Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: BEnCoBz6af53khw9X64Db91RvSH8Qij4+tJN96xvNxw=
Subject key identifier: EA:D8:14:46:10:79:FB:9C:46:CB:7B:FD:36:81:9E:92:48:69:B6:AB
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 01995DC51F6E0F7747B8664BBE6C3384B2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 011E
Signing time: Thu 18 Sep 2025 17:00:23 +0000
Manifest this update: Thu 18 Sep 2025 17:00:23 +0000
Manifest next update: Fri 19 Sep 2025 17:00:23 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: JY2P58qhziYvS8L37OgVTbhdmvBEWnJFzsZw7kB3qGU=)
2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:c5:1f:6e:0f:77:47:b8:66:4b:be:6c:33:84:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Sep 18 17:00:23 2025 GMT
Not After : Sep 19 17:00:23 2025 GMT
Subject: CN=ead814461079fb9c46cb7bfd36819e924869b6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:52:e8:85:3c:9e:56:c8:7e:39:3d:ef:23:
91:21:fb:97:a4:cd:4d:85:f4:78:1a:e0:da:5e:09:
7e:26:7c:bf:cf:d3:2a:58:af:ad:1f:64:20:2d:dd:
2b:0f:77:86:c4:98:39:5e:af:80:96:e0:12:6e:ac:
51:09:17:25:f3:11:44:38:a6:ad:28:72:71:1a:02:
ac:c2:a1:af:76:e9:03:30:9a:81:d2:c4:2e:91:9b:
ec:86:d3:83:73:7b:63:31:0f:a3:65:1c:56:19:21:
f7:ed:c7:48:2c:63:50:97:fe:56:73:bf:11:69:f7:
a3:61:d5:7c:f6:69:5a:fd:02:65:8d:75:15:cc:ba:
c8:69:8b:5c:c5:56:c8:4c:5f:a7:9e:ce:06:ca:de:
94:19:75:3f:ff:c8:72:ad:80:b1:93:3a:52:69:64:
8a:5a:75:dc:53:f9:d5:2c:db:c0:9f:ef:6c:8b:52:
7f:3c:d8:d6:9a:59:b2:6d:8e:76:6a:8c:33:84:e0:
7b:6e:a7:0b:6a:ab:68:ce:73:72:23:b4:a1:e1:c0:
94:71:0c:a9:43:fa:3d:80:30:2b:cd:86:f2:cc:43:
dd:88:c2:f1:86:01:f9:0c:f0:eb:37:fa:5a:45:9b:
1b:b7:2f:99:e5:c4:8d:fe:63:92:06:0a:4e:30:ce:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:14:46:10:79:FB:9C:46:CB:7B:FD:36:81:9E:92:48:69:B6:AB
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:f2:95:97:c0:bf:37:16:e2:d3:95:86:de:da:dc:42:fa:
6b:f9:98:4a:2a:f7:f6:06:e0:a8:8d:5d:28:4f:9b:bf:20:85:
20:1b:b2:5f:cf:37:80:9c:cf:2d:25:8e:5e:95:cd:98:6f:5b:
ef:00:5c:8e:a0:84:91:8b:e6:45:ca:86:42:42:0f:5a:ce:49:
6e:7d:1a:57:c2:48:50:e3:08:74:9a:23:31:ae:d0:6c:61:ae:
49:4c:7e:dc:89:b2:c6:f1:02:5f:44:44:cf:93:a0:ba:9a:d7:
0f:69:20:f5:db:c8:b4:98:7a:ae:c1:c4:22:dd:d3:cf:b1:67:
0e:1c:aa:40:a9:d6:c9:9c:d8:c2:c3:3e:81:ba:39:f7:5e:0f:
6b:55:a5:ef:d4:5f:88:ec:8f:5b:6d:5c:be:6a:ec:82:81:9d:
88:41:71:8e:90:7d:6d:f3:8c:d6:a0:46:3e:3f:79:be:75:a1:
0a:a4:d4:67:95:2d:2a:aa:01:b6:4c:ba:7b:85:cd:bb:3f:a8:
54:3d:df:e2:1e:bd:04:9e:73:7f:0b:6d:c4:9d:57:02:72:bd:
1e:2f:e9:10:15:cf:f8:fd:75:3f:70:57:29:d2:fd:69:43:d1:
49:2f:5f:86:60:2f:e6:0c:c0:85:64:9e:8f:3f:56:ce:be:f7:
ff:b3:16:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZldxR9uD3dHuGZLvmwzhLLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjA0OGFhZjViYjQyZjZjNGQ5ZDM4N2FkMjdhN2ViMjE5
ZjM4ODIwHhcNMjUwOTE4MTcwMDIzWhcNMjUwOTE5MTcwMDIzWjAzMTEwLwYDVQQD
EyhlYWQ4MTQ0NjEwNzlmYjljNDZjYjdiZmQzNjgxOWU5MjQ4NjliNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB1S6IU8nlbIfjk97yORIfuXpM1N
hfR4GuDaXgl+Jny/z9MqWK+tH2QgLd0rD3eGxJg5Xq+AluASbqxRCRcl8xFEOKat
KHJxGgKswqGvdukDMJqB0sQukZvshtODc3tjMQ+jZRxWGSH37cdILGNQl/5Wc78R
afejYdV89mla/QJljXUVzLrIaYtcxVbITF+nns4Gyt6UGXU//8hyrYCxkzpSaWSK
WnXcU/nVLNvAn+9si1J/PNjWmlmybY52aowzhOB7bqcLaqtoznNyI7Sh4cCUcQyp
Q/o9gDArzYbyzEPdiMLxhgH5DPDrN/paRZsbty+Z5cSN/mOSBgpOMM4/lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrYFEYQefucRst7/TaBnpJIabarMB8GA1UdIwQY
MBaAFBGwSKr1u0L2xNnTh60np+shnziCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2Et
NWNmM2U3NmExZWJjLzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2EtNWNmM2U3NmExZWJj
LzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsbylZfA
vzcW4tOVht7a3EL6a/mYSir39gbgqI1dKE+bvyCFIBuyX883gJzPLSWOXpXNmG9b
7wBcjqCEkYvmRcqGQkIPWs5Jbn0aV8JIUOMIdJojMa7QbGGuSUx+3ImyxvECX0RE
z5OguprXD2kg9dvItJh6rsHEIt3Tz7FnDhyqQKnWyZzYwsM+gbo5914Pa1Wl79Rf
iOyPW21cvmrsgoGdiEFxjpB9bfOM1qBGPj95vnWhCqTUZ5UtKqoBtky6e4XNuz+o
VD3f4h69BJ5zfwttxJ1XAnK9Hi/pEBXP+P11P3BXKdL9aUPRSS9fhmAv5gzAhWSe
jz9Wzr73/7MWlg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:24:13 2025 by rpki-client