Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: PVdGuyni7AKgXjupCMF9mbEQeDd2sFburqWL5DK+pZE=
Subject key identifier: 1E:EF:A9:45:56:6F:73:07:9E:DB:B5:AC:EB:DD:8B:A7:DE:AD:92:FE
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019932A415BB5729DC7385C7CE5C5947F131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 08:00:38 +0000
Manifest this update: Wed 10 Sep 2025 08:00:38 +0000
Manifest next update: Thu 11 Sep 2025 08:00:38 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: dTa9Qas89Qufm+3dFmGWwTcZgZsFCulhdoplfXBCVsA=)
2: qwNz3o7wg_OLUcBSvGiaJQfRhhk.roa (hash: MjkmkNxZSvtubWbKEquRH7ODg918T3yuTch6krUFO2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:15:bb:57:29:dc:73:85:c7:ce:5c:59:47:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Sep 10 08:00:38 2025 GMT
Not After : Sep 11 08:00:38 2025 GMT
Subject: CN=1eefa945566f73079edbb5acebdd8ba7dead92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:63:2a:7c:0c:de:5e:58:ca:5b:90:6a:92:
43:90:2b:82:a1:ce:74:92:35:53:12:e9:a2:3b:10:
a2:fd:e4:f4:76:b1:cb:07:3d:c1:1a:86:ec:b0:16:
04:2e:85:a7:a6:58:d7:78:f0:a8:2e:ae:b3:2a:87:
15:b1:ba:a5:31:2d:da:69:cc:a3:2f:ec:d0:74:b1:
f7:01:72:16:72:4b:15:4b:2e:fd:fe:74:a0:19:0e:
cc:f7:11:0b:d6:5d:e6:26:8c:bc:a2:47:fc:2e:77:
3d:7d:c7:d9:1e:f6:b9:59:7e:62:5a:6c:dd:6d:d7:
01:0c:99:21:9c:7b:27:bf:40:3b:74:6e:44:2a:fe:
2c:1c:f9:b0:7d:6c:a6:2c:df:2e:14:14:93:46:fe:
5e:44:9e:6c:90:3f:45:03:2b:72:77:83:c3:ca:69:
14:48:f0:29:84:68:ae:bd:6e:bc:d9:82:e2:d8:97:
35:f4:00:f6:c9:c9:ba:87:c6:0b:cf:aa:91:ff:e6:
e9:ef:92:32:31:95:b2:49:f7:ab:e9:51:e2:43:bc:
37:4b:55:3f:58:55:29:25:9f:9d:61:3e:3e:38:7e:
80:04:71:ac:97:85:c4:95:96:9c:07:b9:0a:eb:35:
fc:eb:0c:a7:ed:a6:0e:d0:bf:0c:08:f0:5e:96:f9:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:A9:45:56:6F:73:07:9E:DB:B5:AC:EB:DD:8B:A7:DE:AD:92:FE
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:77:fb:72:10:91:47:36:5c:29:86:4b:47:32:92:51:fe:
b2:3b:d6:d1:37:0b:02:c4:52:6e:64:cc:25:1c:d0:75:a1:9a:
5b:9f:44:db:1a:09:f2:16:59:02:b3:f0:34:c2:53:42:61:1b:
61:a4:70:0c:a4:a2:f2:9b:65:0a:d4:a5:84:67:43:d3:37:72:
6f:71:ae:58:d6:66:36:9c:aa:73:d1:7e:be:83:08:0a:40:d1:
05:25:35:a0:1b:d2:1c:14:6f:0d:97:55:47:3b:50:5f:27:f5:
d8:ed:f6:8c:d4:51:5e:e7:a4:fc:87:43:7d:a8:40:16:17:6c:
e3:4c:60:8b:1c:4f:38:9c:2c:7e:48:1a:43:a3:2e:f9:7e:e7:
db:c5:2a:b7:ab:92:ac:77:17:50:cb:1e:2a:49:b9:60:9b:fa:
1d:e7:1c:a0:4c:ba:32:e1:3a:df:f4:0a:b8:5e:87:60:a0:04:
95:78:e6:34:ea:d9:78:10:8c:bb:81:0a:a3:ee:e0:8b:31:b9:
13:8d:3b:67:eb:93:74:cb:dc:4d:55:b4:0b:56:2f:51:e5:cb:
28:de:8e:cc:18:4f:9a:b9:f2:30:a0:fc:4b:2f:ca:d0:a6:39:
85:a0:ff:f6:ec:23:73:e5:df:c9:19:82:7f:89:57:8b:48:3a:
d4:90:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:04 2025 by rpki-client