Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: IZtXZw5aoOtsodi954RlxHh5BTqhKx+jqf+9X80rIV0=
Subject key identifier: DD:6D:D5:72:2F:FF:BF:57:8C:2A:32:D9:94:BA:1A:7F:D3:47:65:46
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019A25F86B5F963EC8EC4385E4E06D4C7667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 1060
Signing time: Mon 27 Oct 2025 14:00:28 +0000
Manifest this update: Mon 27 Oct 2025 14:00:28 +0000
Manifest next update: Tue 28 Oct 2025 14:00:28 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: QigDDrA72yQWlUMxx/MMwKpJ917+WydjVCYSyx+eeO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:6b:5f:96:3e:c8:ec:43:85:e4:e0:6d:4c:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Oct 27 14:00:28 2025 GMT
Not After : Oct 28 14:00:28 2025 GMT
Subject: CN=dd6dd5722fffbf578c2a32d994ba1a7fd3476546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:01:f6:9c:b4:8b:2d:1f:3b:f9:bc:c1:29:
1c:e6:8c:53:d6:a1:44:8a:50:c9:d9:f8:d3:53:fd:
bd:aa:ca:05:5f:76:d5:cc:45:6b:57:ab:c3:26:b0:
7f:98:ce:7c:61:68:79:68:68:60:d0:30:83:1b:76:
3a:37:16:95:d5:32:42:7d:1f:a3:f4:50:93:00:fd:
35:49:7d:38:07:78:05:d8:fc:52:7d:e2:b6:c7:69:
cc:48:22:f6:b9:ed:2c:7b:95:c4:c7:9d:70:db:75:
99:59:56:34:c4:a6:5e:e0:24:e9:fd:b3:cb:b6:cd:
38:ce:c6:61:01:7f:49:63:96:06:7b:de:e5:73:39:
35:36:a7:21:a5:87:7b:9e:8c:86:11:3e:1a:eb:04:
71:32:02:cb:fb:9d:59:c8:0f:5d:c7:83:dc:f8:4b:
ab:05:7f:47:3c:00:a9:77:9f:0d:13:8c:24:b1:2c:
a0:a1:2e:ea:dd:9b:16:70:26:1d:0c:23:5f:64:3c:
6b:8b:fa:08:31:93:05:e8:50:e4:32:72:cb:d2:a1:
e1:95:13:25:fd:56:78:f4:42:cf:3a:bc:f7:78:7b:
d0:8b:fc:15:97:45:fa:5a:be:e4:75:75:b1:78:d1:
d6:54:9a:6a:f3:36:fd:1b:9a:13:75:08:8e:df:11:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:D5:72:2F:FF:BF:57:8C:2A:32:D9:94:BA:1A:7F:D3:47:65:46
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:80:af:7a:56:2e:10:41:66:d3:22:fa:44:f1:63:26:f1:30:
96:65:09:51:96:c8:b9:46:db:8c:c1:36:fe:c9:53:4d:94:61:
10:7f:7f:5d:69:73:43:d5:50:96:4e:98:67:9d:09:3b:84:be:
d4:65:7c:c9:a8:47:cb:2c:ab:99:b5:4a:3e:db:9b:00:ef:ed:
2a:01:3c:a5:c4:e7:e1:22:cb:c4:50:dd:8e:eb:66:c5:36:3a:
ba:ac:97:5d:14:e4:e7:64:53:41:33:29:5b:6d:36:3d:a2:a3:
a4:d8:7d:8a:9c:9b:7f:54:ef:c9:03:60:b1:4c:13:88:df:4a:
8f:09:9c:a8:4e:c5:4a:67:f0:0c:5f:06:02:69:60:e7:f4:8d:
e9:f4:95:af:bb:4d:d9:07:fb:1d:ec:3e:f9:5c:c2:af:c8:96:
fb:f9:b4:66:9a:a6:61:61:93:22:be:8f:84:41:9a:4a:fe:ee:
b7:c0:b0:ab:a6:6b:ba:89:71:4e:50:0a:70:1a:a5:7d:bb:fb:
e4:dc:3d:ac:f9:4f:2f:3d:ee:dc:5f:ff:20:87:7d:2b:e1:03:
03:ff:84:69:c7:d5:d8:86:e0:aa:28:23:8a:ee:6c:ea:08:e4:
e3:bf:ee:70:16:e8:89:fb:2f:af:3d:8f:6b:05:3c:ec:09:f4:
ec:b8:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:44:22 2025 by rpki-client