Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: ERqmAkEHKFlXXFC/xxjNrl1Po3SXTc5EMb/2YPWUMdg=
Subject key identifier: DF:EA:A3:AF:B2:73:B0:F6:1B:60:F8:30:6A:DC:AA:62:1F:CB:7C:BC
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019A1E07E5E7693B5F0DAEF0B9F44A2F27CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 01:00:25 +0000
Manifest this update: Sun 26 Oct 2025 01:00:25 +0000
Manifest next update: Mon 27 Oct 2025 01:00:25 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: yiszj8HDdegt05dcS0Xsi9/efXJDPeiUyLmJrJhht54=)
2: h8XcxNlg2XITkIVJEK1ZC2_6O-w.roa (hash: Uox6k3C3t/z5iyZxizryiDRbognV5cGwqRlM+dbYzjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:e5:e7:69:3b:5f:0d:ae:f0:b9:f4:4a:2f:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Oct 26 01:00:25 2025 GMT
Not After : Oct 27 01:00:25 2025 GMT
Subject: CN=dfeaa3afb273b0f61b60f8306adcaa621fcb7cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:2f:10:81:38:38:29:cc:d9:25:66:f9:27:
7c:86:82:26:3a:26:8e:1e:f1:fb:9a:0f:a5:0c:76:
c6:aa:e0:49:f6:de:14:ca:ad:de:ff:34:00:36:21:
43:64:40:9b:33:b8:84:16:d8:e5:f8:8e:12:a0:e9:
86:3c:1f:1f:10:f3:dd:3f:56:ea:04:5f:06:c3:9c:
55:69:e7:2d:86:ec:8e:96:50:11:44:6f:a1:1b:4c:
6b:4c:f8:f1:6e:54:c0:1f:5a:ff:9e:3e:2d:25:a3:
ed:23:61:85:aa:8a:c1:72:40:6f:2a:bc:e7:1f:46:
90:a7:69:ea:8a:9b:b6:f5:fb:db:ed:49:c2:32:61:
52:fe:0f:d8:92:f9:90:ef:14:e2:f0:df:0a:bd:64:
f6:4c:7b:ae:23:a2:ac:eb:d3:ed:bf:60:2c:47:c0:
5f:61:46:c9:08:1c:60:b6:d4:df:c1:38:8c:dc:7c:
7b:5b:69:67:36:cb:4d:24:94:36:74:3a:a2:9e:f3:
84:d0:bb:07:08:9b:82:ad:8b:dd:d4:96:e0:39:22:
d2:3c:fc:8c:de:2f:a2:e0:37:24:95:90:28:9f:5c:
69:95:2b:d2:44:8a:9e:2d:dc:11:46:a0:57:49:af:
39:7a:4a:d9:15:6b:8e:8b:4d:d6:0d:5f:d5:d9:6f:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:A3:AF:B2:73:B0:F6:1B:60:F8:30:6A:DC:AA:62:1F:CB:7C:BC
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:1b:92:b7:8e:d9:2a:fd:69:f9:16:86:f7:f9:68:28:3d:
42:90:dc:42:39:78:30:1e:aa:df:6e:ae:18:48:26:90:07:d9:
b1:33:29:9a:f5:fb:a4:6f:75:63:14:c9:37:10:81:1a:df:e4:
17:04:94:c9:81:53:28:36:98:6c:e5:12:de:00:37:33:93:c6:
7d:5a:12:df:75:c4:01:1f:dc:82:01:bc:2f:94:86:f3:99:e3:
a3:fd:9d:5d:ea:a2:15:18:36:e6:83:60:f4:d0:bc:af:54:bc:
4c:91:5a:49:7f:f8:ec:1e:f0:9e:8c:88:08:6e:c9:90:4b:05:
45:ae:6a:53:51:3a:5d:c9:9d:94:f4:36:b7:67:2a:a7:22:84:
ee:76:95:78:85:21:1f:30:82:60:3e:3a:86:21:de:4c:f8:82:
15:42:b4:70:9f:26:88:81:04:d7:07:93:e3:ab:4d:84:72:58:
de:b3:69:0d:50:8d:86:bb:c0:6a:12:84:b5:9d:f7:35:e5:f3:
f4:20:99:60:d3:56:17:f2:df:7c:13:b0:48:d2:64:3b:71:73:
f2:37:9c:61:a4:a2:19:ca:28:a4:d2:8e:f1:4b:97:a3:43:61:
17:33:b0:e8:95:78:92:cf:44:f0:80:4e:11:8a:40:f7:0a:79:
cf:f1:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:13:50 2025 by rpki-client