Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: reBrc4feafuWXVQ5Cdib+IrlBnR29Qg3fS9r8Hk4y7M=
Subject key identifier: 90:23:44:6D:8A:AD:3A:8D:D8:71:5A:71:CD:32:B2:09:7F:32:FC:FE
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 0199FFC8BA86A4785CBE6424AC5456825251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: Of6PopGxV0TSH3PhicyvCswPWWdhr/82AgdZEef2Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ba:86:a4:78:5c:be:64:24:ac:54:56:82:52:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=9023446d8aad3a8dd8715a71cd32b2097f32fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:dd:d2:04:c2:95:39:29:81:c7:19:c3:6b:
74:10:e5:cc:99:f5:0d:f6:74:95:0f:51:02:75:2e:
7e:41:ea:62:2d:ca:43:a6:02:a5:aa:67:ea:4a:01:
e6:34:a2:9a:35:a2:02:d2:62:49:e0:e0:c7:b3:16:
21:f6:d4:53:df:bf:3a:4d:a3:61:34:91:65:79:1a:
0e:ef:a5:36:df:da:da:0f:99:5e:d6:85:5d:6f:4d:
41:7a:07:96:cc:18:d7:ff:92:07:af:db:fc:ff:36:
ad:89:1f:15:d8:f3:6e:1a:3b:cb:01:2f:ab:b6:d2:
99:be:a4:b5:2b:1b:ec:be:fb:ac:d8:ac:a0:59:66:
9a:43:52:11:c8:9b:c0:24:0b:fc:f0:fd:79:13:5c:
16:ce:ef:4a:e9:3f:78:88:ab:0f:95:9b:d0:3c:bd:
d2:c4:9b:45:8f:1b:e8:eb:66:68:d8:29:99:fa:b8:
71:15:93:34:35:60:3d:24:96:ab:73:29:22:66:53:
3a:4a:e8:3d:b2:11:82:6a:89:f4:95:b2:bd:d7:2b:
41:83:ce:59:42:17:b1:f7:2c:61:41:0a:e5:c2:f8:
ec:9f:b0:3a:2e:d9:8b:2a:59:89:0f:ca:32:66:83:
64:91:5a:b7:25:ad:41:a8:2d:7c:1d:0d:2c:d9:2c:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:44:6D:8A:AD:3A:8D:D8:71:5A:71:CD:32:B2:09:7F:32:FC:FE
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ef:c4:ce:09:86:a9:c0:53:62:60:f3:bb:2d:04:93:0a:1e:
0d:68:32:8f:66:01:64:86:56:0f:57:d9:d9:3e:d2:4b:5e:82:
d6:8d:85:f0:a4:95:d7:c1:c0:56:6d:3b:4e:0c:be:e7:db:e1:
6d:b8:b4:7f:d7:dc:b2:41:cb:d4:06:47:52:09:2b:6a:15:1f:
93:06:c5:0a:79:5c:10:26:ab:8e:62:8a:31:bc:1b:4e:12:22:
e8:22:28:5d:07:22:d0:9e:39:be:a4:89:1e:aa:17:b2:e6:80:
3d:10:c0:90:f9:72:46:ea:e4:1e:fb:79:a1:e7:44:ee:2f:db:
96:ba:4d:dd:f6:66:2a:b1:0b:f6:98:99:af:70:43:6b:b2:f8:
d8:01:0f:76:5a:c8:1c:fc:62:2e:a6:00:ea:88:7a:14:1b:84:
74:4e:1a:85:e6:42:a0:63:02:4b:d1:d4:f4:04:98:aa:07:d4:
2e:03:fa:c1:e7:57:16:48:fd:de:7c:e1:b1:d4:b0:27:5f:63:
eb:4a:5f:cc:ab:5e:3d:c8:a3:cb:83:7c:b1:75:6b:56:96:0a:
70:cf:7d:98:7b:dc:ad:91:01:be:8a:a3:35:c3:41:0e:46:49:
53:3c:cb:6b:d2:1d:c4:1c:1a:2b:54:ba:3c:a0:f8:93:00:49:
47:21:10:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yLqGpHhcvmQkrFRWglJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmM0OThlZGM0MTg5NTg0ODc0YjdjYjQ1MDI1ZWY1NDI0
ODFiNmEwHhcNMjUxMDIwMDQwMjQ4WhcNMjUxMDIxMDQwMjQ4WjAzMTEwLwYDVQQD
Eyg5MDIzNDQ2ZDhhYWQzYThkZDg3MTVhNzFjZDMyYjIwOTdmMzJmY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZDd0gTClTkpgccZw2t0EOXMmfUN
9nSVD1ECdS5+QepiLcpDpgKlqmfqSgHmNKKaNaIC0mJJ4ODHsxYh9tRT3786TaNh
NJFleRoO76U239raD5le1oVdb01BegeWzBjX/5IHr9v8/zatiR8V2PNuGjvLAS+r
ttKZvqS1Kxvsvvus2KygWWaaQ1IRyJvAJAv88P15E1wWzu9K6T94iKsPlZvQPL3S
xJtFjxvo62Zo2CmZ+rhxFZM0NWA9JJarcykiZlM6Sug9shGCaon0lbK91ytBg85Z
Qhex9yxhQQrlwvjsn7A6LtmLKlmJD8oyZoNkkVq3Ja1BqC18HQ0s2SzQ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAjRG2KrTqN2HFacc0ysgl/Mvz+MB8GA1UdIwQY
MBaAFHm8SY7cQYlYSHS3y0UCXvVCSBtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDIt
ZTNiNDA2Yzc5ODBlLzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDItZTNiNDA2Yzc5ODBl
LzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu/EzgmG
qcBTYmDzuy0EkwoeDWgyj2YBZIZWD1fZ2T7SS16C1o2F8KSV18HAVm07Tgy+59vh
bbi0f9fcskHL1AZHUgkrahUfkwbFCnlcECarjmKKMbwbThIi6CIoXQci0J45vqSJ
HqoXsuaAPRDAkPlyRurkHvt5oedE7i/blrpN3fZmKrEL9piZr3BDa7L42AEPdlrI
HPxiLqYA6oh6FBuEdE4aheZCoGMCS9HU9ASYqgfULgP6wedXFkj93nzhsdSwJ19j
60pfzKtePcijy4N8sXVrVpYKcM99mHvcrZEBvoqjNcNBDkZJUzzLa9IdxBwaK1S6
PKD4kwBJRyEQGg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:20 2025 by rpki-client