Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: L3lp1smpvQNV185rgwb8XrFTGqpCioFST8ITk01Cqt4=
Subject key identifier: B5:59:EE:35:18:DA:6C:44:D8:5C:09:CD:E1:1B:F4:E5:61:66:4F:00
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0198D404D81E354AA72A1C1841E4F7204883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0FB1
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: SlgHAgGNTXn1tXXOvELOWUGOHixgdD/nzy0YwXMu82Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d8:1e:35:4a:a7:2a:1c:18:41:e4:f7:20:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=b559ee3518da6c44d85c09cde11bf4e561664f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:09:1c:e4:53:a8:32:56:cc:61:49:96:84:
b5:8a:62:67:4c:fc:b5:93:a1:83:81:a6:77:d7:f9:
14:3d:20:b8:94:97:9d:da:f9:16:e9:52:59:62:7c:
5c:e5:58:91:36:25:4d:fd:1b:c2:3d:eb:bb:66:7f:
99:ca:82:ba:76:80:0d:03:a9:d7:9c:34:1b:23:7e:
fe:ef:79:66:e9:90:bf:7e:36:dd:e9:f9:61:6b:8f:
88:9a:7f:cb:c6:69:73:94:cd:d7:31:82:eb:ee:ea:
63:5c:6a:96:73:bb:87:7d:b0:1b:ff:7e:54:e3:20:
75:f4:6e:b4:a7:d5:ad:b7:97:14:a5:85:69:ff:28:
4b:41:c2:03:41:0d:b6:41:fe:2c:e7:c8:be:06:3b:
49:96:06:91:55:31:89:06:db:3c:33:78:6d:c0:16:
d4:8a:88:0b:3c:7d:a9:71:66:ad:35:0d:3e:ee:88:
54:c1:01:e7:e5:69:25:2b:ea:ed:1f:f3:0f:a8:33:
7b:28:00:4f:cd:0a:61:df:54:77:ee:ee:e5:e7:22:
40:f4:45:40:85:08:b3:d6:c7:5e:27:d6:dd:e2:43:
c6:1f:35:2d:07:13:83:59:11:fd:94:9f:84:46:1d:
1d:58:96:b3:d3:40:75:b7:95:31:d3:6d:d3:7f:e6:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:EE:35:18:DA:6C:44:D8:5C:09:CD:E1:1B:F4:E5:61:66:4F:00
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:40:f5:fb:d7:d9:73:e1:49:4e:44:43:95:38:4c:f4:77:d0:
8a:61:00:ea:9f:7f:a4:2f:1f:b8:21:e4:48:10:16:b4:74:bc:
ae:ca:88:51:68:bc:e3:d1:60:49:cd:75:d6:f6:35:93:e6:4e:
6a:49:f7:ae:be:3a:4b:18:d2:e4:c2:32:da:89:3a:c1:6c:35:
8e:50:82:9c:cf:6c:57:ba:da:b3:71:0f:17:b0:ba:7b:2c:ab:
d3:d2:35:71:14:26:2e:f6:f4:01:c7:e7:e6:86:82:25:bd:da:
3a:9b:a3:aa:a9:ff:39:be:b8:2e:5a:32:41:94:82:ed:e8:35:
eb:e3:21:b1:32:78:84:59:61:68:8e:65:34:12:d9:ad:d4:fd:
f9:5a:90:a2:cb:f1:b0:0b:6e:c9:83:27:49:8a:8a:9d:a8:12:
0c:09:f7:7b:3f:f4:67:73:02:d9:ad:5b:16:52:37:2b:e3:e7:
72:b7:63:eb:81:1b:3d:5f:87:47:43:ae:36:6c:dd:c2:65:83:
32:99:f5:51:6d:77:4d:59:18:fa:76:e3:a0:a1:01:ea:0e:c9:
76:83:bc:86:d8:d1:d4:d8:7a:44:1d:39:2d:4e:04:2e:9d:d7:
c7:71:50:b7:4d:13:fb:76:08:74:33:88:cb:21:41:dd:cc:61:
6a:7f:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:45 2025 by rpki-client