Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: teL8iJnyY1gXqAi3/dKhjFSlEcaAxdsWFpC5rXE76FY=
Subject key identifier: 89:79:15:F7:38:59:CE:5D:5E:45:76:F6:B1:F2:CA:90:6F:96:3B:7A
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 0198451A545167BB6931BB96C3EFE8EE0272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0F67
Signing time: Sat 26 Jul 2025 05:00:09 +0000
Manifest this update: Sat 26 Jul 2025 05:00:09 +0000
Manifest next update: Sun 27 Jul 2025 05:00:09 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: t5HcNgiecpgdTDr0QtZX9lLtieEpxPU5KuV9lW8jMC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:54:51:67:bb:69:31:bb:96:c3:ef:e8:ee:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jul 26 05:00:09 2025 GMT
Not After : Jul 27 05:00:09 2025 GMT
Subject: CN=897915f73859ce5d5e4576f6b1f2ca906f963b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:88:0b:29:51:35:06:8e:be:f6:1f:51:e2:
b0:64:a2:8a:1f:a4:82:51:98:41:5f:6d:00:31:a5:
00:cb:73:74:54:e2:93:46:6d:9f:9c:f0:89:9e:22:
8a:63:62:b1:09:1c:d9:10:84:e9:a9:41:87:61:df:
14:f0:c2:48:43:e4:12:7e:09:ee:e0:d3:70:28:52:
50:8f:89:41:f2:e5:9f:15:ef:8c:04:36:d5:3b:5d:
8b:14:a5:43:d8:bf:24:48:9c:e7:57:07:b1:36:04:
a1:f5:e3:d8:ed:70:45:71:6a:13:d0:fb:b1:13:28:
51:44:2d:49:07:65:96:b3:22:1e:b2:22:b9:27:3d:
03:c1:04:26:7a:ee:2d:39:b7:e7:3a:aa:d0:a4:a4:
c6:56:0a:fe:8f:f2:3d:78:2e:08:11:30:0a:34:0e:
1a:e7:4e:ba:b2:38:27:00:0d:be:0a:37:0c:7b:81:
e1:df:cc:77:93:44:60:9a:eb:26:1d:20:8a:c1:1f:
a1:04:5f:67:35:0d:4a:b9:ef:18:ae:ce:d1:7f:b4:
59:c2:21:2b:fb:76:11:3e:56:3c:f0:28:a0:00:bf:
f7:66:30:3d:1e:64:03:33:e3:11:35:73:63:02:d4:
59:55:8d:03:6b:b9:22:30:af:cc:6d:89:8a:1c:7f:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:15:F7:38:59:CE:5D:5E:45:76:F6:B1:F2:CA:90:6F:96:3B:7A
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:7d:96:e9:e9:86:42:6a:a3:fb:e2:99:26:25:b0:4e:57:
e3:1f:b4:6e:4b:fe:1b:70:7a:8f:c9:06:73:cf:c8:7f:81:8d:
7d:4d:b6:3c:d9:b7:8a:be:f0:6e:c8:d9:5b:d9:7d:49:a3:ec:
68:b8:5d:c7:89:f3:f5:f9:b2:ef:1a:0b:f2:68:a6:68:eb:b8:
e2:a0:e6:69:c7:7c:49:d8:13:0d:05:ea:3c:d3:bc:e5:ae:17:
9d:54:9d:56:7a:1c:3e:ee:ad:f4:14:cb:85:1e:87:fe:94:f8:
b6:15:6c:e6:e4:82:40:e9:74:fc:26:a8:31:48:0a:bc:75:cd:
95:a1:4f:ee:79:ff:f8:0a:74:ba:cd:e1:74:3c:82:22:e1:6c:
1f:a2:e6:d5:67:68:e8:d0:bc:41:68:71:c5:5b:54:9c:cd:20:
80:fc:a3:66:ac:b9:c7:44:c2:47:e4:f7:90:8d:5f:0e:47:21:
c5:c5:9d:28:d0:dc:9e:67:83:20:85:63:c7:c8:59:26:f8:e9:
28:6d:bc:4e:4b:8a:c3:67:b2:79:f7:2d:f6:aa:08:82:6f:d2:
8b:f9:98:b0:49:ad:4b:a2:9b:22:2e:45:b9:48:ff:e8:8f:fb:
fe:d2:e0:06:ac:55:38:9d:e6:21:51:be:78:1f:3e:0a:14:ad:
55:fb:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:12:46 2025 by rpki-client