Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: h5yquldJ/Mx5OLATF/TSp9vK3KqSO+B3TdGnCqiG770=
Subject key identifier: 84:5D:9B:55:FF:A2:23:9A:BD:7D:65:FA:AA:D7:6C:50:05:EE:7B:DF
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 019A729363AAEEB842AE157AB68FD91C0334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: l6oO4lw3MfyMZWo+dfbjnbmgEjqqX6FQxtLaG6fwdHc=)
2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:63:aa:ee:b8:42:ae:15:7a:b6:8f:d9:1c:03:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=845d9b55ffa2239abd7d65faaad76c5005ee7bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:7d:93:6a:4b:ae:ef:3f:2b:7a:9c:f9:24:
cb:fc:93:96:d4:75:3f:36:ca:fe:dd:96:ae:22:79:
e6:c3:a2:6a:d2:d3:c2:e5:fb:6c:a6:b6:49:fe:51:
76:49:fc:41:17:90:2f:6a:a7:bf:ef:46:8b:8c:b4:
00:97:b9:66:f9:3b:69:bd:ad:ea:bf:97:c3:5e:fa:
a7:d1:48:dc:a3:1a:6a:99:e2:87:d1:d5:e5:b3:3c:
89:56:bd:41:10:28:a4:c8:23:e4:2c:aa:8c:22:ba:
93:83:da:e5:9b:2f:9e:34:60:94:39:06:34:81:f8:
51:04:9b:50:79:55:81:8f:c3:99:12:d6:5d:ae:fd:
7b:39:7f:1c:d1:14:e0:b1:4b:bf:d1:67:79:1d:3c:
b0:00:e0:63:6e:1d:5e:44:7d:0f:5d:ef:c2:eb:2e:
0e:a6:c0:57:97:95:9b:46:bb:76:a8:bc:4a:cb:ff:
8e:6a:4f:cc:ec:bf:9c:74:df:d3:95:61:b8:57:bd:
27:5b:85:a9:1e:43:cd:2a:bf:ad:b0:8f:5c:db:f3:
bf:2c:26:af:06:c0:fd:4d:52:fd:55:15:11:8a:b8:
49:da:7c:6d:8e:3b:5e:52:b7:f8:8c:d8:09:76:61:
26:58:6d:a9:16:8e:f7:b8:9d:84:91:0f:d2:5f:da:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:9B:55:FF:A2:23:9A:BD:7D:65:FA:AA:D7:6C:50:05:EE:7B:DF
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:dc:af:08:bd:ae:ed:ea:0a:f8:2c:89:37:c6:1c:41:a0:
5d:bc:a4:80:79:f1:6f:2f:a8:0e:2f:80:3c:50:fb:7c:ca:4e:
d7:fa:7b:da:21:15:f4:a6:f7:01:0c:54:de:2f:7b:83:c1:4c:
b9:f8:07:81:ae:9d:77:48:ca:22:fc:c8:f3:33:7e:6a:43:8d:
e9:a0:3a:e8:fe:f1:f3:be:cd:ee:4b:f1:ef:c4:fb:25:2a:ef:
0f:a9:98:4a:0b:56:25:13:37:20:e9:6f:7f:b2:1d:e1:ab:15:
d8:fc:ab:b1:e6:cb:6f:a5:60:51:41:1c:cb:31:7c:3d:27:49:
53:96:7d:98:e3:6d:b3:b4:df:dc:74:c1:9a:01:0d:e9:72:75:
25:87:64:36:ac:7b:8c:07:bb:29:5d:6e:41:7d:e5:72:6f:06:
ce:bc:cb:ed:3f:f4:85:de:2f:5a:46:fd:53:06:f3:60:48:d8:
9d:25:54:56:dd:79:51:14:34:60:63:da:cd:f1:62:0c:66:79:
84:1e:21:81:ec:78:be:17:28:df:b7:36:75:0b:f5:7e:a6:cf:
05:50:02:21:ce:37:fe:6a:3d:f5:cc:4f:45:d6:65:eb:38:77:
bb:4d:dd:40:37:c7:1c:7e:f1:32:11:d0:cf:40:57:1a:fa:1a:
ed:cc:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:53 2025 by rpki-client