Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: bCYVohi24saLsqtfo4PYcF59/BEmNKBQz/R8im0QYSM=
Subject key identifier: 26:1A:FD:04:6B:38:41:D0:C5:EC:F7:D3:6C:F9:D6:23:7B:53:93:D2
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 0199FE1056935343D7541C985FCA9F7B8299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 0171
Signing time: Sun 19 Oct 2025 20:01:47 +0000
Manifest this update: Sun 19 Oct 2025 20:01:47 +0000
Manifest next update: Mon 20 Oct 2025 20:01:47 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: FTbR4FSa5fgQJxrPEkW7/sfiuIbEA5YJhlXSUUk/Bgs=)
2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:56:93:53:43:d7:54:1c:98:5f:ca:9f:7b:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Oct 19 20:01:47 2025 GMT
Not After : Oct 20 20:01:47 2025 GMT
Subject: CN=261afd046b3841d0c5ecf7d36cf9d6237b5393d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:13:52:8c:6d:8f:5a:ca:06:8c:19:eb:a6:
8c:87:b9:53:31:f9:62:06:4d:91:7d:51:8c:3b:69:
69:2c:3b:f6:42:a3:7b:20:e1:48:6a:45:b4:90:4f:
cd:5c:45:b4:9f:a5:4c:67:75:fa:70:5b:de:d1:d3:
7b:b8:3d:90:1b:8a:e8:75:70:1d:43:58:e9:e6:20:
7e:95:88:6c:cd:04:c3:9c:ff:ff:61:e2:9e:00:2d:
0d:41:08:dc:ed:6c:02:99:83:84:29:36:e8:38:6d:
8a:c6:b6:fc:70:39:ff:e4:52:28:3e:3c:6d:e8:8d:
68:3e:6f:00:6d:25:41:f6:be:c8:ee:75:73:3d:63:
af:39:d6:bc:0e:74:70:11:c1:5d:73:3c:57:2b:61:
20:2e:8b:1e:e7:f8:68:cf:cd:d4:75:f6:56:2b:47:
a9:e6:7e:2d:a8:c4:66:c6:bf:af:b9:b2:ad:d0:9d:
13:67:e6:1d:63:16:45:3e:e6:12:c2:3b:d4:9b:97:
13:15:44:49:da:2c:79:81:54:c5:ad:3b:26:1d:ee:
ba:90:78:8b:15:5f:94:8a:cb:fc:89:9e:8c:d9:89:
55:d5:a6:b9:6d:20:8f:a7:ad:32:11:1d:3d:36:59:
74:e8:46:73:3d:a7:1f:bd:4b:05:96:60:64:c5:af:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:FD:04:6B:38:41:D0:C5:EC:F7:D3:6C:F9:D6:23:7B:53:93:D2
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3a:4b:6b:93:17:dd:f5:fa:34:12:d0:62:49:94:4c:f9:b4:
79:5e:6d:67:18:8a:ed:dd:b5:c9:dd:2c:fb:6d:ad:05:1b:45:
57:4f:1d:2f:dc:93:8b:a5:d1:90:89:c2:6b:5e:9c:65:68:0d:
6f:7c:7f:fd:13:e2:a3:10:5f:ad:10:f9:92:32:95:80:15:02:
73:0e:64:9e:15:8d:e3:9e:29:c9:17:17:bb:5d:3a:51:15:5e:
04:02:fb:c0:94:5a:83:9e:96:00:24:84:d2:14:f3:74:91:d3:
26:f1:e5:c7:44:b1:2f:9b:ef:92:0c:2d:f9:2b:90:6e:51:e1:
3c:79:4f:14:ed:72:5b:9f:25:6b:8b:e8:71:3e:09:d9:80:1e:
01:d9:1d:32:ba:87:6d:ae:b3:40:ed:94:60:d4:97:4b:22:22:
79:85:d4:f6:3d:8e:8d:dd:00:42:55:04:4d:d6:b7:78:42:7d:
e1:a6:6a:b8:1c:c9:20:cd:7f:31:87:3b:3b:b5:81:1e:6c:8e:
2d:e3:bc:85:c7:a4:39:b1:3f:85:19:d6:0d:47:28:b0:5e:88:
ee:34:d5:c1:0d:56:13:ea:38:99:fd:2c:d2:87:e7:37:aa:40:
e4:f7:f4:93:09:f5:64:dd:a2:b7:12:14:07:7d:ef:ec:bb:38:
84:3d:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:16 2025 by rpki-client