Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: 31EAMDEy+jZTqIHsVnRcPZR0Fd6DsgOmkXjZfHg4FGM=
Subject key identifier: B2:3D:66:4F:2E:7B:93:4D:60:E4:EE:D5:30:56:C8:19:5C:85:72:19
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 01993313326C0D57FC7E7178911AC3BA74AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 10:02:00 +0000
Manifest this update: Wed 10 Sep 2025 10:02:00 +0000
Manifest next update: Thu 11 Sep 2025 10:02:00 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: AXd8Iq5cP1+Yr4kjgsKlb3fPO9LeyGvlqWQ/NqzZj7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:32:6c:0d:57:fc:7e:71:78:91:1a:c3:ba:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Sep 10 10:02:00 2025 GMT
Not After : Sep 11 10:02:00 2025 GMT
Subject: CN=b23d664f2e7b934d60e4eed53056c8195c857219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:fd:6e:67:1a:ba:6b:bd:9d:0e:71:1b:5b:
62:bd:0f:66:be:ba:64:eb:9f:08:8f:f4:b8:d9:00:
30:92:da:c2:3a:2c:64:59:52:8a:c9:4e:27:3f:43:
6e:9f:04:06:c1:ac:c6:d1:00:9b:35:f6:68:bc:6e:
29:00:41:d5:03:80:79:90:a1:32:5a:56:78:14:b9:
99:47:e2:52:b0:74:11:79:d6:04:cb:dd:43:26:4e:
29:4f:bd:03:a5:50:00:c5:89:49:76:da:79:d6:31:
0a:3b:fb:d4:90:05:65:02:a7:d9:6f:93:40:02:fd:
46:a4:56:62:c6:c4:1b:ec:36:b2:96:1a:c7:3e:93:
35:0f:9b:69:f1:fe:6f:13:fa:5b:f5:e0:09:44:33:
fb:21:46:63:a8:fb:61:d3:d6:55:2b:61:fd:24:a9:
87:98:9f:bd:ce:a9:8d:e3:e1:0a:3b:8c:b9:0a:2b:
0f:3b:bc:cd:0d:9a:cc:d6:98:13:09:1b:96:ce:fe:
2f:aa:49:4a:88:03:3e:fa:06:c5:ec:24:69:27:9f:
b4:03:d2:80:3b:7a:b6:da:d6:45:25:81:d4:dd:2e:
cd:b0:a4:86:d3:f6:fb:82:71:68:d2:f4:d3:d5:f5:
e1:78:7f:b6:12:f3:14:76:ca:22:9d:f5:18:16:53:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:66:4F:2E:7B:93:4D:60:E4:EE:D5:30:56:C8:19:5C:85:72:19
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:4f:04:f0:84:da:a7:6d:d2:b1:df:06:b8:36:17:2e:06:
d3:8e:df:ca:92:80:c5:10:be:31:31:03:a8:06:ba:da:ab:48:
34:2b:7d:0f:16:1d:d7:0d:b0:3b:5e:0c:cf:2d:bf:76:14:22:
a6:4a:a6:26:0a:6f:e3:51:72:2e:7a:b3:d2:55:1d:22:bf:0e:
58:71:85:6c:36:37:63:f7:3b:66:11:c4:3c:37:11:57:a1:b6:
40:7c:04:87:21:2f:2e:10:07:b8:36:f9:f6:c7:3e:1a:49:0d:
02:51:05:55:b5:7c:a8:4e:e6:e3:7e:0a:6e:f9:0c:50:6e:4b:
6c:34:83:c2:49:a1:01:f7:67:74:bb:0c:24:25:e9:94:12:db:
39:d0:c0:f6:97:26:d8:97:0e:28:e8:01:25:19:2e:24:fd:a6:
93:17:9f:fa:df:91:47:7c:03:84:9b:6f:8d:2b:32:9b:f2:06:
7a:0b:0f:33:9f:4d:30:d4:a4:3b:68:ba:86:a5:f0:b3:4c:87:
39:c7:74:f6:31:4d:73:49:3c:f0:dd:33:67:f2:cc:ba:60:60:
8f:aa:8c:d7:02:5f:16:eb:a1:17:84:49:a2:f1:4a:71:90:80:
51:55:6d:e9:a4:e3:46:59:3a:57:38:68:84:c1:bf:90:ee:2e:
0b:57:2e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEzJsDVf8fnF4kRrDunStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmYwODZlMjEyNTA2OGQ5OWY1ZGMxZmNhNGM2MDE3MTc1
OWQxYmEwHhcNMjUwOTEwMTAwMjAwWhcNMjUwOTExMTAwMjAwWjAzMTEwLwYDVQQD
EyhiMjNkNjY0ZjJlN2I5MzRkNjBlNGVlZDUzMDU2YzgxOTVjODU3MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXb9bmcaumu9nQ5xG1tivQ9mvrpk
658Ij/S42QAwktrCOixkWVKKyU4nP0NunwQGwazG0QCbNfZovG4pAEHVA4B5kKEy
WlZ4FLmZR+JSsHQRedYEy91DJk4pT70DpVAAxYlJdtp51jEKO/vUkAVlAqfZb5NA
Av1GpFZixsQb7DaylhrHPpM1D5tp8f5vE/pb9eAJRDP7IUZjqPth09ZVK2H9JKmH
mJ+9zqmN4+EKO4y5CisPO7zNDZrM1pgTCRuWzv4vqklKiAM++gbF7CRpJ5+0A9KA
O3q22tZFJYHU3S7NsKSG0/b7gnFo0vTT1fXheH+2EvMUdsoinfUYFlOJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI9Zk8ue5NNYOTu1TBWyBlchXIZMB8GA1UdIwQY
MBaAFHm/CG4hJQaNmfXcH8pMYBcXWdG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUt
NmJhZTNlOWVhNzRiLzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUtNmJhZTNlOWVhNzRi
LzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHatPBPCE
2qdt0rHfBrg2Fy4G047fypKAxRC+MTEDqAa62qtINCt9DxYd1w2wO14Mzy2/dhQi
pkqmJgpv41FyLnqz0lUdIr8OWHGFbDY3Y/c7ZhHEPDcRV6G2QHwEhyEvLhAHuDb5
9sc+GkkNAlEFVbV8qE7m434KbvkMUG5LbDSDwkmhAfdndLsMJCXplBLbOdDA9pcm
2JcOKOgBJRkuJP2mkxef+t+RR3wDhJtvjSsym/IGegsPM59NMNSkO2i6hqXws0yH
Ocd09jFNc0k88N0zZ/LMumBgj6qM1wJfFuuhF4RJovFKcZCAUVVt6aTjRlk6Vzho
hMG/kO4uC1cu1w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:43 2025 by rpki-client