Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: dq4jOoIFPYGEKk37ndIdorj3yEKIJMmic/eDls0Wz6A=
Subject key identifier: 4B:1F:D2:CB:EA:45:4A:E8:D8:51:B1:19:01:FE:51:B1:6D:82:C6:9A
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 0197BA7D5E81AEE38C3E72A4BB94F4C85739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 07:01:07 +0000
Manifest this update: Sun 29 Jun 2025 07:01:07 +0000
Manifest next update: Mon 30 Jun 2025 07:01:07 +0000
Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: kOzFaerWYbTUbeNWxseb6zcuD9As5GSVPxfRgDiautA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:5e:81:ae:e3:8c:3e:72:a4:bb:94:f4:c8:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Jun 29 07:01:07 2025 GMT
Not After : Jun 30 07:01:07 2025 GMT
Subject: CN=4b1fd2cbea454ae8d851b11901fe51b16d82c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:9c:5f:eb:90:a1:ed:38:c8:c3:00:be:94:
20:73:e7:0c:a2:77:2d:a9:83:2e:1d:80:ef:ed:89:
01:b2:ab:48:ab:1e:a1:f1:47:80:46:02:14:b1:10:
25:40:f6:d7:9a:5a:e7:c4:64:3a:ef:04:6c:35:f7:
fd:d0:58:eb:2d:3d:a7:59:6e:2f:4f:3e:d1:b1:e2:
45:55:f3:6d:a4:df:e3:24:de:61:0c:a8:c3:c8:43:
74:c7:7c:9f:01:1c:6b:c9:c5:8e:05:1e:77:89:1c:
a8:c0:2c:a0:51:1f:b8:1c:7a:d1:c7:4d:e2:93:05:
ec:4d:86:37:45:72:2c:02:63:3b:95:46:d8:0e:2e:
ca:8b:4b:c4:ee:d3:14:31:b3:24:a0:b0:ab:89:da:
bb:3a:25:d5:17:48:e2:c1:c7:9d:96:78:be:74:f6:
e2:b1:b5:62:49:f9:db:e8:2d:22:ec:60:98:f9:14:
0a:1f:98:f7:8b:ec:af:e9:53:60:3a:6e:3e:bc:19:
c3:d9:09:44:59:74:6c:2a:14:2d:bb:2f:f1:2a:e8:
e9:16:f0:47:e9:b8:68:7c:69:7c:ee:48:3d:f2:c1:
48:26:33:d2:6f:06:2d:8c:2c:f8:d2:50:16:cd:a5:
8a:82:58:1c:27:77:95:54:75:e5:ad:8c:a1:5e:27:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:D2:CB:EA:45:4A:E8:D8:51:B1:19:01:FE:51:B1:6D:82:C6:9A
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:df:6d:0b:26:71:e1:85:11:53:dc:88:9f:16:dc:65:4c:20:
67:49:89:f5:e7:6f:77:59:25:c5:fa:db:21:54:c0:3a:85:a5:
4d:b1:2e:62:fe:a9:15:b8:4b:09:f5:c7:a6:a5:80:ef:d7:75:
88:b3:2c:f4:bf:92:09:2a:e2:fa:03:43:cd:2a:f2:74:4c:29:
49:10:d5:61:89:a1:79:1c:28:1f:6c:a0:f0:a8:d5:d5:f6:79:
68:89:7e:ba:19:ac:2b:29:43:4f:c0:7b:75:ef:ef:b3:6d:4b:
d4:4c:c5:21:f7:12:35:05:13:d2:98:3e:a0:da:3b:61:3b:40:
37:23:9e:dc:1a:5b:ac:9c:cb:8a:d1:d2:74:90:e9:6d:73:ee:
45:0a:40:47:86:ee:2b:63:62:e7:86:e4:7b:88:3c:48:de:67:
66:28:e9:6b:8b:5b:27:ca:25:79:e3:54:01:02:b9:6c:4b:2a:
44:1a:70:18:0f:73:15:bf:8d:b9:22:58:4c:ff:8a:a5:52:26:
85:1d:3a:7e:8c:79:d1:ac:fb:7e:96:b8:ea:d7:fc:b2:d6:91:
27:d6:9b:95:1f:ee:f4:8c:97:c0:09:71:ce:d6:d6:5d:9e:3c:
26:f5:af:c6:86:50:81:dc:02:33:02:fb:5e:02:be:53:69:5a:
be:9f:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:24 2025 by rpki-client