Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: 79GxkPgUmVo824nBQLpvjo18iWHdaud8rA82oIRRMFc=
Subject key identifier: 21:14:42:7A:E9:EB:E7:A9:6D:0A:30:D9:18:FD:84:7C:EC:AD:A0:A1
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019A00A33E9354E15E087056F37B36731D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: 012D
Signing time: Mon 20 Oct 2025 08:01:29 +0000
Manifest this update: Mon 20 Oct 2025 08:01:29 +0000
Manifest next update: Tue 21 Oct 2025 08:01:29 +0000
Files and hashes: 1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: GquCn0Oy+lT+pVG8rgJZvEg3o9T28gMiGtKN9rrLp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:3e:93:54:e1:5e:08:70:56:f3:7b:36:73:1d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Oct 20 08:01:29 2025 GMT
Not After : Oct 21 08:01:29 2025 GMT
Subject: CN=2114427ae9ebe7a96d0a30d918fd847cecada0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:b4:3d:23:cd:59:01:04:15:4e:d9:ca:61:
f2:94:a4:26:37:2d:f7:ad:84:31:8a:c9:47:66:c5:
ca:52:7b:39:c5:3e:0b:e2:2c:87:d4:c7:b3:b1:67:
00:da:b6:30:61:00:ea:69:27:8e:a1:cf:20:81:1b:
c3:60:5c:77:ec:40:c1:5a:91:92:5b:7c:79:06:59:
e7:ab:b3:bb:e0:38:af:ee:06:cc:1c:96:f9:f0:ef:
52:d7:76:b0:8d:73:a7:1a:d9:56:d3:c1:b8:db:ca:
7a:e8:4b:75:bd:cc:7d:f4:bd:24:d1:44:72:c6:a1:
e1:37:93:91:e0:80:ca:a9:bd:fa:4c:fc:ce:1f:06:
85:38:b8:20:15:b5:7d:c9:ff:f1:f6:62:7d:39:25:
ff:3d:c4:7e:b4:55:93:1b:c2:10:ff:c3:bf:27:0b:
f6:1e:95:e4:0e:98:ce:48:a1:21:0f:b5:38:fd:85:
df:cc:57:db:fc:76:b3:4d:20:8f:52:2c:f5:1e:85:
0d:0b:92:47:ea:52:52:d5:4c:66:c1:ce:33:6c:6f:
c3:30:cb:ee:76:44:7c:44:8a:89:fa:bf:b4:16:46:
3b:77:79:fe:bf:b7:1f:b6:b6:09:d8:1b:6d:74:a8:
cb:31:3d:5b:b3:5f:d7:6d:53:b1:84:31:47:c9:f4:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:42:7A:E9:EB:E7:A9:6D:0A:30:D9:18:FD:84:7C:EC:AD:A0:A1
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:54:73:74:70:59:d2:5f:a8:41:dc:13:0e:ab:38:ac:57:73:
e7:0e:e7:0e:39:d0:a2:6e:dc:dd:71:5b:06:4c:75:a5:ad:eb:
d8:fa:29:54:78:69:73:80:a9:fa:c9:56:91:42:6e:b1:09:0e:
41:fb:52:e8:0d:3d:49:8d:ab:10:2a:c2:66:aa:52:db:f7:ac:
c3:59:30:81:41:95:d6:6a:2e:70:26:35:a8:e6:60:d5:7f:1c:
ac:79:3c:5e:fd:24:d4:14:b0:95:8f:42:4a:b0:3f:dc:e6:b9:
55:fc:b6:fd:cc:a9:21:10:7f:c2:29:ff:c4:7b:04:92:5f:1c:
01:27:29:1f:9c:00:5e:6c:d7:80:ec:1a:f3:a0:00:2b:87:1e:
f4:ec:d9:1c:fa:7a:7f:30:60:c3:02:80:40:19:5a:3e:4c:e7:
c3:0b:db:7b:1c:ca:9f:1d:c1:38:f5:1f:23:ba:77:6a:8c:ad:
77:df:4b:8d:51:51:db:cb:ec:6d:a6:91:84:41:b9:77:16:d3:
02:a9:c4:b4:e9:19:a4:54:ee:78:57:0b:29:06:7b:96:37:f8:
e1:5e:3d:ab:5f:ce:62:0d:0f:32:7d:98:2d:f8:4c:2e:b3:8e:
37:20:8c:be:5e:7c:e5:83:64:1c:a6:89:b7:60:a2:f1:09:01:
7a:60:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:17 2025 by rpki-client