Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: P8HIhuCiF8VdDQ+bH2cv9zxvqT4PTAQXDZZLbqRDn9A=
Subject key identifier: 03:9C:01:F9:BC:50:E3:D2:A8:2F:1F:E6:E3:E3:72:DE:75:EF:A9:07
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0199FB45A6F553D3F87A86A25B5388007893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: E2R07P7B5GkmsmDGhqfW5iBhA6D4N041hbIrxB/orNo=)
2: h8XcxNlg2XITkIVJEK1ZC2_6O-w.roa (hash: Uox6k3C3t/z5iyZxizryiDRbognV5cGwqRlM+dbYzjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a6:f5:53:d3:f8:7a:86:a2:5b:53:88:00:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=039c01f9bc50e3d2a82f1fe6e3e372de75efa907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:87:9f:2d:3e:d2:52:0b:c2:f9:39:af:3a:
b9:5a:23:48:b8:03:8c:b2:1d:e8:8d:9d:bc:60:72:
2a:82:ab:bb:f3:06:2d:ca:69:24:d5:f1:6b:f4:6e:
73:10:8d:e5:13:9b:5c:e2:16:4a:87:31:67:48:b8:
56:2c:8f:2c:45:5d:b9:67:f2:39:2f:c7:c5:9d:c4:
27:05:a7:7a:b9:6f:02:18:93:d7:51:bd:b5:a4:1b:
3e:85:52:49:8b:7a:bf:9a:36:2c:17:e6:60:ba:10:
8c:6c:49:00:30:ae:15:17:b5:07:79:ff:7f:be:da:
a6:bb:0f:20:45:21:b0:22:71:a2:6d:d5:f2:34:69:
99:0a:e1:ac:63:d9:ed:b7:f9:9d:13:18:5a:b0:f6:
7e:27:8f:29:fe:73:09:2c:83:45:d4:76:d0:f9:0e:
50:a5:e1:1b:9a:8f:a4:ee:e2:0d:81:de:0b:16:d7:
32:c4:a8:bd:7b:52:94:fd:22:a7:6d:2f:da:09:c2:
89:2c:20:28:2a:0e:6b:d7:c9:85:3e:4e:fa:e6:2d:
fd:d9:dd:35:9e:7d:db:56:28:14:0f:bf:35:0c:05:
2f:2c:a8:3d:c5:3c:76:74:26:7a:53:46:e7:07:b1:
08:01:6d:69:fd:2f:e7:eb:f8:d0:1a:02:49:92:b5:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:01:F9:BC:50:E3:D2:A8:2F:1F:E6:E3:E3:72:DE:75:EF:A9:07
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f5:c1:ee:c8:03:a8:c3:8a:f7:7b:73:a3:e1:84:13:66:58:
74:a0:bf:a7:3f:a2:56:22:94:0a:f3:43:14:fe:9b:8d:fd:fc:
a5:05:d5:d5:c6:bd:0d:04:1b:6f:18:e1:89:45:80:14:94:59:
a0:9c:d8:ff:8e:01:d9:1a:aa:56:3a:f2:c5:6c:40:a0:98:b5:
f5:fd:3a:23:68:cf:96:3c:01:f8:74:15:b7:c9:f4:48:57:b8:
a8:e9:79:78:be:8c:51:ca:03:9b:52:e2:b4:1e:a2:ad:00:54:
72:6c:2a:12:d1:e4:20:9e:65:88:e6:f6:a4:10:7e:b0:bd:3f:
d8:d2:50:60:05:2f:74:b2:f0:5b:14:b5:b6:57:31:d2:3d:87:
e8:04:6e:8d:07:a6:31:4d:3a:34:69:e7:50:6a:8a:27:c0:4a:
07:a0:6f:f0:bd:11:6f:1e:d1:5d:c1:a2:88:4d:00:c5:06:73:
ce:d9:57:6b:64:7a:e9:82:eb:77:4a:b4:1d:ba:50:38:cf:eb:
6a:3e:a1:46:64:9b:e8:97:10:15:fe:d1:28:ee:6b:5d:9f:15:
a3:d6:c1:11:4c:6c:6c:cf:cd:72:c8:b3:b7:59:8a:0d:64:7a:
b0:61:f9:9e:94:c9:39:52:20:d8:98:19:5e:5d:3c:b2:15:fd:
9f:29:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:09 2025 by rpki-client