Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: GNgKVhEtKRXVtFrToKV6oEPEv9za3CDE2g0vB4MCkXs=
Subject key identifier: CB:0F:84:96:EB:68:3B:A2:21:AF:B2:3F:81:8C:71:10:5F:1E:44:1B
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0199FB7C7D6F47B948F9D405806A69E6C89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 104A
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: 5OGfu6TIDohrvTT9sverZMT2En+RDX2U1p3i4jU51LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7d:6f:47:b9:48:f9:d4:05:80:6a:69:e6:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=cb0f8496eb683ba221afb23f818c71105f1e441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:26:4f:9d:c1:c0:30:a3:7e:38:fc:df:f0:
f3:4b:7d:12:bc:cb:f4:fc:8c:41:58:20:0e:e5:30:
08:9a:11:1c:13:c1:06:19:70:39:e9:7f:c7:65:32:
04:a9:14:3e:8a:8f:10:18:70:0d:4d:ab:bb:e5:b4:
e7:a8:a7:d0:90:77:b2:9d:9a:d5:ce:16:91:af:67:
95:fb:24:1d:3c:aa:a2:03:01:3a:6b:17:11:f3:18:
4f:fe:19:cc:b1:b9:92:29:4e:75:59:d1:a6:56:89:
d3:91:d0:c0:5f:30:05:e8:ab:6b:27:f5:fc:42:e0:
7a:9b:f5:33:17:97:06:ab:67:86:56:4d:18:88:e0:
92:2e:64:0f:ff:a5:37:66:93:1e:af:27:da:02:d5:
0f:4c:cb:5f:43:63:e2:20:78:83:39:39:bd:7c:33:
40:b3:a5:99:fb:cd:27:b6:86:a7:2e:33:ff:15:0e:
5f:44:f0:3b:c1:48:ba:33:81:88:a2:bc:b4:2e:ac:
e4:36:7f:34:84:04:09:f7:b7:8b:9b:ee:2f:53:cb:
51:1d:b0:c5:33:b6:09:3e:93:8a:02:d2:b9:97:1f:
2a:21:84:32:0c:84:3e:94:e4:5f:e9:b1:57:a2:cf:
ad:eb:32:5a:76:e0:b7:d8:6a:5c:07:ad:41:94:4c:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:84:96:EB:68:3B:A2:21:AF:B2:3F:81:8C:71:10:5F:1E:44:1B
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:7f:86:11:f4:44:b7:4d:d9:a5:78:91:10:10:0f:8d:39:
86:bd:95:f4:7d:59:5e:91:b6:e2:6b:b1:c2:25:c8:b4:8d:d3:
72:18:94:08:60:04:67:2d:f5:be:e3:1e:87:02:b4:27:ed:3e:
3f:6a:86:08:c8:c5:c7:cc:e4:5c:ee:3f:d7:35:fc:bf:cb:9b:
37:15:ff:5f:9d:c1:d4:dd:6e:10:8e:3b:4b:b3:21:6d:2e:cc:
18:ab:4e:8f:af:53:3c:cd:f0:d7:f3:cd:4c:c3:68:b8:a3:00:
00:37:69:bd:2c:08:ea:0f:39:60:58:c9:2a:7f:37:84:23:a3:
65:b2:43:4b:02:77:81:7d:3b:97:71:48:8f:9e:29:65:a9:5c:
4f:41:c2:c5:42:23:8f:8b:35:f6:37:85:dc:7a:2f:ac:89:8f:
e0:20:ae:45:64:31:06:65:74:a6:de:f0:b7:d8:10:5f:cd:50:
0e:59:08:a5:6a:8c:af:5e:c3:fa:34:89:16:74:9d:ab:2e:d2:
92:ea:ca:68:93:c2:5a:e1:b2:77:69:03:b2:97:93:4f:39:c8:
fc:9c:83:6c:81:d0:7b:dc:a0:f8:2c:ba:af:80:88:b4:50:83:
c4:37:66:e8:ef:08:f9:e8:0e:7d:0b:66:2d:e5:ce:d1:62:f7:
dd:6b:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:44 2025 by rpki-client