Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: Yh5anlKaNHRvoJlQzV5fNW+RUh1BX3eOCJO/lyUZFOk=
Subject key identifier: 6B:84:33:2F:FD:B0:2D:E9:6A:C1:C8:AE:97:50:5D:E3:FE:EA:94:57
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019A104C2494E2E78D02E5E67ADFED9037DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0FD6
Signing time: Thu 23 Oct 2025 09:00:16 +0000
Manifest this update: Thu 23 Oct 2025 09:00:16 +0000
Manifest next update: Fri 24 Oct 2025 09:00:16 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: 3KkekUeMDDjzymarXmnN6Vm1qMzxX+aoQ/QJ+KNKMII=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:4c:24:94:e2:e7:8d:02:e5:e6:7a:df:ed:90:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Oct 23 09:00:16 2025 GMT
Not After : Oct 24 09:00:16 2025 GMT
Subject: CN=6b84332ffdb02de96ac1c8ae97505de3feea9457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:ae:a2:01:20:77:36:c9:72:99:99:00:e9:
e4:b4:77:0e:04:18:88:21:f1:79:dc:b3:52:d5:db:
c4:3d:ef:28:25:63:7d:bf:25:59:5c:9b:14:90:e9:
17:29:ba:a6:0d:68:eb:7c:c7:94:4a:33:32:98:8a:
fe:31:f0:fd:47:78:bc:45:5c:d2:f5:03:96:6c:2a:
f2:bd:3a:12:6d:7d:31:c1:c6:35:e8:96:cb:32:82:
fb:89:87:b2:51:22:79:7e:1c:28:28:be:a7:1c:a5:
b8:8a:d1:ca:4b:8f:0b:9b:14:ea:d7:ce:83:41:a1:
fc:04:9a:6b:2c:07:4d:25:7b:e1:34:c3:a4:51:3f:
e5:65:4b:e2:e2:04:3b:98:82:e7:b1:fa:46:ea:04:
94:1a:cc:20:7e:9b:3c:56:79:bd:c1:46:d9:e7:52:
ad:0a:68:6d:1c:3b:17:d9:fc:45:dd:c5:8e:b6:32:
22:26:02:5b:c0:30:e0:55:e2:66:d6:a8:88:8f:a5:
e2:b1:b1:79:d5:ae:b8:09:ad:9f:c8:5d:69:2e:94:
0e:b8:90:32:3f:e9:26:ca:a0:7f:55:42:4f:a3:34:
9a:08:7e:15:e2:73:c0:f0:4e:83:52:eb:be:37:38:
a7:f1:a9:f4:22:c9:2f:76:39:83:39:54:ca:53:a7:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:33:2F:FD:B0:2D:E9:6A:C1:C8:AE:97:50:5D:E3:FE:EA:94:57
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:5f:f3:a0:e0:ed:db:6d:ac:a5:d2:37:e6:24:49:42:69:
93:0c:cd:49:54:1b:08:c4:42:52:3a:90:cf:aa:e9:eb:21:9a:
84:93:e1:a0:9a:02:58:ab:4b:f1:62:0b:47:d8:2d:dc:7d:a5:
cf:1f:cb:c1:43:4a:f6:c5:3b:52:09:97:da:a4:9f:84:fa:f9:
f2:98:ae:98:b5:2f:3b:78:26:7f:cf:f8:e0:10:2c:b2:61:a8:
fd:d0:8d:ae:66:e8:93:44:09:f2:97:ba:5e:da:7c:19:c7:57:
43:65:a5:fd:09:ab:6b:4b:fb:95:b3:5f:7e:a9:34:fd:62:f5:
86:95:9b:9e:d1:d6:7f:e6:48:94:9f:a4:11:07:b3:01:c2:c2:
ac:70:72:c9:a3:95:4e:d6:ce:e5:ed:57:d3:5e:f0:55:a2:b6:
d0:db:09:9d:dd:da:c0:20:e4:0d:9b:3a:5a:e6:c3:c9:10:db:
e3:3b:af:f2:5a:c9:35:13:b8:f0:dc:5f:93:86:69:39:76:b3:
de:10:4d:18:4e:9b:fb:64:45:29:0c:99:5f:99:1a:31:98:22:
b2:30:54:e4:ed:04:ce:0a:48:10:cf:10:03:1e:41:ff:62:21:
26:f7:b0:df:ad:c0:96:33:b2:4d:a3:3e:8a:28:46:5d:2f:b4:
bd:dd:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 15:48:57 2025 by rpki-client