
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: y2JdovP+36BIjUhdWuEp7sowpZ4eAvYXQg8mWR+6GXs=
Subject key identifier: 82:D8:F3:60:6D:FC:26:55:4F:F3:BB:53:84:3B:08:DF:0C:8A:68:3D
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 0197499EEF21B7B14E1BD33E6FDE1754A201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0E66
Signing time: Sat 07 Jun 2025 09:00:42 +0000
Manifest this update: Sat 07 Jun 2025 09:00:42 +0000
Manifest next update: Sun 08 Jun 2025 09:00:42 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: CSXM2CXShNiKcmw8JxV+567E7RqVonxul1MFG7Xltto=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:ef:21:b7:b1:4e:1b:d3:3e:6f:de:17:54:a2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Jun 7 09:00:42 2025 GMT
Not After : Jun 8 09:00:42 2025 GMT
Subject: CN=82d8f3606dfc26554ff3bb53843b08df0c8a683d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:dd:d1:5d:91:99:01:43:a2:a9:b8:ea:2e:
62:d7:ba:d6:66:fa:3f:c3:f1:bf:a0:3c:76:7c:45:
70:82:4f:77:1d:12:58:4e:a0:8c:1f:b0:7f:01:c8:
d2:f0:43:7d:53:64:f0:63:0d:91:d6:33:8d:89:6b:
0d:ed:d9:28:46:1e:06:48:b8:9a:d5:6d:58:1b:8d:
86:6b:9b:6a:f3:77:b5:c3:ef:06:9c:80:ea:35:58:
96:de:ba:54:63:04:fa:f6:54:87:21:2f:29:eb:32:
27:39:ff:86:09:cc:60:05:4f:8b:56:8e:9e:7f:80:
bf:8e:70:bd:6a:62:ee:b5:95:45:ea:68:f6:49:5b:
5d:fa:ba:1d:1e:c8:65:16:d1:ad:ce:2f:fe:6f:98:
cf:17:1a:8e:9d:b8:b2:31:4e:9e:54:74:ad:dc:b1:
ac:ea:aa:08:ed:6b:6b:d7:dc:83:40:29:51:88:6f:
66:35:4b:35:1e:75:62:45:f0:05:72:b6:13:b2:ea:
a3:95:83:03:c3:62:7b:22:52:90:12:25:e7:a9:1f:
c8:fc:bb:71:b0:36:cf:9d:0d:24:74:c1:6f:10:fa:
57:3e:c9:bf:9a:da:d5:8a:ad:53:67:71:55:ac:86:
85:5c:1a:9d:97:12:c2:ae:0e:a8:7c:70:ba:65:bf:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:F3:60:6D:FC:26:55:4F:F3:BB:53:84:3B:08:DF:0C:8A:68:3D
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:69:a1:33:c7:bb:95:ba:89:91:ee:19:7d:94:67:4c:f7:
9f:6e:3e:ac:9d:70:78:5e:8b:6a:53:66:00:05:7f:08:e9:9a:
4d:a1:ca:33:55:1d:39:9b:ed:91:b0:67:49:90:b3:39:fc:e7:
86:75:3a:50:9c:d5:f7:03:a8:a8:c7:1d:b8:f6:d4:1f:3c:4d:
dd:f4:c3:a2:83:98:bc:99:13:71:d1:1a:13:f2:4e:24:aa:dc:
e7:e9:5d:38:96:a9:dc:7a:61:a3:f6:5b:ee:a5:30:fc:c7:20:
04:ed:c9:1e:79:89:d3:d5:16:13:a9:18:d5:4c:59:6e:c0:8b:
e0:8b:3c:4b:dc:d3:f3:18:5b:07:d5:2b:ff:f5:3e:bd:fd:b9:
ff:6d:86:19:39:bd:40:2e:94:c9:e5:3d:f1:52:ba:52:99:a0:
02:70:9f:80:58:38:a2:6e:22:96:12:c4:bf:19:f8:04:e3:1f:
34:9d:42:e6:16:8b:3b:36:7d:c1:ca:dd:71:46:a1:31:88:0d:
6b:16:8f:7a:44:eb:d0:88:ff:24:32:33:d0:d8:82:f2:61:c3:
30:72:4a:5a:1b:af:5d:9a:9a:21:fe:e9:21:f3:77:35:ae:89:
94:c5:a6:a1:72:13:17:1a:d5:79:ff:6d:66:d8:94:05:b7:7b:
95:d7:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:46 2025 by rpki-client