Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: R/NrXVyTxjSC8zd31oEx1aCGdBaePQEgwGPijCm3mvY=
Subject key identifier: CC:EE:16:2F:9E:53:EA:54:CC:59:DD:17:C3:CB:82:84:1C:9B:93:48
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 01984965C0083BCC5220DD2A8CBFEC035FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 131B
Signing time: Sun 27 Jul 2025 01:01:01 +0000
Manifest this update: Sun 27 Jul 2025 01:01:01 +0000
Manifest next update: Mon 28 Jul 2025 01:01:01 +0000
Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: pWwNoydwvTx/xWIPmqHR5vjrLnmSuoHDO1Lfub7pCz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c0:08:3b:cc:52:20:dd:2a:8c:bf:ec:03:5f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jul 27 01:01:01 2025 GMT
Not After : Jul 28 01:01:01 2025 GMT
Subject: CN=ccee162f9e53ea54cc59dd17c3cb82841c9b9348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:64:2a:e8:9f:cb:46:6f:82:dd:9b:5a:50:
2d:16:72:cc:6b:0e:bd:72:5e:fb:73:ce:f5:ca:c6:
74:1c:3a:2c:c6:db:b0:91:32:c7:16:10:5f:fc:f8:
a5:8f:39:59:7d:c6:0f:8a:e2:73:19:58:40:db:9b:
fa:2a:a0:6a:ae:f5:a6:30:96:ff:f5:f7:b4:e5:40:
73:91:9f:40:58:f4:89:ef:12:d1:4c:56:02:14:12:
e6:8c:50:4e:99:b0:e8:28:8c:03:42:e9:84:1d:d4:
61:75:f1:7d:b5:6e:29:3d:e6:9a:4c:e3:5d:e9:4f:
b1:89:60:b8:45:a3:6d:1c:1b:82:79:06:bd:93:01:
59:a7:e8:82:b0:94:b4:c5:fb:4d:e3:5d:c1:92:4e:
dd:fc:4d:5f:e5:7c:d3:1e:e2:ce:56:f6:cc:9a:a1:
4e:70:f1:18:f6:32:30:0b:83:04:dd:30:a3:57:b4:
a5:3e:d2:1a:5b:42:77:bd:b8:4d:50:d5:f3:17:a1:
23:10:50:f0:56:b6:f3:f4:bd:ed:94:c6:1a:0f:4c:
3c:85:74:6b:38:dc:2a:2b:56:f1:90:20:48:8e:44:
74:d8:d6:87:a9:34:fc:61:fe:65:ca:a9:c7:b5:98:
e8:88:90:1a:0a:eb:ce:04:48:5c:62:9b:fb:50:85:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:16:2F:9E:53:EA:54:CC:59:DD:17:C3:CB:82:84:1C:9B:93:48
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:3d:85:dd:63:d3:fb:19:2d:0f:31:cc:89:26:aa:9d:f5:
6a:a6:7c:33:4f:fd:d5:4f:45:a6:4b:aa:c8:85:7a:e5:55:49:
ef:25:ae:47:e7:2c:1d:ce:78:8b:c5:69:45:b2:8b:88:1c:78:
9b:25:5b:e9:61:7c:ea:a4:79:d1:2a:fc:22:4c:64:20:23:6f:
d5:63:a6:a9:ca:7a:c2:77:95:e9:2b:91:17:b8:20:75:d3:86:
7e:28:63:0d:ab:0b:4d:01:11:ce:ae:4b:96:41:cb:d1:f9:79:
8c:24:af:4d:49:28:fa:d9:19:ad:e5:2a:f1:15:12:aa:2f:a5:
c9:6f:12:24:8f:ec:a3:79:94:04:9d:a3:43:b3:5e:c1:13:a9:
6c:ff:6f:16:03:5f:a5:c1:42:f8:aa:5f:72:04:f0:30:36:b1:
6e:e2:c4:da:82:c1:0c:a9:e6:b8:ff:0b:ed:9a:a7:a3:cd:f6:
b8:9a:77:35:65:1f:65:23:bd:ab:6b:38:f5:02:5f:f1:67:fa:
9f:f1:82:2f:1d:6a:c1:cc:91:3e:f8:9c:d2:8a:0a:8c:ee:72:
9d:3c:f1:29:11:95:8d:bd:8a:61:10:c5:d4:6a:51:c1:26:63:
79:64:b4:b1:6f:94:32:71:af:ec:81:10:aa:84:60:86:1a:1a:
52:6a:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:11 2025 by rpki-client