Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: D5E2CjjVCLyI8BtVT+51xIrURLCE+4L7qLVjVH3zeFA=
Subject key identifier: D7:A1:11:DE:FA:DD:0F:29:87:B1:53:74:C3:4A:B6:21:C1:EC:85:B4
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019A4FD0568C70E70F6FD2D7F3B99835416C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: 0156
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: yjtyxke41YY+J/i4TqKKxbE146D8/Vk3nDaG+yLyGHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:56:8c:70:e7:0f:6f:d2:d7:f3:b9:98:35:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=d7a111defadd0f2987b15374c34ab621c1ec85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:9a:93:21:da:41:c7:53:d6:3e:04:9b:d5:
6f:2d:4c:f4:a6:d9:6c:40:30:b7:f8:be:8a:55:12:
57:20:45:42:23:36:9d:d8:c7:2e:73:55:8f:3a:6e:
df:0b:e4:a6:11:6d:1a:0f:da:d2:f4:0d:6d:6d:71:
f6:a0:45:a5:0a:c8:8f:1e:e4:88:27:a8:c3:e4:db:
60:93:a3:73:13:a2:a5:4f:43:77:7c:17:1c:11:53:
45:8c:a5:a0:69:b0:52:0b:52:b6:66:b0:20:19:4e:
41:1d:00:de:53:16:54:15:4a:fb:bc:63:69:33:c6:
fb:e0:1d:e9:d6:e5:64:07:23:ac:57:ad:44:25:ef:
ef:3a:77:51:60:e7:98:2c:7b:b2:84:01:cb:2a:8e:
b8:51:96:75:a4:ef:c6:78:1e:a8:95:49:6a:8a:cb:
cf:52:4e:1d:a7:e3:6a:de:88:77:d8:83:fd:a7:6a:
3b:e5:ea:54:10:fc:f4:ff:e5:58:8a:cf:b2:7b:f7:
4b:73:62:c2:d0:d2:8c:1a:66:64:22:c2:23:c3:4d:
6b:c1:52:4b:16:1b:c8:af:8f:46:17:63:d9:91:1b:
46:61:fd:31:78:7a:5a:73:2d:56:d9:b5:70:47:f0:
fc:d3:44:f5:61:8f:58:ad:4a:6f:48:2c:6f:bd:35:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A1:11:DE:FA:DD:0F:29:87:B1:53:74:C3:4A:B6:21:C1:EC:85:B4
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7e:8b:76:d4:bc:61:3d:8a:75:e5:c9:9d:f3:6c:0e:ed:cc:
1a:cc:d2:7a:0c:92:5d:a7:11:1d:5b:1f:a1:64:18:1a:2c:f8:
d4:51:c3:c2:61:8e:7e:43:34:b8:9a:c2:10:53:a8:e9:f0:b0:
d6:3a:8f:50:91:86:f0:82:ee:9c:62:0d:9d:75:db:1a:1c:53:
a4:cc:81:3f:aa:50:f5:5a:e7:3d:26:3d:e6:6c:c0:a4:09:a2:
05:c4:09:9e:e7:8b:a7:00:e6:f5:11:a1:e0:41:65:9d:fc:3f:
0f:59:28:70:28:06:e9:24:14:64:89:05:41:98:ec:8d:62:cd:
57:f6:71:f0:ef:72:e0:be:7f:82:b8:c6:48:f4:cd:05:5c:ff:
f0:04:d1:fa:de:fe:68:e3:23:c2:95:c3:a0:8b:9a:a4:8d:02:
16:e3:00:b5:b5:af:3a:0a:0b:b8:ca:b9:a3:4c:c2:e6:d6:a4:
59:e5:5c:7e:ac:25:b5:05:0f:f3:8b:4f:fc:64:15:19:15:81:
14:ad:bb:e1:32:71:17:b4:2d:c4:4d:36:c2:ba:bf:13:78:d5:
9d:23:da:fd:28:42:0b:e0:27:57:e0:3a:bd:ca:d8:3f:8b:da:
6e:95:cb:bc:9d:6a:3c:66:18:07:8f:66:b8:5b:9a:65:78:ca:
db:30:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:25:58 2025 by rpki-client