Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: 9JBHocVslEAMf/qlWPK27o10J82PaEFZrK18cTgxtlk=
Subject key identifier: 3E:42:FA:CE:D3:47:1D:D5:9D:58:C6:B0:B6:26:9F:0D:0F:69:0F:DD
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 0197B6D799FD60E6409B1781A63ABD56F6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 43
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: GZni6P+rl7BZuco3nsUE9ddVrjE+lwub3aQOA4gnQ+c=)
2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:fd:60:e6:40:9b:17:81:a6:3a:bd:56:f6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=3e42faced3471dd59d58c6b0b6269f0d0f690fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:ed:73:23:a6:86:5d:97:73:ea:c0:7a:0f:
7b:dd:dd:d4:74:ab:24:34:6c:fc:70:a7:3f:f7:df:
30:e9:69:f3:08:e3:a0:b3:4b:fa:40:57:cf:88:d1:
4f:dd:68:6f:75:fe:45:e6:35:48:0c:f2:75:2b:3c:
d0:51:dd:b5:72:54:e3:3c:08:19:da:c0:fa:40:a0:
a9:c0:65:d9:aa:95:9d:52:ee:00:92:ac:b4:90:26:
c5:3d:63:11:89:08:98:fb:cf:9c:e8:e8:fb:97:d7:
a5:f6:c6:39:97:0e:86:ed:b4:14:43:df:86:ca:91:
be:fb:d5:98:c1:14:70:5d:8b:77:56:d3:e8:04:21:
fe:7f:6e:93:29:c4:4c:96:b1:33:9c:aa:a0:86:6f:
3b:1e:b4:4d:24:bb:a6:7a:f9:07:74:1e:22:31:3c:
d4:53:6c:6c:87:a4:bf:70:cb:e4:54:da:d1:7f:f9:
f5:bb:75:59:b1:9a:6e:6e:76:a0:91:be:4e:ca:09:
ae:bf:42:d9:77:b3:a9:26:30:8a:18:68:a6:66:1e:
4d:e9:ad:62:b9:d2:fe:12:c0:36:a4:81:21:c7:ea:
ba:fe:de:22:67:a3:2c:26:41:a4:eb:48:63:1c:44:
f4:b5:6e:e4:3b:70:55:78:b0:ae:50:22:bf:55:b3:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:FA:CE:D3:47:1D:D5:9D:58:C6:B0:B6:26:9F:0D:0F:69:0F:DD
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:66:d7:8c:8b:05:4e:59:16:6c:9d:30:4e:b2:73:bb:ba:
1e:19:40:59:1a:c4:5d:80:a3:46:69:ac:23:c5:cd:04:af:89:
41:47:2c:cd:37:51:45:59:47:f3:15:3a:d8:36:85:df:31:3b:
ce:0b:25:a3:5c:ec:bc:39:77:8a:89:19:c6:b6:8a:92:e8:40:
66:de:e4:c0:fb:7c:6c:32:84:69:0f:5a:b6:6d:97:ec:d7:b5:
ea:5e:71:0e:61:cd:b2:51:71:fe:5f:fe:fd:0f:ff:a0:b7:f2:
1f:b3:c4:ef:90:70:ad:3d:73:df:36:31:c8:d4:af:8e:44:7f:
04:97:96:fe:cd:1b:1c:f2:53:c5:2a:6b:e5:a0:f3:88:0e:8d:
f9:12:23:ac:1a:6a:2e:c3:e5:0b:ac:47:f4:c1:1a:1b:d3:f0:
d3:c4:56:08:e4:a1:c3:a2:ff:18:50:20:aa:7c:72:fb:5e:de:
c8:e4:ad:a2:ee:8a:85:ec:6a:60:ff:9b:63:15:4c:1f:20:17:
a3:43:c8:51:b7:56:32:c6:a0:6a:1a:30:71:b3:ca:51:68:b6:
1b:62:b0:30:46:e3:01:5e:d5:c5:a3:85:ea:9d:05:33:4b:9e:
51:93:0b:cc:09:8d:e4:1b:29:d2:58:0a:fa:37:f4:4f:91:2c:
19:a2:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:02 2025 by rpki-client