Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: U8Qpr5rULUbNDmTEYbWuSnchCEUvKil+WizVM+SWHTM=
Subject key identifier: 7E:43:5A:17:2D:D5:10:D7:4A:7F:8B:FA:14:74:D8:61:6E:8C:07:EB
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 01987418C4A049B47AC3EF43700E2FBEE2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: A5
Signing time: Mon 04 Aug 2025 08:00:36 +0000
Manifest this update: Mon 04 Aug 2025 08:00:36 +0000
Manifest next update: Tue 05 Aug 2025 08:00:36 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: w+gPxB+BrjvdyDq8N4PegGexKOtBsNFed5LqZgM6rrI=)
2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c4:a0:49:b4:7a:c3:ef:43:70:0e:2f:be:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Aug 4 08:00:36 2025 GMT
Not After : Aug 5 08:00:36 2025 GMT
Subject: CN=7e435a172dd510d74a7f8bfa1474d8616e8c07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:e8:02:b5:fa:b1:99:52:9e:8b:23:af:6c:
74:db:8f:1e:ab:33:bb:b1:60:b7:b3:75:81:9a:fc:
a5:9e:f2:ce:1f:e1:ac:f4:00:e7:7e:b6:23:65:a3:
73:d2:39:58:ed:0e:b5:e0:0b:f2:3d:ab:0e:0b:34:
9a:fa:98:6f:9b:41:8e:ed:bc:6d:a9:db:2c:ca:67:
29:9a:c4:53:00:b3:da:1f:69:0a:86:ad:7d:ee:01:
d4:fd:1b:7c:c9:76:43:8e:cc:c5:f4:ee:53:e3:0f:
6a:2e:b7:0e:42:e6:03:57:46:a8:41:95:8d:c1:8a:
0c:c8:bf:00:cd:47:f2:de:9d:8f:ba:9e:4c:d1:73:
20:2f:af:39:71:f0:d7:07:ee:16:0e:7d:d3:d1:50:
b7:dd:f7:64:d7:84:fe:6f:17:ac:a4:6c:62:b3:53:
f0:46:31:a6:8b:58:d7:cb:21:63:0b:ef:5c:3b:e2:
2d:d6:d5:f5:11:b5:3a:e4:09:bc:48:2c:f5:93:eb:
af:aa:b7:16:c5:8b:13:1f:0b:e5:43:f7:2d:46:8b:
c4:33:b2:f0:89:65:75:06:40:84:c5:23:b3:2b:4e:
0b:cc:f0:e9:b7:58:1e:89:cb:e7:82:e4:94:6d:13:
23:62:d5:87:1a:d5:6b:69:58:10:3f:76:7c:bb:d6:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:5A:17:2D:D5:10:D7:4A:7F:8B:FA:14:74:D8:61:6E:8C:07:EB
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:78:c7:43:3e:66:b2:b2:8b:17:79:65:15:be:54:42:0f:85:
e1:4a:66:a7:bc:ff:68:4a:d3:6a:77:36:56:c8:4d:19:5d:d6:
fe:ea:42:28:92:22:4f:76:4e:b6:17:27:69:8e:da:4f:28:60:
08:3e:fe:25:84:25:b6:51:2e:74:bf:f5:54:29:c7:7f:02:aa:
12:81:51:21:14:e8:00:0a:50:63:43:b9:a4:6d:d8:ef:03:bf:
89:f8:9c:97:7e:98:4e:c3:8d:1a:02:3b:b0:e9:b3:29:d3:dc:
ad:37:05:86:17:b1:61:21:58:ae:64:ac:9b:2f:77:c1:3c:1e:
16:09:99:84:df:3f:f7:9f:d0:4a:49:1a:f2:19:e8:66:c3:80:
9a:c7:85:a2:90:7b:c0:63:76:cb:e1:06:36:a3:10:e6:f5:e1:
74:31:9c:6a:1a:16:85:4e:3f:b6:86:88:6f:73:25:2d:c1:b0:
e6:4a:1d:89:60:71:a7:24:2e:4a:6d:f2:97:dd:3d:1a:dc:63:
87:2f:f0:41:40:27:91:16:6b:ad:15:c3:7d:58:74:36:2d:86:
7a:31:11:e0:34:52:3c:95:2f:18:f7:fe:50:6b:c1:fc:1c:84:
c4:9f:5a:fa:0e:42:99:ee:ff:40:67:79:45:f7:9a:e6:bc:5e:
39:70:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:03 2025 by rpki-client