Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: myUEmWAY/PdRXFGzVfdUO91V3/fXK/fO+/CrDYmg/5I=
Subject key identifier: 9F:66:BA:F0:9F:71:7E:95:03:61:B9:8E:37:A0:D0:AC:75:97:88:64
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019A228925D533B56A9354A4C230E0D57565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 22:00:04 +0000
Manifest this update: Sun 26 Oct 2025 22:00:04 +0000
Manifest next update: Mon 27 Oct 2025 22:00:04 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: ISg+KDO0Au1IA+4Kjf7A7SQWzzA//kSRvuWpwAxdvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:25:d5:33:b5:6a:93:54:a4:c2:30:e0:d5:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Oct 26 22:00:04 2025 GMT
Not After : Oct 27 22:00:04 2025 GMT
Subject: CN=9f66baf09f717e950361b98e37a0d0ac75978864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:99:6f:3a:02:43:6d:07:d1:a7:3d:4d:5e:
9d:ab:16:5a:d7:51:f9:30:5f:c8:1b:2c:fe:6a:d2:
7c:ae:aa:5c:f6:9e:9f:f7:7b:3d:fb:05:da:88:d4:
e9:3a:f7:6a:c8:53:59:f2:77:3a:15:93:c6:a1:b5:
f2:64:2f:5e:af:3e:5f:ae:42:e4:63:96:30:61:f9:
1d:60:84:5a:29:00:25:80:27:18:3c:07:b1:db:11:
d3:f4:11:59:4d:0b:35:ef:f4:a6:25:ce:1b:e2:5a:
bb:2a:b6:44:c7:c4:33:43:37:04:70:97:16:7e:cb:
c8:54:2a:e2:72:92:8e:67:32:a0:e6:f7:ab:18:49:
97:c2:2d:6b:6b:50:0b:cb:c4:fd:27:55:f0:2c:fb:
84:eb:f7:d5:bb:5c:1d:97:14:c8:e1:96:2e:f5:c7:
79:ea:44:74:74:a4:ab:05:cd:a5:ed:1e:12:c0:cf:
83:bb:54:ca:ba:e6:8c:da:2b:65:d3:1b:57:6b:07:
b8:34:4a:03:82:f6:da:8b:5d:57:b5:c5:0f:68:2d:
e6:3f:03:e5:89:d1:00:19:8b:ad:c7:1d:cd:81:ac:
78:49:a9:63:ca:ec:12:51:ca:77:e5:71:c2:9e:58:
6c:0c:e5:d3:f9:25:58:90:bb:4e:08:4b:3c:47:bb:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:66:BA:F0:9F:71:7E:95:03:61:B9:8E:37:A0:D0:AC:75:97:88:64
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a8:ff:2d:e3:58:c1:0b:9c:cb:b1:7c:ba:0c:20:2c:a9:83:
ac:b3:c7:8a:d6:54:fd:b2:5d:4c:d9:2d:0a:a4:c6:5c:32:2b:
f0:16:2c:76:72:1c:0a:dd:6c:65:8b:27:31:0e:8f:e7:a3:68:
f5:fe:76:e3:06:75:b1:e8:e5:f5:c7:27:2d:20:27:5e:76:d9:
c7:bb:77:d0:1d:e9:b4:83:50:84:47:de:89:51:12:9e:96:c2:
6b:6a:46:66:0c:6f:45:6c:f4:f4:b2:e6:13:f0:73:07:3e:2e:
f8:ad:f7:77:ca:f6:2f:6e:a8:cd:9e:d2:1f:f3:87:16:ff:72:
04:3a:70:9f:7a:eb:1f:a2:b0:0e:ce:bc:64:03:79:81:1f:51:
39:dd:65:47:67:98:31:9f:3c:75:f4:c8:be:fc:32:94:8c:34:
eb:dc:00:69:70:d1:bd:c6:78:a9:b9:aa:0f:43:07:06:f8:1f:
fd:fc:f7:15:c4:e1:9e:9b:ab:26:e4:e5:72:23:6d:1d:9e:87:
a7:55:08:55:db:c9:b2:8a:a9:89:d2:c1:dc:52:d0:36:82:87:
a6:97:fa:1e:95:2b:f6:fc:42:f1:f8:8a:54:c0:6e:ec:94:16:
55:a1:63:15:64:e4:57:46:29:cf:85:76:19:f0:c1:f7:16:d5:
b8:b8:05:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiSXVM7Vqk1SkwjDg1XVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmYwODZlMjEyNTA2OGQ5OWY1ZGMxZmNhNGM2MDE3MTc1
OWQxYmEwHhcNMjUxMDI2MjIwMDA0WhcNMjUxMDI3MjIwMDA0WjAzMTEwLwYDVQQD
Eyg5ZjY2YmFmMDlmNzE3ZTk1MDM2MWI5OGUzN2EwZDBhYzc1OTc4ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsuZbzoCQ20H0ac9TV6dqxZa11H5
MF/IGyz+atJ8rqpc9p6f93s9+wXaiNTpOvdqyFNZ8nc6FZPGobXyZC9erz5frkLk
Y5YwYfkdYIRaKQAlgCcYPAex2xHT9BFZTQs17/SmJc4b4lq7KrZEx8QzQzcEcJcW
fsvIVCricpKOZzKg5verGEmXwi1ra1ALy8T9J1XwLPuE6/fVu1wdlxTI4ZYu9cd5
6kR0dKSrBc2l7R4SwM+Du1TKuuaM2itl0xtXawe4NEoDgvbai11XtcUPaC3mPwPl
idEAGYutxx3Ngax4SaljyuwSUcp35XHCnlhsDOXT+SVYkLtOCEs8R7tk4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9muvCfcX6VA2G5jjeg0Kx1l4hkMB8GA1UdIwQY
MBaAFHm/CG4hJQaNmfXcH8pMYBcXWdG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUt
NmJhZTNlOWVhNzRiLzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUtNmJhZTNlOWVhNzRi
LzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKj/LeNY
wQucy7F8ugwgLKmDrLPHitZU/bJdTNktCqTGXDIr8BYsdnIcCt1sZYsnMQ6P56No
9f524wZ1sejl9ccnLSAnXnbZx7t30B3ptINQhEfeiVESnpbCa2pGZgxvRWz09LLm
E/BzBz4u+K33d8r2L26ozZ7SH/OHFv9yBDpwn3rrH6KwDs68ZAN5gR9ROd1lR2eY
MZ88dfTIvvwylIw069wAaXDRvcZ4qbmqD0MHBvgf/fz3FcThnpurJuTlciNtHZ6H
p1UIVdvJsoqpidLB3FLQNoKHppf6HpUr9vxC8fiKVMBu7JQWVaFjFWTkV0Ypz4V2
GfDB9xbVuLgFsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:16 2025 by rpki-client