b3:dc:6c:0f:48:36:ee:81:b3:ae:af:8f:
33:cf:17:64:5d:eb:de:ad:a9:c9:05:30:9d:55:71:
5b:ff:f4:c5:90:48:9b:d4:81:90:af:38:03:8a:ba:
a7:2d:f9:01:39:1b:46:70:cf:ee:d3:c1:1b:87:58:
cd:e5:b9:42:f2:8f:99:2c:19:92:e1:b5:ed:15:a6:
37:39:8c:31:84:4e:28:fa:7f:13:2c:b2:b7:4e:0b:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:65:0D:68:AD:28:27:98:7E:4C:77:CB:66:CD:47:E2:EF:89:2B
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:cb:73:11:21:6d:9a:c6:c9:38:f6:2b:a0:0d:75:ad:ad:
54:d6:fd:9a:39:36:d5:21:34:e7:83:9f:69:64:8f:ea:f4:fb:
fb:86:9a:f3:83:03:ac:7c:d3:67:8e:8b:75:53:41:45:ea:6e:
33:4a:c7:50:98:6b:00:de:9c:7b:d9:e0:eb:38:4a:f1:c2:63:
b8:9e:0b:4d:33:92:8a:12:b1:38:e6:d1:5c:9c:df:95:6d:17:
1d:90:3b:5c:f2:31:5a:3c:3f:93:d0:cb:e3:6e:88:d5:b7:d0:
76:66:d3:3d:11:3e:59:ed:ce:d2:dc:ae:3a:6b:ae:ef:be:98:
43:1f:0b:16:36:65:27:c9:31:f8:35:9b:0a:a4:81:55:d6:e2:
b4:1b:3b:98:30:2c:3f:5f:c9:06:be:ff:65:4f:b9:cd:42:c2:
79:88:cb:7f:2e:09:9d:ec:f1:9b:a6:3e:c2:a8:44:b8:4d:e6:
40:5f:99:0a:f7:24:a6:7f:eb:0d:94:e3:43:bb:ad:f9:5e:6a:
09:e4:7d:a5:94:d6:f1:ff:4c:e7:1b:b8:3c:a5:33:be:c9:2a:
f8:3b:ab:3f:61:d0:6b:f7:ef:06:74:67:51:57:a4:85:ef:a5:
48:44:b6:c8:f5:36:94:25:df:97:cf:39:d3:e1:02:9c:1b:53:
e9:79:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:22 2025 by rpki-client