Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: chQwp3Yv4+48wrj1z9w16O7UABiknz+0Va7YSf/1lSU=
Subject key identifier: 81:4A:9E:F6:D6:F4:50:74:EE:50:F8:D8:92:83:ED:F7:A3:52:A9:24
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 01984BC21BA1876AA23B101EBD1C4A5DB551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:01:08 +0000
Manifest this update: Sun 27 Jul 2025 12:01:08 +0000
Manifest next update: Mon 28 Jul 2025 12:01:08 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: LD8bym2Mbx3/j7cP9YarNwZOY+PJsftTvtw5hXgnYrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:1b:a1:87:6a:a2:3b:10:1e:bd:1c:4a:5d:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jul 27 12:01:08 2025 GMT
Not After : Jul 28 12:01:08 2025 GMT
Subject: CN=814a9ef6d6f45074ee50f8d89283edf7a352a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:2d:cd:bb:c4:9d:de:b6:5f:12:9b:6e:4b:
02:19:08:99:0e:66:8b:b3:e4:1c:51:78:b7:cd:47:
eb:8a:0b:2b:af:86:b2:0d:9e:37:28:c3:7c:8c:32:
c0:a6:5a:e0:33:4a:2b:6a:1d:94:d9:1f:0f:1a:83:
76:80:66:f9:6b:8c:ae:50:31:f0:d3:dc:62:d6:b1:
7d:6b:19:46:aa:df:d7:17:f0:92:87:93:fc:4d:92:
f1:cb:8a:28:95:eb:fa:38:fc:b9:5b:6d:08:f0:c0:
e3:9a:4e:66:42:e6:66:a0:47:06:8b:eb:c7:aa:5e:
4e:5a:63:0d:c9:a9:3a:a9:f4:4b:bb:7f:52:62:f6:
a7:dc:74:da:f8:9f:a6:66:6f:1e:89:e9:14:d9:e2:
0d:0d:8a:2f:08:07:b4:33:16:dd:fc:be:3a:22:18:
66:3e:3b:7b:bc:b1:08:87:77:be:61:4e:51:78:00:
98:b2:77:0d:fd:99:33:67:83:2d:5b:b2:3e:39:ff:
26:77:c0:0e:ba:6f:5e:26:d5:01:16:69:8b:ae:8d:
15:e3:2a:af:e2:59:88:f7:18:05:8c:0d:ae:90:a6:
08:3e:46:92:21:80:35:57:a7:17:c7:25:47:8f:b5:
f8:4b:87:59:c0:9b:3f:3b:e9:d2:6a:70:ec:d5:e7:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:9E:F6:D6:F4:50:74:EE:50:F8:D8:92:83:ED:F7:A3:52:A9:24
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a0:f1:bd:82:1b:17:5a:97:fd:b5:e4:ea:10:24:0f:56:b0:
d3:0e:0e:8a:21:f1:6f:a7:55:0c:00:03:7a:58:90:40:2b:5d:
97:b4:ae:cd:7c:c8:63:44:55:0e:02:6c:79:de:ed:fb:58:d7:
86:7c:2e:65:f4:e7:47:29:37:90:a0:64:fb:bd:2c:f0:4e:ba:
7e:40:c2:c2:1a:05:e0:ef:56:39:39:1c:30:76:af:ce:91:f9:
e1:68:12:6d:ff:a5:88:42:87:d6:9b:28:61:8e:1e:61:ef:6d:
47:69:6e:3e:11:e7:9c:cc:8e:a5:d5:d5:fe:6c:a3:66:94:8b:
a5:96:0a:92:3a:62:3d:3e:ce:0c:a9:c9:6a:6f:42:76:db:d2:
0c:2f:be:3c:20:b0:46:e0:74:23:cb:62:17:30:b4:4b:20:ca:
16:aa:86:c9:bf:9f:1e:f7:fb:fe:f2:08:f3:ee:cf:9c:29:de:
bf:8b:34:04:d0:1d:d8:93:ef:49:65:35:df:2b:40:28:83:da:
74:54:74:eb:56:44:1c:4e:d6:43:a3:23:2c:43:7f:3f:a4:12:
ed:a6:21:c2:a4:eb:81:8e:d8:f7:81:8e:3b:89:e0:6a:1d:94:
4a:9f:b6:24:51:fb:f7:9d:00:62:88:a3:8c:88:ef:31:64:5e:
e7:7f:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:03:43 2025 by rpki-client