Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: DlwuwQncNNdNRbnPoKYGXeUBbR6Y4t7NSSHlBgirsdw=
Subject key identifier: DE:B1:75:D9:A2:C2:B5:E1:8A:A0:86:69:7C:1A:0A:DD:51:99:21:CC
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 0199239FB7CA4D126AD3CF77B6E02D63B674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: gHzKyDg9l6ktbSP4n5hpRB+ulL+mVYuUsq6Td1uLpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b7:ca:4d:12:6a:d3:cf:77:b6:e0:2d:63:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=deb175d9a2c2b5e18aa086697c1a0add519921cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:73:25:2b:46:33:79:99:e5:09:90:1a:5f:
a7:76:49:13:3e:14:a5:2b:36:41:1a:82:0e:ab:f5:
20:d4:ff:f5:ae:a8:fc:b4:31:f7:82:1e:86:4c:5c:
30:a1:5c:ba:a8:ff:ae:67:c5:3f:9d:76:76:1f:12:
8f:40:5e:57:df:d8:39:b6:e0:99:03:4b:f1:f2:f2:
54:fa:58:a5:39:eb:a0:20:3b:df:54:5b:9c:08:de:
8f:fd:c9:40:cd:41:e4:73:b1:58:04:22:87:5e:10:
a7:62:82:da:5a:fc:f7:4a:b8:2b:9b:ef:9e:66:fd:
ec:fa:47:45:af:cc:d2:15:f3:75:40:52:76:ca:ee:
cf:4a:4d:5b:dc:ce:bd:4a:44:10:1b:e4:b1:16:bf:
e4:bb:b7:7e:0e:6b:82:8e:ab:05:4b:dd:d9:e5:fb:
fc:e5:36:3f:21:be:69:0f:3c:23:c6:15:8b:5a:7f:
8a:85:fd:bb:cd:d3:9a:a5:70:23:e9:a6:f7:bd:ec:
2d:3d:93:6f:86:7a:b0:67:2f:2d:88:2e:88:92:f1:
59:9b:db:ae:bd:e0:39:1d:42:a7:1d:d5:12:dd:67:
1a:01:dc:e2:32:af:33:c8:04:cd:4c:63:23:ab:13:
8a:bd:a7:99:9a:cb:c5:c4:40:80:d1:94:ad:78:0e:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:75:D9:A2:C2:B5:E1:8A:A0:86:69:7C:1A:0A:DD:51:99:21:CC
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:37:12:44:5a:03:18:c3:85:2d:67:f7:13:7c:de:ae:0d:28:
74:cf:4f:6c:33:c2:26:69:05:d8:bb:a7:c1:04:d1:3d:3c:f7:
a8:33:3f:88:7b:e6:6c:29:5b:74:a4:7c:e2:3a:31:6e:b9:52:
43:93:10:c6:bc:45:ec:49:89:6f:a7:44:28:43:56:55:a4:0a:
3b:0b:8c:8e:28:1a:bc:95:b5:d0:af:d3:d9:ba:d9:0d:90:86:
47:55:38:e9:b9:23:0b:1b:78:f9:44:a6:57:78:8a:dc:b3:c6:
f2:a1:54:c4:66:20:84:0c:f7:e3:32:5c:d3:7d:af:ae:5f:fb:
4f:a7:ea:ca:5d:39:b8:21:0f:a3:58:40:8b:f5:d8:72:12:86:
fc:ba:f2:61:22:79:62:fd:c3:bb:c5:60:74:35:9b:ae:15:18:
cb:43:97:84:0b:1d:2b:3e:6f:0a:73:0e:db:79:d3:e4:2e:fe:
c9:d5:25:18:a1:5b:61:50:38:72:0c:3b:79:bf:70:1d:57:fd:
80:ef:56:d2:5d:2f:ac:c5:e8:0c:f3:41:d7:b2:cc:6b:06:df:
0d:69:2e:10:59:79:24:84:64:fa:7f:5d:71:09:ed:51:c9:80:
7f:58:75:c8:63:ee:2e:ce:44:74:9f:f2:df:42:53:46:0f:03:
1a:50:91:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn7fKTRJq0893tuAtY7Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmM0OThlZGM0MTg5NTg0ODc0YjdjYjQ1MDI1ZWY1NDI0
ODFiNmEwHhcNMjUwOTA3MTAwMTMzWhcNMjUwOTA4MTAwMTMzWjAzMTEwLwYDVQQD
EyhkZWIxNzVkOWEyYzJiNWUxOGFhMDg2Njk3YzFhMGFkZDUxOTkyMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XJzJStGM3mZ5QmQGl+ndkkTPhSl
KzZBGoIOq/Ug1P/1rqj8tDH3gh6GTFwwoVy6qP+uZ8U/nXZ2HxKPQF5X39g5tuCZ
A0vx8vJU+lilOeugIDvfVFucCN6P/clAzUHkc7FYBCKHXhCnYoLaWvz3Srgrm++e
Zv3s+kdFr8zSFfN1QFJ2yu7PSk1b3M69SkQQG+SxFr/ku7d+DmuCjqsFS93Z5fv8
5TY/Ib5pDzwjxhWLWn+Khf27zdOapXAj6ab3vewtPZNvhnqwZy8tiC6IkvFZm9uu
veA5HUKnHdUS3WcaAdziMq8zyATNTGMjqxOKvaeZmsvFxECA0ZSteA76iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6xddmiwrXhiqCGaXwaCt1RmSHMMB8GA1UdIwQY
MBaAFHm8SY7cQYlYSHS3y0UCXvVCSBtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDIt
ZTNiNDA2Yzc5ODBlLzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDItZTNiNDA2Yzc5ODBl
LzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDcSRFoD
GMOFLWf3E3zerg0odM9PbDPCJmkF2LunwQTRPTz3qDM/iHvmbClbdKR84joxbrlS
Q5MQxrxF7EmJb6dEKENWVaQKOwuMjigavJW10K/T2brZDZCGR1U46bkjCxt4+USm
V3iK3LPG8qFUxGYghAz34zJc032vrl/7T6fqyl05uCEPo1hAi/XYchKG/LryYSJ5
Yv3Du8VgdDWbrhUYy0OXhAsdKz5vCnMO23nT5C7+ydUlGKFbYVA4cgw7eb9wHVf9
gO9W0l0vrMXoDPNB17LMawbfDWkuEFl5JIRk+n9dcQntUcmAf1h1yGPuLs5EdJ/y
30JTRg8DGlCRow==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:05 2025 by rpki-client