Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: aEIiaVN2HZ+1SIAF0FYTt9doV2YsQMa/gPSLI59lzHA=
Subject key identifier: F2:CB:36:13:FA:E2:2C:FB:DA:B0:FD:5B:2A:BD:3B:E8:B6:8F:8D:8A
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01984964FC66C3761CABF05007FA4C9BBF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: +FGLw6evOC9p2wghSYhpkLHYH+ZfQhkogwUef1uZIqw=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fc:66:c3:76:1c:ab:f0:50:07:fa:4c:9b:bf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=f2cb3613fae22cfbdab0fd5b2abd3be8b68f8d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:91:96:9f:67:01:80:6b:88:ba:f9:18:59:
17:bc:12:6c:77:4d:93:7f:c3:01:fc:19:5d:01:fb:
a4:31:24:18:ea:b7:b1:3d:8e:d5:25:fa:65:73:72:
49:5a:ee:f9:66:6f:e5:2c:63:42:c8:cc:b7:60:14:
85:aa:ec:51:f0:24:92:33:df:df:e4:77:bb:6d:01:
73:80:50:68:84:37:78:bd:d2:87:5a:de:fd:9e:07:
2d:2b:f7:1c:0b:e7:d4:59:c1:be:85:83:e9:63:d2:
25:3b:f5:15:69:a5:46:35:01:c2:8b:e5:36:2b:4c:
c5:18:18:a2:71:95:34:64:16:d4:eb:a0:a7:6a:eb:
e1:a6:25:9b:81:fb:94:2c:0b:50:4f:49:71:cd:ec:
63:9b:1e:7d:be:b7:3d:4d:99:20:60:d7:a4:eb:f7:
a0:64:e0:c6:ae:84:61:07:c1:31:61:af:71:1c:4a:
4e:3e:69:81:d1:85:1d:9e:4d:f2:fa:d4:b0:22:8e:
b9:7e:de:61:f5:d9:f6:d3:44:6d:76:99:8a:47:32:
98:92:fa:f5:a1:4d:f0:6b:d3:86:c0:39:30:21:a7:
1c:b3:7c:db:03:2a:94:2b:8a:18:0c:80:8b:8d:09:
b6:62:c1:3d:db:2f:46:65:a4:9f:d2:45:c4:c1:56:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:36:13:FA:E2:2C:FB:DA:B0:FD:5B:2A:BD:3B:E8:B6:8F:8D:8A
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:fe:e0:ca:86:60:83:a8:d4:5e:63:ff:6e:32:da:87:96:
26:a4:ae:a6:17:4b:ac:bd:04:48:a0:46:ec:b2:b6:b7:53:77:
d3:a9:14:d4:0d:89:99:2e:7d:98:27:ab:92:cc:44:39:37:d3:
ee:e3:fa:66:40:c7:ff:83:ce:ef:48:a7:8b:85:57:6a:1c:ca:
34:39:ac:b4:00:b6:00:07:59:2f:5d:bb:6f:c3:75:ca:b5:6d:
a3:f5:e5:aa:da:8c:20:50:49:e1:cd:0d:50:4e:ae:18:38:75:
33:03:8f:2e:7a:aa:01:fd:33:e9:f0:f2:97:88:5a:d8:bd:19:
02:02:78:f6:31:3e:ea:b5:b6:79:7a:7b:16:b1:cc:0a:91:96:
44:a3:87:47:1b:08:b4:8b:48:62:17:88:54:fc:ca:ed:01:40:
45:2d:7b:cf:b3:9f:f5:27:85:76:f7:7d:67:b4:ad:2a:b1:4e:
b8:be:c2:72:5f:bc:20:a9:e2:3e:43:3c:ab:f3:cd:d9:83:b9:
c6:40:bd:9c:fd:ad:ce:69:21:ba:1a:fd:50:ef:df:a3:8c:63:
e2:9d:2f:3d:53:b7:3e:de:fa:5a:72:1b:98:05:23:5c:f9:7f:
f8:e5:f3:e7:95:d8:c4:0c:c6:94:90:27:16:c8:31:9a:aa:69:
57:69:b5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZPxmw3Ycq/BQB/pMm78wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjUwNzI3MDEwMDExWhcNMjUwNzI4MDEwMDExWjAzMTEwLwYDVQQD
EyhmMmNiMzYxM2ZhZTIyY2ZiZGFiMGZkNWIyYWJkM2JlOGI2OGY4ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxORlp9nAYBriLr5GFkXvBJsd02T
f8MB/BldAfukMSQY6rexPY7VJfplc3JJWu75Zm/lLGNCyMy3YBSFquxR8CSSM9/f
5He7bQFzgFBohDd4vdKHWt79ngctK/ccC+fUWcG+hYPpY9IlO/UVaaVGNQHCi+U2
K0zFGBiicZU0ZBbU66CnauvhpiWbgfuULAtQT0lxzexjmx59vrc9TZkgYNek6/eg
ZODGroRhB8ExYa9xHEpOPmmB0YUdnk3y+tSwIo65ft5h9dn200RtdpmKRzKYkvr1
oU3wa9OGwDkwIaccs3zbAyqUK4oYDICLjQm2YsE92y9GZaSf0kXEwVZoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLLNhP64iz72rD9Wyq9O+i2j42KMB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYr+4MqG
YIOo1F5j/24y2oeWJqSuphdLrL0ESKBG7LK2t1N306kU1A2JmS59mCerksxEOTfT
7uP6ZkDH/4PO70ini4VXahzKNDmstAC2AAdZL127b8N1yrVto/XlqtqMIFBJ4c0N
UE6uGDh1MwOPLnqqAf0z6fDyl4ha2L0ZAgJ49jE+6rW2eXp7FrHMCpGWRKOHRxsI
tItIYheIVPzK7QFARS17z7Of9SeFdvd9Z7StKrFOuL7Ccl+8IKniPkM8q/PN2YO5
xkC9nP2tzmkhuhr9UO/fo4xj4p0vPVO3Pt76WnIbmAUjXPl/+OXz55XYxAzGlJAn
FsgxmqppV2m1xQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:29 2025 by rpki-client