Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: K6Ztv2toI09Hl4yqnujryF48QNU+CQD5GvAJq+k3Rjo=
Subject key identifier: 38:47:4E:89:93:45:3D:1A:AC:8E:EE:D3:C4:E3:E0:5B:C7:6F:80:79
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 01974E204FA66C20F2A07511852518BE0910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1510
Signing time: Sun 08 Jun 2025 06:00:29 +0000
Manifest this update: Sun 08 Jun 2025 06:00:29 +0000
Manifest next update: Mon 09 Jun 2025 06:00:29 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: 425k7sEYwkpn4DXp5+E+ko104hlGLeeUpsSI5q3BK6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:4f:a6:6c:20:f2:a0:75:11:85:25:18:be:09:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jun 8 06:00:29 2025 GMT
Not After : Jun 9 06:00:29 2025 GMT
Subject: CN=38474e8993453d1aac8eeed3c4e3e05bc76f8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:95:67:dc:39:f9:85:89:c4:b1:85:43:b6:
8a:38:90:99:5e:18:0d:25:99:b4:c3:c3:1d:b8:00:
a2:b6:2f:77:1e:5b:8d:0b:ae:fb:96:01:3d:cf:8b:
1e:c8:4c:d1:bb:81:27:d6:51:72:46:19:29:de:b7:
ba:f3:ec:ff:d7:e2:ea:bc:44:29:2d:4f:f4:20:ba:
91:a2:fa:2d:7f:8a:f2:ed:60:51:46:bb:a1:68:9c:
43:cf:4b:67:0d:b8:e5:89:f1:9b:2b:1b:57:69:45:
62:44:b9:d3:31:e8:12:54:86:dd:12:74:ed:18:03:
76:40:6a:c9:65:62:6f:c2:31:af:2b:ef:7a:3b:5e:
86:5d:e7:65:c9:c4:40:9b:c8:21:af:50:63:d0:7b:
82:5b:3f:a0:c7:3b:b3:b1:a1:33:06:5b:69:74:0a:
1e:37:d5:d2:f3:bc:49:39:23:56:bd:50:4a:a3:00:
a3:ec:df:ce:41:db:4c:f0:67:d0:10:d8:36:91:9e:
02:74:61:4a:aa:4c:e5:49:38:28:8c:74:83:bb:0a:
3b:57:a4:50:f1:4f:8a:3f:29:42:1a:d8:f1:f7:3c:
b4:9e:51:c4:83:eb:05:97:2e:1d:68:fb:ac:9b:ef:
bf:fa:0c:ac:34:28:aa:14:64:08:9c:9e:76:54:41:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:4E:89:93:45:3D:1A:AC:8E:EE:D3:C4:E3:E0:5B:C7:6F:80:79
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:42:4c:97:ca:52:fe:a4:97:b0:26:ab:d6:2b:cd:79:0c:c0:
0c:b8:c5:d4:85:2d:76:5b:2c:e9:cb:68:ac:84:e9:9e:ca:2f:
99:80:38:c5:3e:2f:e2:ab:1f:a2:b7:d2:82:2a:fa:7a:46:c6:
88:61:79:01:b4:ec:9a:a9:c3:8c:a2:15:cc:d1:a6:5c:a3:69:
ef:9e:f7:51:69:69:95:60:7e:1c:db:8b:26:f0:f7:58:43:c9:
d7:79:60:b4:5b:c6:10:79:06:28:c8:8a:f3:85:f2:7a:cf:66:
58:ed:ca:5b:2c:10:7e:de:44:b3:8d:37:bc:fb:cd:6f:cf:ae:
4e:7e:95:89:36:b1:c3:c7:60:f2:78:2b:89:06:43:cb:23:33:
80:73:b3:b7:a8:98:72:03:2e:a7:97:eb:56:37:78:67:1f:63:
71:66:d2:a6:9b:a8:5e:59:61:ad:e3:08:65:22:a2:f1:69:ad:
56:21:59:a3:89:c3:7d:86:01:66:3f:51:3c:c1:e2:cc:25:a8:
98:5a:7a:34:5b:55:c1:f6:c9:b1:8a:6e:ea:d4:cf:37:f8:28:
48:95:96:5a:06:e6:7c:62:23:44:5e:69:ac:1b:79:59:45:2f:
b6:6e:af:8f:de:f9:5a:c6:d4:ed:18:8b:93:f5:0c:e3:f5:ed:
74:07:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:31 2025 by rpki-client