Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: hdp4P8lxyO53XNtBfgtNr45mPZRR4H6i4YI1VxEoL3g=
Subject key identifier: 88:D1:45:1C:BB:F5:56:99:A7:3E:D1:A8:CA:32:2C:5B:D2:53:EC:C6
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 01976F2C0784C2D9ECED6D3C82B6AF375852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 12AA
Signing time: Sat 14 Jun 2025 16:00:45 +0000
Manifest this update: Sat 14 Jun 2025 16:00:45 +0000
Manifest next update: Sun 15 Jun 2025 16:00:45 +0000
Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: jipJBFxx0If5l+94VvT3CiO9CMy+JWn2ljdRrL6Y0DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:07:84:c2:d9:ec:ed:6d:3c:82:b6:af:37:58:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jun 14 16:00:45 2025 GMT
Not After : Jun 15 16:00:45 2025 GMT
Subject: CN=88d1451cbbf55699a73ed1a8ca322c5bd253ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:33:fc:fb:06:3f:b7:e5:76:aa:43:64:d9:
ed:5d:33:59:06:eb:8b:66:9b:10:d8:0e:38:c0:00:
0c:01:96:88:6f:b2:e6:46:c4:7e:65:03:31:35:ae:
2b:10:ad:9e:b9:37:f6:b1:e6:f7:13:5e:b2:3e:94:
40:51:cf:42:24:87:c1:ba:53:86:26:f7:4a:a5:a8:
e3:46:02:92:97:37:3f:60:e8:44:9b:da:40:6c:a5:
2c:b6:2e:3e:77:9a:9a:31:52:db:b7:da:62:ea:fe:
5d:07:f7:25:9c:14:bc:ea:8f:58:5b:39:83:29:94:
94:03:4b:51:54:9b:6a:a3:d5:96:21:e1:74:66:65:
3d:92:55:2b:40:d9:a1:7d:dc:99:bf:20:a0:41:11:
b9:7c:74:1c:53:3c:e1:e4:cb:06:98:0f:a9:aa:1a:
bb:35:65:7e:fd:83:f7:e7:52:ae:b0:a2:48:66:9c:
58:bc:93:03:5a:ad:d0:53:25:d3:e0:72:fe:24:d2:
8f:4e:81:5a:f1:ed:e6:5c:be:1f:43:22:e5:6e:3a:
93:f0:93:f5:7c:60:83:a9:21:94:da:64:95:c8:54:
53:09:35:b8:dd:59:6d:05:97:05:f6:12:ab:ac:b3:
e4:e2:37:c7:4c:33:e5:b6:25:48:2d:cd:f1:c9:e2:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:45:1C:BB:F5:56:99:A7:3E:D1:A8:CA:32:2C:5B:D2:53:EC:C6
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5b:35:26:7c:9e:8a:f6:88:1f:8e:63:02:15:80:28:ec:35:
82:53:e6:0e:54:01:8b:f1:af:08:94:73:df:20:f3:84:36:96:
dd:88:37:f7:09:05:0b:68:21:6f:68:de:8c:51:4d:ff:1c:1f:
12:d6:4b:24:03:ec:00:bb:67:87:07:ae:b6:4b:05:9f:ee:69:
ed:8b:2f:2d:7c:e7:65:d3:a7:9a:fc:89:ee:89:61:ec:7a:b2:
13:51:e1:9f:fd:76:23:a0:42:bd:19:3e:8e:9f:92:c5:a0:a9:
53:3f:91:a9:ca:9c:39:31:de:8f:4f:63:96:6e:2d:a0:fd:29:
52:59:ab:56:c0:47:d1:2a:70:b1:61:5b:63:1e:ba:58:43:2e:
a6:18:42:66:89:82:c4:85:96:38:42:b8:4c:66:c4:74:85:c4:
85:fa:ca:ce:65:59:e4:eb:55:c3:65:21:dd:06:b2:c9:01:61:
56:5d:02:a6:c7:3f:00:b7:ec:f4:11:b2:9a:dd:83:1b:80:7c:
d4:90:f9:06:c3:fa:c2:bc:eb:14:51:32:12:ff:3b:e3:ed:62:
45:9f:20:0d:de:c5:ea:a8:16:e3:b7:03:2e:16:eb:b5:31:f5:
df:3d:3e:a8:f7:0a:82:1e:51:07:34:a0:9f:34:f7:d3:bf:6d:
08:57:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:30 2025 by rpki-client