Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: XcxZtEbHJNP4EL1uxYt40rLHVTRQSGaCZD/XO1fAhPI=
Subject key identifier: A2:E6:B9:F3:91:86:68:B2:67:75:51:F8:37:7E:CD:AC:20:38:6F:83
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 0197B6A073627ACC1DC950F190BC1616FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 12CF
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: H8YM6cTWNSTRCBKdlRo5wBHrDmmMnHPThOwYENtJLaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:73:62:7a:cc:1d:c9:50:f1:90:bc:16:16:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=a2e6b9f3918668b2677551f8377ecdac20386f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:e6:69:9c:4e:c6:5b:20:19:0f:16:4a:5c:
56:6b:a1:c8:32:58:3a:15:2b:1c:1e:25:59:d3:08:
52:00:9a:c6:5f:f5:5f:da:32:21:d5:a8:0a:17:2b:
c0:2d:1c:1b:13:9a:af:0b:6c:bc:07:45:ea:d9:ef:
fc:9c:68:41:35:57:b4:99:a0:69:f6:f3:54:6b:ac:
77:39:e5:7c:e2:d9:ad:dd:9d:24:77:32:1b:c4:cf:
ed:d8:4b:93:f8:f2:e5:63:df:76:f0:2a:34:0d:5b:
64:90:67:ca:6c:58:74:10:78:41:4c:44:e5:d4:77:
58:7e:74:a8:a4:18:3c:0e:ea:d8:39:14:6c:27:d8:
b7:f5:e0:25:d9:f1:e4:dd:37:af:ab:04:2d:cf:bb:
de:6e:1c:d5:01:20:21:ae:db:82:eb:a2:80:d9:6a:
8b:77:1d:01:33:bc:b1:ff:a5:73:96:c9:fe:cf:23:
58:f1:61:a6:ea:6b:f6:d2:32:28:33:2e:9c:35:14:
d9:9e:df:60:ed:31:c0:ac:be:54:cb:03:bc:f4:90:
d9:9c:44:3a:67:8d:f4:25:ba:b8:eb:3f:fb:f9:b6:
cb:ca:00:63:e8:de:3c:88:6f:9a:57:13:25:bd:3b:
0a:22:fb:fc:0c:9c:2f:28:37:e9:b5:98:ce:b3:ac:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:B9:F3:91:86:68:B2:67:75:51:F8:37:7E:CD:AC:20:38:6F:83
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:8c:fc:8b:72:db:20:44:ec:25:9f:75:e2:d2:26:e9:f2:
4c:12:4d:f6:69:7e:b5:e8:a3:1d:42:55:92:c0:3f:5c:94:1d:
0e:b1:2b:d7:1e:b9:6b:02:bf:e2:e3:f1:85:fa:45:31:71:4a:
c7:2e:23:b1:22:0f:e6:ba:e7:b2:97:c5:61:3a:0e:71:7f:d8:
b9:fe:79:1e:87:b7:bc:09:1a:2c:d0:89:44:f0:33:05:80:34:
bf:6b:30:f1:fe:67:f6:3a:3b:b8:a8:43:72:8d:c6:3c:7f:58:
42:10:23:88:7b:39:be:7b:b9:ed:15:0c:a8:43:6c:64:45:87:
32:27:42:ca:c0:5d:8c:38:45:74:52:ea:99:ae:26:b8:0b:2e:
bc:7f:ae:03:b5:7c:a0:9f:e7:d8:69:ad:12:fa:f8:23:70:05:
0c:df:bf:c7:87:de:c5:b2:bb:4d:f1:83:e9:64:ea:bf:91:95:
c1:14:43:db:1d:28:91:da:56:2b:08:50:e8:94:b0:59:0b:92:
23:9b:67:c0:25:30:c3:3b:d1:db:9c:db:e8:20:8e:19:6a:56:
33:13:82:51:7c:9a:cf:90:26:70:37:ed:f8:3e:7d:41:a9:d7:
83:5b:48:ca:64:43:7a:f3:a9:31:8d:0f:22:1b:0f:01:01:40:
9a:7c:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:28 2025 by rpki-client