Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier: xVwxouwnEvV82DbcJngLdQKwbXAtjva0gpx+i2StLEo=
Subject key identifier: 7B:64:48:05:DB:A7:43:CC:A4:F4:21:68:D3:65:99:AD:6F:0D:E1:E5
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial: 019A71B91EC934ADCECEBCCF8808DD5CDFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number: 06A9
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=)
2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: OxPhZBd1wEWfh/TOVmX1mulKlhwuWTkAdYc76yYmSZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1e:c9:34:ad:ce:ce:bc:cf:88:08:dd:5c:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=7b644805dba743cca4f42168d36599ad6f0de1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:4c:eb:6d:63:18:3f:04:17:80:14:3c:a5:
dc:08:c9:95:b1:5b:ee:37:f0:cb:13:1a:60:73:cd:
f5:c3:d5:44:18:9a:39:48:8e:62:d1:c6:12:32:5b:
b5:55:6a:a1:34:33:08:cb:d7:51:7f:27:1e:c0:e9:
00:fd:14:37:9d:3f:cc:da:cf:cc:70:52:a0:24:94:
bb:93:6b:94:aa:3c:4c:ed:35:1c:8e:b4:37:67:4d:
97:35:4c:68:8b:71:aa:a3:d8:dd:7a:63:01:f4:24:
b2:49:f7:4a:22:08:6a:13:28:24:10:24:d7:96:53:
6e:aa:8b:52:22:d9:e3:e3:2d:d7:c2:e1:f9:84:00:
64:94:ac:2a:7a:63:49:86:c6:82:b6:70:4c:80:ae:
ae:1e:39:f0:95:a4:a2:59:80:fb:29:b3:eb:2a:1b:
b2:c9:b6:f5:65:54:53:7d:11:c2:f3:4c:a9:b3:0c:
0f:e0:4a:72:09:63:00:cf:d1:c5:89:99:f4:d1:1d:
80:20:fc:f2:85:77:84:4f:e6:cd:8b:86:f6:16:9e:
9e:20:30:36:37:35:33:e7:cc:62:c6:5b:af:b9:4f:
9f:cc:9b:2f:0c:be:b0:30:8c:f0:1a:e7:8a:bb:66:
5d:e4:83:51:24:7e:d6:6a:d0:b2:83:63:55:ef:32:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:48:05:DB:A7:43:CC:A4:F4:21:68:D3:65:99:AD:6F:0D:E1:E5
X509v3 Authority Key Identifier:
keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:70:4e:01:54:ba:ae:2b:0b:a7:47:b4:bb:38:c1:9c:63:
01:f3:dc:0c:d3:4a:02:7c:6f:e9:7c:27:cf:dd:43:91:d7:e0:
83:eb:16:c5:7f:18:1f:9e:fc:1b:99:af:c9:95:f8:19:67:cd:
a4:59:b6:7b:0c:40:99:34:8f:87:3a:8e:72:91:b0:95:c9:47:
c2:58:7a:c6:02:86:ff:d6:e6:5d:35:72:f2:c7:8a:b1:fc:95:
e5:82:45:57:6f:08:a7:68:ee:4f:2d:eb:e9:02:17:92:fe:41:
df:76:7e:65:0c:89:2e:2b:34:07:4c:f2:10:5e:0e:02:5b:2a:
bd:e8:5e:e1:59:74:52:a4:95:46:9d:af:87:ca:0e:aa:30:f8:
2a:b1:3c:41:13:ae:4c:f8:33:3c:c6:df:b0:0b:c1:21:d3:fe:
ad:ae:5d:11:5f:76:96:cc:e9:fe:0c:ac:51:f5:81:11:2a:cf:
b6:b6:b5:d5:0f:4d:86:36:97:fa:5b:be:4d:ba:aa:bf:c7:d7:
de:42:a5:fd:e7:6f:91:72:ec:60:65:89:cf:21:b9:71:46:d2:
5d:0b:34:4f:30:54:9b:22:df:c8:81:4c:e0:7b:0f:5a:26:a3:
45:39:24:f2:62:4d:35:a8:1e:8d:23:21:58:df:42:de:c2:9b:
94:ca:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client