Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: Rqf3UnwmcoSHtuCFn7oRXsEAtWqtgYl97ZEs+eQHHDc=
Subject key identifier: A3:65:9E:A9:59:4A:34:12:86:03:E0:E6:C0:5B:1E:17:1D:2D:F9:15
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 0197B6A225DD4702F80DD0B2E2EA4A826B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: NGJMVx/Shmo/Byl0iCXrl/LNDtEj74CbEXcsRA7HH/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:25:dd:47:02:f8:0d:d0:b2:e2:ea:4a:82:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=a3659ea9594a34128603e0e6c05b1e171d2df915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:80:b0:06:52:5a:ce:d6:65:d9:4c:cb:dc:
4b:80:6d:cf:d3:aa:15:f4:fe:80:a7:e7:98:ab:73:
d7:ee:51:6e:75:67:41:aa:94:10:20:f2:84:e8:d0:
cc:2a:a2:58:5c:40:c5:48:f0:0a:58:e7:07:87:86:
ea:58:22:65:12:da:ee:35:ac:48:f2:c7:55:98:6f:
4a:82:61:51:7e:82:58:1c:c1:ec:91:15:f8:f1:b1:
06:f0:eb:e8:1a:f8:67:ec:54:29:ef:a6:83:54:e7:
9a:34:8c:71:a8:8c:92:cc:d9:8e:84:a5:9e:29:6a:
10:4a:b4:14:4b:5c:44:00:58:ab:d6:7d:49:ca:b9:
47:66:71:35:2f:5c:dd:4d:87:20:aa:9b:0e:bc:a0:
79:1b:67:01:53:3d:c4:71:19:2d:12:7e:bf:36:57:
b3:ae:bd:f2:6b:46:6d:f0:8f:ce:e4:51:11:08:8d:
08:f0:7c:17:8d:d8:a7:f1:f5:5d:be:ad:1e:df:47:
0f:7b:39:70:37:22:26:43:0b:df:56:d2:35:8b:00:
81:3b:47:ee:60:95:9c:8a:3a:f5:b2:75:e1:6b:a9:
6a:67:07:4a:9a:e1:11:d5:f9:d7:3f:27:2e:60:7d:
24:d3:9d:cb:d8:64:ca:a4:93:93:fd:20:86:d6:85:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:9E:A9:59:4A:34:12:86:03:E0:E6:C0:5B:1E:17:1D:2D:F9:15
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:64:7e:40:45:a2:95:58:5d:89:24:31:0c:28:17:f1:0c:
e8:bb:43:65:59:33:b8:19:36:0f:08:3f:c7:ac:c8:e9:bb:39:
f8:c6:3c:4b:22:a7:03:cb:51:20:61:41:1f:27:2f:d1:46:34:
bc:56:6c:b3:b5:16:1b:ca:8e:18:21:9c:bc:68:e5:a8:c3:04:
c2:5c:28:54:cb:6d:ab:d3:57:48:76:12:00:70:e2:39:63:55:
c2:94:1a:4a:2f:c9:10:54:64:0e:16:6c:09:bd:70:3b:9b:5f:
b5:76:d2:76:1e:7a:8a:1b:91:8a:c5:a9:bf:5c:85:9d:cd:e1:
0b:af:55:77:6b:db:c6:eb:e2:bb:2b:94:48:cf:78:ab:48:55:
81:b8:09:ca:36:ff:12:54:f0:7e:79:f7:64:0c:19:4d:cf:90:
52:e8:37:b8:93:cc:05:5c:12:50:ef:b1:20:a3:f7:b6:ca:93:
18:c6:e4:dd:8e:8d:74:78:9c:86:aa:db:19:7a:b9:bc:01:26:
cd:d8:29:71:b5:99:f9:24:97:b1:a8:e1:6d:19:5c:68:e2:56:
9e:92:bc:44:9e:19:1f:38:ba:8b:ab:63:fe:b0:3a:e0:ae:be:
d8:4e:d0:2e:1d:5d:f2:e1:e1:3a:c7:3c:38:b3:d1:2f:2c:0b:
24:0a:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:42 2025 by rpki-client