Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: /qtrrtbfKwTPsswY53DIV/UnM0KomflaGCBnwuCt9Hg=
Subject key identifier: 9F:66:45:34:06:AE:88:9C:3B:14:5B:D9:08:B2:3C:F2:DA:B1:A1:1A
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0197B6A16F1BDA8999340A86F34393E62189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: +JEjDOPHJjjtpfELk2cay+N4tUd5UeN7sQxQtoS4MRM=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6f:1b:da:89:99:34:0a:86:f3:43:93:e6:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=9f66453406ae889c3b145bd908b23cf2dab1a11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:77:f5:72:6a:e7:d8:1a:ce:9e:97:f8:cb:
3e:68:be:4b:9a:d5:30:ad:5d:a6:fc:d7:e5:c0:43:
41:bd:6d:c5:0b:7a:22:9c:34:7c:fc:09:49:ea:a5:
3f:9e:0d:5c:d3:d5:da:9d:64:d1:53:61:b1:0b:52:
c8:03:b2:37:b6:87:0d:cf:5a:70:41:1d:e2:fe:ed:
1a:da:8e:af:55:76:fe:d0:4d:00:09:9d:32:3b:ed:
87:44:ef:a7:71:0d:c3:2e:db:44:ab:e7:47:a4:94:
59:dc:c5:38:17:1a:a7:4f:62:2f:21:5b:ea:7d:05:
67:9c:84:c4:74:99:9d:5c:6f:ec:f0:26:b5:b7:aa:
d4:93:13:8e:30:61:d8:88:f3:23:86:53:0d:8b:1f:
ce:da:37:3e:fa:dd:f2:7b:f6:7e:a0:d4:d3:83:1c:
aa:01:dc:5e:d6:f5:22:12:c4:36:f2:a3:e0:4f:0b:
55:30:4c:5b:a7:27:ff:d8:40:3a:97:0f:e6:ac:19:
90:4f:82:49:ff:73:70:c3:30:3b:43:9d:9a:d0:ea:
d8:79:66:0f:12:88:0e:3b:b3:28:17:6a:34:a9:a4:
5b:60:3a:be:90:68:aa:24:0e:57:a3:c4:0f:97:ac:
17:28:7d:76:66:b2:8a:77:fc:bf:8c:37:4e:59:91:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:66:45:34:06:AE:88:9C:3B:14:5B:D9:08:B2:3C:F2:DA:B1:A1:1A
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a7:60:60:88:b8:73:a6:0a:9c:fe:f2:d6:ad:5c:59:65:c0:
d0:82:ff:21:de:f0:14:b0:38:e2:ce:57:4a:41:9b:21:87:a4:
72:54:a3:5c:db:d9:b3:5e:3b:49:07:e8:5a:73:5e:44:0d:f0:
6c:8d:1b:32:9b:8e:c5:26:6a:de:a1:ed:52:3b:3b:31:7b:c7:
1c:f0:af:e6:59:e5:df:09:51:fd:2e:fe:aa:7b:9e:eb:26:fa:
8b:6b:4c:bf:11:16:a5:ef:dd:c0:dd:54:46:17:2e:7d:3e:93:
27:52:10:83:6d:7e:aa:2f:88:9a:81:b5:1e:51:a0:d3:a9:e9:
0c:62:52:bd:6e:42:75:ed:ad:4b:f3:a6:7c:94:b4:b2:01:6a:
c1:bb:89:b7:d3:82:73:92:53:64:14:0b:db:73:6d:66:3f:c0:
9a:c8:7e:61:89:1f:ab:53:ad:75:49:df:48:d1:3e:bd:73:12:
68:23:2c:96:2c:e4:f7:c9:aa:e8:aa:63:6e:0a:04:a8:32:75:
91:ab:e6:0c:e4:b2:db:f0:02:7d:10:ea:2e:89:34:1e:0c:76:
cd:a3:8b:c3:ae:af:eb:e6:d8:38:8b:f9:15:7a:90:91:ec:e5:
8e:9b:7a:7a:27:32:62:ce:9d:28:e1:ba:d3:1f:fc:67:f5:25:
94:bc:58:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oW8b2omZNAqG80OT5iGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjUwNjI4MTMwMjAyWhcNMjUwNjI5MTMwMjAyWjAzMTEwLwYDVQQD
Eyg5ZjY2NDUzNDA2YWU4ODljM2IxNDViZDkwOGIyM2NmMmRhYjFhMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbt39XJq59gazp6X+Ms+aL5LmtUw
rV2m/NflwENBvW3FC3oinDR8/AlJ6qU/ng1c09XanWTRU2GxC1LIA7I3tocNz1pw
QR3i/u0a2o6vVXb+0E0ACZ0yO+2HRO+ncQ3DLttEq+dHpJRZ3MU4FxqnT2IvIVvq
fQVnnITEdJmdXG/s8Ca1t6rUkxOOMGHYiPMjhlMNix/O2jc++t3ye/Z+oNTTgxyq
Adxe1vUiEsQ28qPgTwtVMExbpyf/2EA6lw/mrBmQT4JJ/3NwwzA7Q52a0OrYeWYP
EogOO7MoF2o0qaRbYDq+kGiqJA5Xo8QPl6wXKH12ZrKKd/y/jDdOWZHpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9mRTQGroicOxRb2QiyPPLasaEaMB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKdgYIi4
c6YKnP7y1q1cWWXA0IL/Id7wFLA44s5XSkGbIYekclSjXNvZs147SQfoWnNeRA3w
bI0bMpuOxSZq3qHtUjs7MXvHHPCv5lnl3wlR/S7+qnue6yb6i2tMvxEWpe/dwN1U
RhcufT6TJ1IQg21+qi+ImoG1HlGg06npDGJSvW5Cde2tS/OmfJS0sgFqwbuJt9OC
c5JTZBQL23NtZj/Amsh+YYkfq1OtdUnfSNE+vXMSaCMslizk98mq6KpjbgoEqDJ1
kavmDOSy2/ACfRDqLok0Hgx2zaOLw66v6+bYOIv5FXqQkezljpt6eicyYs6dKOG6
0x/8Z/UllLxYyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:25 2025 by rpki-client