Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: /EcDNM6mQWifGdSVWsqYfxYIPaCWETcd2fMrbM1ayTo=
Subject key identifier: 82:DB:C0:3D:5C:9B:25:0E:FC:EE:16:BE:85:E3:8E:09:62:45:10:09
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 01984777B83931DC8C84EA080800104C58B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 16:01:24 +0000
Manifest this update: Sat 26 Jul 2025 16:01:24 +0000
Manifest next update: Sun 27 Jul 2025 16:01:24 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: S+7f5Hl+SmBb5/SYTY5+rzpTTINEJ2nZhzz0FJ+nc/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:b8:39:31:dc:8c:84:ea:08:08:00:10:4c:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jul 26 16:01:24 2025 GMT
Not After : Jul 27 16:01:24 2025 GMT
Subject: CN=82dbc03d5c9b250efcee16be85e38e0962451009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:69:17:ee:48:29:af:47:ff:46:3d:e3:88:
f7:f9:65:d4:fe:ab:26:26:c7:c8:5b:71:23:30:83:
03:8d:24:28:e9:23:f1:e0:25:3d:da:88:ea:c6:99:
22:c8:f2:53:d7:9c:94:60:6c:a0:8a:43:1a:a2:4d:
f3:1c:89:1c:55:2a:3c:1c:5d:11:c3:d8:ad:95:df:
33:a5:b8:79:fc:0e:16:57:04:99:96:8a:1f:cd:57:
8c:dd:31:3e:01:66:80:0d:94:af:f3:39:f8:a3:8d:
6c:09:d7:21:7e:f2:e0:c8:ce:33:60:e6:bd:c8:96:
91:f6:0b:aa:16:86:11:a4:3b:4a:35:5f:4e:bd:7c:
39:3d:ee:b1:06:8c:0d:de:35:8e:ec:2f:20:f3:e4:
b2:f0:3f:a8:55:0c:df:dd:18:3f:dd:22:f4:40:5f:
62:cb:6d:26:9a:10:f0:b6:b4:ed:02:75:e7:18:d7:
cc:2a:09:f5:d3:21:03:97:3f:7b:b1:25:99:8d:02:
8c:7a:9c:29:f4:fe:e7:19:e9:40:8b:92:c9:88:9f:
9b:b0:38:c6:fa:1d:01:d3:5a:2d:1e:6f:bc:0e:12:
11:a0:39:3b:7f:99:bc:35:27:85:7c:3f:3c:ff:44:
b3:3e:2d:14:c7:2b:61:3b:74:da:18:5d:81:85:7d:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DB:C0:3D:5C:9B:25:0E:FC:EE:16:BE:85:E3:8E:09:62:45:10:09
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7e:fe:d8:58:6a:63:b4:a8:57:3c:4a:88:21:b1:c8:8d:51:
68:ff:38:74:0c:a2:d1:4d:6d:2f:53:84:6c:f0:55:72:97:e4:
72:cd:87:01:fb:be:30:e0:e3:6a:a2:c2:f7:10:81:49:d8:2e:
b6:50:19:da:74:d4:07:2e:6c:14:46:51:6e:7f:f0:9d:52:17:
c7:93:f3:96:55:2d:fe:15:92:2c:44:25:b2:7e:ad:14:72:29:
33:b7:eb:89:9e:ff:08:aa:7b:73:e5:35:84:fd:00:e0:32:0d:
e3:dd:43:14:b6:f1:db:8b:52:f1:28:e3:e6:10:39:8e:e8:ed:
83:b5:08:7f:81:e3:b4:06:65:6b:ab:6e:93:24:ea:98:46:4b:
88:ff:d7:c5:ff:82:62:1b:69:47:cd:8c:18:02:36:2e:81:c7:
be:f9:ec:29:4f:56:ed:5c:d6:97:58:be:68:ff:a5:9b:7c:25:
0f:ec:a6:9b:f1:c0:79:0e:67:c8:62:96:8f:42:94:9f:b1:f5:
36:18:4f:f6:78:9d:b6:58:78:fb:0c:aa:e8:2a:27:77:c8:e2:
5e:d9:da:b3:45:18:7e:8b:56:4e:bb:d5:8f:5a:ca:80:f1:e3:
f4:6d:0f:27:6b:59:4e:26:a4:5c:c2:74:ea:c9:a5:0e:26:e1:
23:38:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:08 2025 by rpki-client