Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: pll/XsE5AYMQ9Tiw+ZlgiN2aju8N6Yjt/6mAkPCXV0s=
Subject key identifier: 49:14:12:54:ED:9D:47:9C:23:9A:DA:D1:9B:75:79:B5:8B:2E:6D:DE
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019922C378BF3BA3EBAE900F139ABC82D9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0F5B
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: eEIKyDNV2RYleiWKRzxWUNbASfQv1zzK3Xn1RQkLmSs=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:78:bf:3b:a3:eb:ae:90:0f:13:9a:bc:82:d9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=49141254ed9d479c239adad19b7579b58b2e6dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:af:ee:5d:62:98:b8:9b:ea:8b:51:b1:97:
d7:8c:49:33:45:ba:5f:8f:4a:95:45:8c:80:ec:cf:
fe:44:77:ce:12:b6:77:fb:65:1b:93:8d:fc:fa:e6:
1d:97:bc:8e:a0:4f:3c:48:90:22:d7:3e:46:88:81:
02:c3:c5:1d:ec:f1:b7:a4:f5:d2:10:da:ab:a1:2e:
84:72:51:db:87:0a:fa:bc:48:fe:21:79:cc:b3:53:
46:58:40:88:d8:33:07:e6:f3:3c:47:8b:63:8c:40:
c2:77:ce:a3:48:bc:b7:27:16:68:58:aa:1a:e3:1c:
c1:a8:60:e1:f7:82:70:0d:f6:9a:d0:e5:74:22:8a:
d4:a6:a9:1f:89:a1:08:d8:ce:cc:4f:33:32:69:55:
25:c6:1c:8f:6f:de:c2:61:b3:04:a7:4a:6d:9b:78:
cf:ba:2e:ef:56:6d:38:1c:2c:3d:e5:41:d2:01:4d:
6e:62:a0:78:64:3a:2d:2d:e5:47:44:cd:ee:59:66:
24:39:56:9e:61:0c:7c:83:1f:2f:13:10:d7:0a:1d:
b8:b2:00:81:0c:1f:b2:43:62:fb:25:cc:fe:d5:2a:
9e:2f:d6:af:7f:9a:ce:c4:bb:30:10:85:b3:c9:2d:
b6:cb:c5:37:00:0f:66:14:0d:94:4f:3a:37:5d:65:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:12:54:ED:9D:47:9C:23:9A:DA:D1:9B:75:79:B5:8B:2E:6D:DE
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:19:cb:6d:8e:99:9e:9f:88:ce:be:aa:6c:a2:cb:84:27:
0c:96:af:bc:56:66:09:97:28:af:d7:5e:1b:42:bb:18:c7:00:
e8:80:94:14:85:8f:ae:d5:df:84:bf:d1:3f:81:b3:a3:17:76:
f9:89:ec:11:fb:f7:05:aa:98:4d:db:2f:ce:11:73:32:63:b7:
65:4e:e2:32:9d:f6:1e:23:68:3b:fd:f0:fb:d6:d3:c1:a6:d5:
4c:65:4c:24:2e:ef:f6:0f:a8:1b:ac:bc:21:23:70:58:2f:9b:
d5:0a:a3:dd:0d:58:ea:70:94:f6:eb:0f:c1:db:46:44:1f:ea:
24:cf:46:49:05:eb:ad:23:79:33:20:4a:56:2a:1b:ae:94:51:
8f:c5:9f:72:a1:17:54:33:b5:48:23:e6:a4:21:28:58:ef:a9:
a5:d9:2a:f3:ee:9b:2f:36:f6:c6:47:1e:96:89:6f:f6:f6:d2:
a2:df:09:3d:ae:f5:c6:66:86:ea:3e:20:0a:b4:e2:24:05:9d:
93:e2:b0:bd:80:44:87:43:e2:e5:20:72:91:ca:59:e7:5b:a0:
98:ed:01:9d:89:43:89:74:8c:3f:47:96:da:6a:61:13:e8:61:
e0:14:05:38:da:1d:7c:93:46:6e:ea:fb:d7:29:7d:7b:8a:9d:
69:75:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:51 2025 by rpki-client