Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: Xn/b3dDuUD0mPanccTUlMUDHgC/mvdmms+tIrfxMr2Q=
Subject key identifier: 0E:50:FB:40:9A:D6:CC:03:B7:C2:64:F3:2E:38:30:EE:34:15:92:D7
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 0198439AA9FD3E62CBE881D6C13A324294EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0C28
Signing time: Fri 25 Jul 2025 22:01:06 +0000
Manifest this update: Fri 25 Jul 2025 22:01:06 +0000
Manifest next update: Sat 26 Jul 2025 22:01:06 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: LY/05gZJqdfV30d0iFT5+oGz3Mqgsw+paLaBZsF70y4=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:a9:fd:3e:62:cb:e8:81:d6:c1:3a:32:42:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jul 25 22:01:06 2025 GMT
Not After : Jul 26 22:01:06 2025 GMT
Subject: CN=0e50fb409ad6cc03b7c264f32e3830ee341592d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:80:ea:94:a5:dd:a7:17:1a:73:9c:8f:49:
3e:9a:4a:23:1e:31:45:08:71:d7:f4:08:86:34:d3:
77:0e:64:6b:89:9d:42:c5:89:a5:10:e5:a9:33:01:
2b:e4:3f:76:38:b1:7c:79:57:f0:98:9b:3f:e5:dd:
cc:98:18:99:46:74:f5:38:3a:d7:c8:c9:f5:c7:c6:
32:c6:9a:92:c7:9a:d0:65:a3:c8:52:d5:03:c1:86:
8a:05:13:4a:2a:33:7d:ff:71:43:29:5b:7a:73:02:
2a:c2:74:cd:b2:c7:bb:53:3e:71:26:5b:86:ef:dc:
f5:98:68:b1:a1:38:ee:45:d7:9f:f9:ec:45:51:04:
9e:e5:c5:6e:b1:65:3c:96:af:15:35:c4:ab:76:36:
22:45:d8:51:7e:57:e7:2c:37:c2:0c:d4:fe:d7:49:
f4:57:8d:9c:e8:ed:03:35:28:be:46:f4:16:2f:50:
5b:c0:c2:32:4e:b4:73:ed:60:e2:ca:dc:0a:38:50:
15:d1:d0:a5:d1:49:e2:c5:6a:3f:71:d8:61:03:76:
6f:e6:76:16:f2:a5:68:32:41:90:d4:23:7f:b2:87:
24:e7:e4:f6:fa:8f:5c:a7:98:3a:1e:b1:94:ee:45:
fe:2a:bf:52:66:33:56:7f:e9:86:32:c3:68:24:95:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:50:FB:40:9A:D6:CC:03:B7:C2:64:F3:2E:38:30:EE:34:15:92:D7
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:eb:fb:4c:34:4c:ee:71:22:8e:6c:92:d0:d0:93:f4:24:3b:
13:73:4d:90:d6:7e:98:eb:95:8f:3c:5c:be:bb:87:35:42:97:
b3:5a:ac:bf:ea:f6:ad:a7:a0:ca:31:18:95:db:5c:66:75:fa:
5d:96:1d:81:60:3e:99:c0:33:f3:40:32:a2:d3:03:6b:14:55:
72:9f:01:44:db:c8:35:32:6f:cf:bd:d7:ac:89:54:2a:70:61:
8c:29:e0:9c:c3:6c:60:08:53:26:23:0e:1e:e1:6a:22:12:62:
8a:3f:0f:f4:a9:c4:38:c1:b9:61:ba:f5:d3:a6:20:c0:9d:a7:
d1:04:22:1f:1b:82:6d:5b:39:87:1c:fc:6c:9e:d7:e7:9d:05:
29:bf:1c:3b:c0:e0:3d:29:10:78:fc:f7:4b:2b:19:11:01:15:
0f:a6:7c:15:5c:eb:ce:d6:e8:3b:48:ef:76:dd:69:16:fa:f0:
3e:5e:3e:3a:98:8c:14:66:88:ef:93:26:48:b0:7a:60:fb:7d:
7a:be:5a:7c:f0:c2:cf:59:67:7f:5d:12:8f:bc:c2:e1:46:e8:
69:2d:02:bc:3e:51:17:c7:1e:1e:e5:94:c7:57:c7:a7:3b:0a:
5b:95:7d:3c:4c:c5:4f:e9:bb:11:56:ab:8c:3e:98:3d:42:d0:
7f:5e:f0:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmqn9PmLL6IHWwToyQpTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm
MTgxNTYwHhcNMjUwNzI1MjIwMTA2WhcNMjUwNzI2MjIwMTA2WjAzMTEwLwYDVQQD
EygwZTUwZmI0MDlhZDZjYzAzYjdjMjY0ZjMyZTM4MzBlZTM0MTU5MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EeA6pSl3acXGnOcj0k+mkojHjFF
CHHX9AiGNNN3DmRriZ1CxYmlEOWpMwEr5D92OLF8eVfwmJs/5d3MmBiZRnT1ODrX
yMn1x8YyxpqSx5rQZaPIUtUDwYaKBRNKKjN9/3FDKVt6cwIqwnTNsse7Uz5xJluG
79z1mGixoTjuRdef+exFUQSe5cVusWU8lq8VNcSrdjYiRdhRflfnLDfCDNT+10n0
V42c6O0DNSi+RvQWL1BbwMIyTrRz7WDiytwKOFAV0dCl0UnixWo/cdhhA3Zv5nYW
8qVoMkGQ1CN/sock5+T2+o9cp5g6HrGU7kX+Kr9SZjNWf+mGMsNoJJXcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5Q+0Ca1swDt8Jk8y44MO40FZLXMB8GA1UdIwQY
MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt
Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj
LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJev7TDRM
7nEijmyS0NCT9CQ7E3NNkNZ+mOuVjzxcvruHNUKXs1qsv+r2raegyjEYldtcZnX6
XZYdgWA+mcAz80AyotMDaxRVcp8BRNvINTJvz73XrIlUKnBhjCngnMNsYAhTJiMO
HuFqIhJiij8P9KnEOMG5Ybr106YgwJ2n0QQiHxuCbVs5hxz8bJ7X550FKb8cO8Dg
PSkQePz3SysZEQEVD6Z8FVzrztboO0jvdt1pFvrwPl4+OpiMFGaI75MmSLB6YPt9
er5afPDCz1lnf10Sj7zC4UboaS0CvD5RF8ceHuWUx1fHpzsKW5V9PEzFT+m7EVar
jD6YPULQf17wRA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:05:53 2025 by rpki-client