Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: Mrpke+rTV1bwLCkqtUNZ/J0mrQPoOI/Q8KFsOjIA07M=
Subject key identifier: 64:88:40:5C:52:CB:EC:09:BC:C8:11:30:F7:BF:DA:44:38:13:76:1E
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 0199228CD353DDEFCCED47BB1395175EEB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: BA
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: nB2axdTNnNrlvxpgKJ5/OSbXkEcBmmQ+w5ypZAzir4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d3:53:dd:ef:cc:ed:47:bb:13:95:17:5e:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=6488405c52cbec09bcc81130f7bfda443813761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:0a:d7:6e:d3:4c:36:2f:f2:4f:34:73:0d:
e2:bf:41:74:ca:f8:a9:3a:d7:b4:64:96:cf:60:e0:
2a:2f:56:de:95:93:46:90:fa:74:14:b1:51:2a:18:
02:29:8b:ed:37:9d:93:70:7d:2e:ae:b6:9a:66:f2:
5f:ea:03:bd:7b:5a:df:a5:a1:0e:ba:dc:c8:d4:61:
50:ee:8e:e5:2a:f6:4a:98:c0:73:1a:ef:42:1e:a5:
06:c0:a6:11:20:ca:7f:2f:65:52:50:94:57:ea:11:
e3:da:75:58:98:e4:b5:18:e4:6c:d3:09:ec:d0:36:
bc:7c:85:25:78:73:bd:24:31:c0:92:0e:5c:59:88:
4a:fe:db:5a:e1:bf:57:ee:b5:1b:a3:02:5c:62:46:
1d:08:89:9b:72:d7:50:c9:da:28:4b:e7:4c:9a:a5:
ef:4e:75:6f:6f:9a:19:95:45:f3:e7:53:7d:45:d7:
51:e1:ba:88:7c:85:11:e8:34:e7:f6:57:3a:16:a9:
97:fa:e8:ae:69:df:f2:50:30:45:e3:ab:f5:fd:a2:
35:5e:75:96:d3:95:e4:55:3b:1e:db:13:0a:1d:50:
43:b4:86:6a:a1:62:e0:35:be:d0:1c:b7:70:c3:fe:
e8:b6:60:d4:a0:3f:3a:e3:94:b5:c7:22:90:da:71:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:40:5C:52:CB:EC:09:BC:C8:11:30:F7:BF:DA:44:38:13:76:1E
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d8:8e:e9:97:17:5e:b5:25:02:c8:48:ef:d1:a7:00:72:25:
db:fe:9c:2c:b4:74:8e:3f:14:94:b4:99:6d:67:71:b2:09:be:
95:1b:4c:73:3f:b7:8f:ce:41:69:65:47:d5:da:48:52:2b:12:
03:83:ee:af:c2:d5:f4:de:b5:a6:e0:36:50:c7:75:cd:4e:43:
51:6c:43:20:76:3e:dd:92:99:4a:d8:04:d1:46:07:5c:ab:91:
1b:fa:63:89:7b:90:31:8a:e1:cb:bf:e4:99:e9:de:c9:c2:63:
17:13:5d:b7:ca:33:9a:6f:b5:b9:25:6d:83:ce:59:df:82:aa:
2f:bc:50:a3:41:db:b2:e4:49:7a:0b:2a:4e:18:57:7c:cc:3d:
ae:33:c5:79:fc:b0:4b:4c:71:7e:05:9d:f1:04:6e:eb:a1:fe:
62:22:15:fd:63:35:60:2b:49:7e:6e:b4:cb:a4:fa:f6:a8:82:
89:a4:4e:09:30:b4:a1:09:c3:74:ab:24:3b:0c:71:72:fd:7e:
9f:26:5d:2b:12:b7:39:b5:ef:49:a3:d7:a8:18:0c:53:69:eb:
a3:ec:a2:6b:1f:81:82:7e:1c:22:0b:2d:aa:43:eb:17:7a:e0:
ed:55:0a:0e:05:55:27:0d:50:d3:d2:e9:8b:42:df:b3:61:7f:
f8:34:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client