Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: 1644KV6xM9+VhCMPgXkVhnMEHjIslwg71lVdoXWLkSk=
Subject key identifier: 70:21:24:31:BF:A4:CC:E5:9D:C3:E3:8A:EB:A9:E7:72:34:70:59:F2
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 0199FBEAA8701AB5EA325BE12A4AEA971080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: gjGarGsyk5Mevq6oy2Kvm25Whp+GnZFooU/+GgTefho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a8:70:1a:b5:ea:32:5b:e1:2a:4a:ea:97:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=70212431bfa4cce59dc3e38aeba9e772347059f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:49:d3:f6:80:14:9d:b0:d3:9b:af:c7:9b:
1a:df:4e:f4:4d:1f:88:fd:c3:fd:31:19:2e:cf:43:
ee:ca:26:56:48:1e:b1:80:99:98:c7:92:5a:b0:6e:
7c:0f:6f:6c:e2:9f:a5:29:31:ef:bd:3d:9b:ae:46:
06:93:c4:44:3e:8e:1c:f9:cd:b9:94:01:10:0b:f3:
0f:c7:7d:26:11:59:ba:38:33:70:d5:47:ee:b7:d7:
9f:ca:ee:9b:cf:50:19:f9:6f:ba:8b:b0:61:80:2e:
1d:55:e7:c2:49:96:a1:44:a2:0e:fa:bd:8b:f6:e4:
5c:6d:1b:a3:bc:78:79:c3:eb:61:af:5c:39:ef:9e:
5b:36:87:a7:f6:aa:3d:74:49:81:50:6d:d2:b4:6c:
80:ab:9c:a7:d1:5e:9c:30:2a:34:d1:1c:8a:e9:0e:
9b:44:32:03:78:59:39:5d:6d:1f:7e:e0:1c:eb:74:
6d:ec:bc:a3:35:0d:16:b0:56:85:3c:91:ca:9a:8d:
fe:5c:dc:57:54:a4:d6:9a:bc:6f:32:5f:46:d3:d5:
e8:20:30:d7:fe:e6:89:40:34:eb:1c:cc:3b:e5:22:
52:aa:a7:9c:76:a7:0b:70:37:99:5a:2c:94:4f:75:
0a:60:fa:c8:60:bf:d4:9e:51:d5:10:65:be:5c:2a:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:24:31:BF:A4:CC:E5:9D:C3:E3:8A:EB:A9:E7:72:34:70:59:F2
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:53:e7:a2:9f:a7:55:fc:85:c7:eb:43:48:d3:75:a4:15:31:
78:40:65:41:5c:2b:3e:12:e6:f7:ae:ee:23:72:7d:8b:38:d1:
2f:a6:b6:97:ec:03:93:10:99:d9:51:fd:ee:14:1b:33:64:c0:
31:47:23:01:57:12:3a:96:4f:f5:e2:3c:71:16:92:eb:b6:45:
46:73:3e:aa:5a:0d:c4:f6:df:52:23:34:0e:bc:5e:49:72:36:
44:2b:47:22:e7:fc:1d:d4:66:09:1b:3b:d3:15:37:92:4c:38:
2e:e3:6e:77:8d:2b:78:a4:92:ad:0d:d8:e6:72:5c:c5:4c:03:
01:06:b6:07:57:c8:72:3c:bf:9a:ab:6b:5a:23:05:a3:00:d6:
aa:60:b9:ea:ae:b7:0c:46:02:9b:36:48:b6:87:31:e7:92:aa:
aa:cf:ec:04:9f:c5:8f:8b:af:da:a4:a0:96:06:c1:61:b9:4e:
af:77:a9:da:cf:6b:05:10:65:4e:2b:e6:b2:5a:b2:35:7d:9d:
ff:b3:ef:bd:df:88:3d:af:6c:5e:0d:8a:9b:f9:1b:5b:ae:95:
23:c0:23:93:43:56:ee:e4:da:24:71:1f:bc:f2:d4:44:2b:82:
5a:bf:4e:15:43:93:a7:9f:87:90:19:73:84:23:f0:cf:88:ec:
aa:7c:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:18 2025 by rpki-client