Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
File: ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json)
Hash identifier: hlZI9GgOMIESr1lNpEgibaLWndTek10jjKJ1aEcdQC8=
Subject key identifier: 2A:85:7C:26:D7:B8:90:08:AB:EB:B3:91:E6:F0:05:4B:D9:A9:68:F7
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial: 019A7149BA7ADEBFF5C061D96813F247623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
Manifest number: 0267
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: l1HdGO4oQfNW4It+zNwX0D7uGZ6TXBk03UXsJPkLLNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ba:7a:de:bf:f5:c0:61:d9:68:13:f2:47:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=2a857c26d7b89008abebb391e6f0054bd9a968f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:cd:b6:cd:ce:af:9c:ec:17:21:db:4c:a4:
ac:67:88:e2:0d:c4:63:ad:f7:c6:46:1d:45:63:4e:
dc:f2:77:74:f4:a5:2a:2c:5f:b2:d3:63:dc:a0:48:
a2:9c:1d:b8:77:d3:32:a3:05:52:88:28:e2:26:f7:
9e:e2:9f:33:3a:44:ff:5b:db:b7:28:3a:fc:0a:4c:
0d:3f:7e:7e:9e:73:92:5a:69:b1:05:88:9b:0e:9a:
5e:34:69:71:1c:2b:cf:87:29:d4:3b:f9:a4:e6:c9:
c4:77:31:f4:b8:d1:ac:f1:b0:63:97:4b:b0:f2:48:
b6:0f:d7:6b:fb:08:5d:46:22:8b:71:c5:e3:6e:c0:
2f:93:22:a0:ad:02:62:45:8e:30:d5:8b:b0:38:86:
db:c0:dc:1b:e0:c5:90:4c:81:4e:6d:7c:66:9f:6b:
18:6c:98:c7:3b:34:6c:04:03:03:98:18:dd:02:97:
a0:69:5a:21:66:29:8e:f5:65:64:3c:b7:dd:35:b2:
2d:4b:5b:57:bc:75:a6:00:e6:cc:61:e5:7c:db:f9:
70:94:2f:55:c8:fc:fc:49:d7:16:40:29:b3:36:84:
44:56:fc:45:06:bc:b9:30:61:c9:89:33:2d:77:13:
d5:04:96:59:5b:af:98:6b:b5:f3:a7:e2:17:73:12:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:7C:26:D7:B8:90:08:AB:EB:B3:91:E6:F0:05:4B:D9:A9:68:F7
X509v3 Authority Key Identifier:
keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:ea:bc:7d:0a:ca:a2:1b:b3:1b:56:16:7b:20:5f:c9:2a:
32:c1:73:ab:87:a1:09:74:bf:bc:06:8d:71:36:b0:f9:78:1e:
b1:ca:67:a6:7a:0e:f5:ae:cc:8e:e5:8b:c7:84:a0:fb:bc:ef:
73:d4:3c:48:7e:4d:f4:b7:f8:e4:7b:07:50:3b:32:15:a8:05:
ce:a7:ab:21:90:1f:8f:9d:56:bf:73:e7:b3:96:a4:f8:a8:f0:
af:a1:a1:75:82:b0:6d:d3:8d:e5:79:ef:e0:76:26:0f:03:56:
56:d2:ad:7c:a2:61:31:59:06:a7:d6:99:22:1b:76:66:ae:24:
30:15:70:c6:14:d0:5e:5f:38:08:65:e4:d7:93:58:15:a5:e3:
a2:b8:de:b1:37:ea:fe:5c:d7:79:d7:74:41:f2:4b:b4:11:19:
1e:75:4c:73:ad:cb:64:17:ad:8f:ef:1e:a7:07:0f:7e:76:00:
d2:d6:f0:9f:63:0b:11:04:f7:d1:71:2c:e0:12:1f:d9:79:65:
d6:a7:c2:7a:c9:fb:31:93:70:16:2f:04:c6:55:15:17:85:be:
d9:93:da:76:b2:e6:b1:9d:da:90:8a:78:c4:f4:ee:db:fd:59:
3d:a3:7c:2e:7d:21:41:6b:95:dd:1e:31:3e:9a:56:dd:55:be:
80:c6:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client