Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: jn9zQBMlibDKIJsRt9L1rCvIYULh642b2m3vxGu22Ko=
Subject key identifier: A3:73:EB:6D:5B:C3:30:86:91:B2:46:3A:E1:BF:BB:93:55:8D:B0:AC
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0198D4729F2733164E1F9B777935D45D533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: WNDW+lUTqQysMiL2COBforbet8JuBGEdnhnUFcsErWc=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9f:27:33:16:4e:1f:9b:77:79:35:d4:5d:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=a373eb6d5bc3308691b2463ae1bfbb93558db0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:ec:3e:bc:4f:96:18:ef:26:be:64:4b:fb:
c2:55:84:43:81:9d:22:d3:e6:20:c6:82:76:4f:7d:
1c:82:5f:24:9e:5b:81:fc:01:9f:36:c2:c1:25:36:
77:d1:3a:f2:0a:f4:ce:78:17:34:43:9d:d3:24:5f:
ca:b8:f6:a6:b8:84:4c:47:5e:21:c6:be:4a:7c:27:
96:4c:f9:bc:fb:b5:5b:e3:67:48:b0:50:8d:85:15:
37:16:72:d2:cc:f1:d9:3a:42:93:29:26:e9:2c:ad:
a6:be:3a:21:f9:c8:e3:21:ea:24:32:a5:5d:ae:6a:
e7:c3:cc:02:cc:6d:2b:12:ef:fb:44:01:11:7e:3f:
7c:b4:1b:e4:80:ae:37:f1:2c:02:4e:bd:e3:31:c2:
ce:7d:a5:91:c6:c3:7d:9c:69:c7:ee:20:a3:20:33:
4a:d5:3d:a7:0f:b1:c0:e8:65:10:e1:ac:4d:f9:0c:
2c:40:b7:c2:2b:0f:6f:80:94:e9:10:07:98:2f:04:
bb:bc:de:cc:01:83:b9:d4:95:39:9f:93:63:66:75:
13:18:f8:41:61:0c:a2:a1:7e:5b:28:5b:3c:cd:51:
70:de:5a:58:56:b4:bc:fd:0d:6a:31:53:f8:7a:0e:
75:8f:ad:13:0f:99:08:ab:fc:3d:ee:73:31:29:28:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:EB:6D:5B:C3:30:86:91:B2:46:3A:E1:BF:BB:93:55:8D:B0:AC
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:c7:9e:96:d5:1c:15:37:fd:3b:c7:b6:14:e1:ab:c5:ab:
4a:e1:9a:3b:ef:99:13:c0:57:ba:ad:77:37:d4:cf:87:b7:fa:
5d:ba:e8:f6:81:cc:3b:a3:b1:5e:0e:79:9d:48:96:f7:5a:b1:
2b:0e:40:61:d9:71:95:83:a0:14:bf:a3:52:a4:fd:9a:b3:22:
29:ba:e4:79:66:56:63:e2:16:85:14:bf:bb:93:50:dc:bf:52:
4d:6a:11:f8:bc:f1:df:70:5c:38:02:b8:00:5a:89:19:bc:3c:
76:9d:22:93:1f:be:1b:7d:b8:7e:d0:93:3f:2f:ce:37:5a:f7:
ee:88:e7:76:d1:24:d5:c9:4a:62:96:b9:52:91:12:f4:88:3e:
e1:f1:ec:a2:46:f0:dc:94:3f:37:fe:f2:2f:25:29:ab:9a:b4:
b8:a1:e3:77:8e:9a:28:1e:33:b5:ef:d6:97:29:b8:10:0e:73:
c9:3d:dc:4d:74:1f:17:02:cf:1d:80:96:cc:f8:06:8d:34:37:
40:7b:37:96:f7:ab:00:ba:04:83:b2:4d:1b:95:a5:2b:ca:ef:
75:27:1d:2e:b2:fc:ac:89:94:04:91:27:ff:aa:18:74:4b:38:
cf:43:f3:02:66:9d:bc:51:77:ca:85:23:36:00:06:1c:e8:35:
48:47:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:48 2025 by rpki-client