Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: 4nLhzSDLAhaLzyswc6/nqJzhFxsOIDtJWxxpyUlaTck=
Subject key identifier: 80:82:00:0F:5C:AC:04:04:D8:F6:4F:43:85:90:13:FB:35:FE:9A:03
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 019A54BFA14BC5A0B33341DD652CED4C5C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 142A
Signing time: Wed 05 Nov 2025 16:00:36 +0000
Manifest this update: Wed 05 Nov 2025 16:00:36 +0000
Manifest next update: Thu 06 Nov 2025 16:00:36 +0000
Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: ZHDFk++XE7EaLVyjgxwEr4fsOeAnQo4K6AkOzS4IQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:a1:4b:c5:a0:b3:33:41:dd:65:2c:ed:4c:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Nov 5 16:00:36 2025 GMT
Not After : Nov 6 16:00:36 2025 GMT
Subject: CN=8082000f5cac0404d8f64f43859013fb35fe9a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:d0:a0:f1:4b:33:40:44:fb:bd:be:de:45:
06:57:3c:28:51:4d:c7:fe:0f:a9:a6:d1:24:30:f1:
f4:25:27:5a:bf:91:d7:aa:3b:ea:1f:fa:6e:14:a8:
24:d0:5f:d2:6e:62:94:7d:1e:7d:95:14:cf:94:ee:
67:f1:38:93:7d:cb:c4:08:11:90:ee:e9:0c:ca:2f:
1d:36:fe:d3:ab:aa:b2:2d:00:2e:72:f5:6c:73:72:
e5:eb:b0:ab:d4:19:f3:91:04:15:31:c8:d2:56:9b:
8a:d8:c2:38:c1:18:23:e4:ed:86:db:6a:83:d8:2e:
46:c4:8f:f8:54:14:58:c2:80:0e:bc:77:fb:22:35:
6c:95:72:f8:ca:20:6c:4e:5c:9c:02:7f:91:11:9d:
00:27:86:2c:49:8c:37:eb:fc:3d:c3:58:5e:53:90:
4d:a7:11:24:45:88:13:23:0b:b6:d7:b4:7f:64:05:
15:f9:d1:70:f2:39:27:cb:6f:da:0f:22:91:16:a4:
07:8d:93:d9:51:c9:1b:b9:d3:99:6a:93:2e:72:ff:
c4:61:94:76:51:38:a0:db:34:16:19:91:e2:26:4d:
33:e8:ae:e9:10:47:68:da:7b:3d:12:02:75:71:b1:
a3:2b:b5:4e:51:73:87:58:82:70:45:ba:27:3e:80:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:00:0F:5C:AC:04:04:D8:F6:4F:43:85:90:13:FB:35:FE:9A:03
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b8:21:04:67:86:41:25:e2:30:12:f2:0b:8c:be:f3:f5:30:
49:ae:bf:c4:c0:2e:7a:f6:4d:a2:1c:ff:e4:49:68:d5:fb:08:
ec:89:04:66:db:86:00:ae:37:df:0a:4d:8a:4e:3b:fd:c3:f4:
63:b3:83:40:e9:50:61:cd:b5:00:6a:cd:9b:da:dd:17:a1:1d:
d1:e5:21:50:5f:3c:30:93:2c:d0:86:4d:6f:23:b7:8c:ab:9f:
ee:4f:cc:39:bd:19:78:2d:fa:cc:61:6f:cc:f0:1d:44:fb:7c:
2f:3c:51:95:b2:21:19:7b:63:c4:28:98:76:02:1d:60:b7:fb:
6b:9c:ba:48:f9:78:af:04:9b:ab:c0:f7:6c:5f:d1:3a:b4:59:
19:5c:72:c4:15:1b:46:51:36:7e:ac:6b:3e:cf:b2:8f:7f:30:
e7:58:02:a4:8e:11:a8:5d:89:61:68:20:97:a4:29:e3:b0:99:
7c:c8:f1:ad:92:41:b3:00:90:c3:97:8b:f5:92:f2:d2:25:74:
10:e2:1d:b2:2e:64:51:cb:1f:91:ae:ab:6b:bc:33:99:58:7b:
56:66:29:fc:52:ae:22:42:93:cc:04:b6:6a:73:84:dd:76:78:
2d:3b:0b:77:f4:41:51:e4:ab:fb:16:5e:07:d3:4e:93:ff:d3:
ae:de:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:46 2025 by rpki-client