Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: +0gzSIzp+4/aqjhjd2Yc/bxCFIpbR4kdibF4vm3Cxtg=
Subject key identifier: EF:FD:3B:F9:BC:2E:53:D8:40:03:9D:C8:CD:05:2F:25:D9:3B:BE:16
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 0199FD6AE7D4FB9F2069428C7B5DB24CD947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 16FA
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: S5iYlT9B4+pIpAtqW9o2VO4VIlmeZx8CDduRJBq0j8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e7:d4:fb:9f:20:69:42:8c:7b:5d:b2:4c:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=effd3bf9bc2e53d840039dc8cd052f25d93bbe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:12:d0:f1:28:06:fd:3f:5d:02:bd:b8:ac:
d8:ac:98:2a:9f:5e:8b:57:a7:64:3d:ae:ef:fb:2a:
c9:13:df:6a:3c:05:00:64:e8:87:85:41:f8:c9:27:
bb:44:09:bc:b6:ac:ea:71:5f:50:27:e2:16:03:d0:
14:7a:ee:f2:70:bb:1e:14:0a:41:72:4d:86:6c:59:
8d:5d:5b:bf:e0:80:29:66:3d:68:c2:ed:c0:36:9d:
5f:30:19:74:43:08:ed:af:40:5f:73:63:92:3f:c6:
b4:fb:56:c2:c1:b1:10:8e:9d:30:37:e8:fe:e4:c9:
cc:0d:21:da:46:14:a1:f1:82:68:d5:35:ad:f7:10:
f2:46:11:ec:7f:6d:20:c8:c5:3d:45:bd:13:55:11:
08:46:4c:b0:d5:66:9b:4f:2e:be:3b:93:b6:5b:e3:
39:cf:70:f2:1d:8a:14:f3:33:7f:bb:36:a2:43:35:
26:6a:40:8f:76:09:f9:0f:4e:55:e9:36:98:8e:35:
1c:fa:69:ad:79:6f:e6:b5:98:4c:72:d9:80:ac:51:
0d:57:25:41:20:da:93:85:18:90:c6:4b:6c:5b:3c:
a3:8c:f1:aa:55:91:5b:19:ef:a8:c7:17:85:ab:8e:
ed:7b:40:2f:44:d4:55:c7:02:f7:ed:24:7d:04:19:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:3B:F9:BC:2E:53:D8:40:03:9D:C8:CD:05:2F:25:D9:3B:BE:16
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c4:62:73:7e:ed:90:d9:0c:40:8a:11:e0:23:53:d8:6f:d5:
f6:f1:da:61:35:e8:1e:b2:22:7d:9f:d3:91:c3:29:b4:5c:08:
a1:67:7e:96:3f:11:13:dc:cc:e5:c1:ef:b1:65:df:2c:27:e0:
97:15:76:78:5b:86:8c:ef:2e:41:f2:96:f4:05:01:ac:09:a0:
77:81:a6:97:d4:62:2a:e2:a3:1f:59:46:35:20:05:59:88:59:
e8:bd:d4:70:8b:4c:bf:ff:f2:bc:52:7e:99:a8:31:4c:b4:3e:
2b:cd:0d:70:7b:aa:cc:db:68:5a:4a:8c:93:28:b5:21:30:7d:
b7:f7:8c:76:18:75:92:9b:05:61:11:64:48:15:ba:f3:d9:61:
c6:16:e7:d9:0e:15:e1:16:94:d1:1b:e6:90:58:cb:6f:d0:ab:
8c:05:f4:c4:77:0c:1d:84:1a:53:94:47:08:6b:51:a0:c2:28:
0d:f1:a3:53:1e:fc:53:76:3a:75:7d:73:f8:00:06:fa:f0:81:
dc:e1:9b:e4:0e:6d:cd:41:b5:bb:77:d2:b0:41:0e:cc:6c:5e:
80:fe:44:a9:48:0d:54:0a:4a:a0:92:b5:b9:2e:67:15:b0:27:
3d:b5:d3:db:72:d3:41:f7:83:92:7d:76:7c:73:6e:cf:a9:49:
ca:e9:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:30 2025 by rpki-client