Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier: HdqMBEDNTrcvyVULA+xnOHiSSIjqw971MJV5HNO3kyQ=
Subject key identifier: 1A:9E:B8:55:EE:E2:A8:22:94:74:D5:0A:E6:16:92:AB:6C:6B:10:DF
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial: 0199228C9264985E98AC90303B26CD8EB14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: enKGPOG42WCCKthtCNzWSo9SIhIhpIvy5bb47OtXsps=)
2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:92:64:98:5e:98:ac:90:30:3b:26:cd:8e:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=1a9eb855eee2a8229474d50ae61692ab6c6b10df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:ea:2b:61:22:9e:bb:94:4a:e2:4d:04:21:
61:b2:3b:16:b6:0e:96:50:de:ce:67:71:c6:6d:2c:
06:bc:ec:73:ce:28:ab:1d:8b:ed:08:f7:96:11:ef:
e6:a3:54:4b:d3:7b:12:f6:69:97:bb:21:e1:d8:5c:
0e:22:b4:1b:e6:6d:27:a8:19:8f:9c:9a:a3:38:0d:
f9:a9:a2:b6:7e:1a:76:18:ea:aa:39:fb:0d:2d:1e:
34:b7:fb:12:9c:6d:54:72:63:f3:64:da:95:37:80:
3e:6f:63:98:b0:fa:f2:a5:32:82:39:b0:4b:da:e2:
23:cd:c0:2b:22:45:ac:d9:61:1c:cf:2e:e7:19:bf:
81:e0:43:77:c6:7e:7a:77:37:d4:47:84:71:31:1a:
5f:2b:db:aa:7d:f3:33:35:05:d9:d8:66:99:2b:9c:
b2:55:f1:70:82:67:19:fe:03:d3:13:82:65:dc:f5:
55:4d:c1:39:82:c4:db:93:da:6f:b0:03:c3:64:e0:
c8:ed:91:fd:26:e1:2e:b8:bb:ba:9a:c2:6e:e3:8d:
6f:d3:be:19:19:57:e4:7c:66:f9:f3:61:9e:4c:21:
b8:cd:7b:ed:a8:6d:76:0d:91:b4:3c:2d:6b:5a:30:
20:be:8b:98:c6:57:c6:13:73:29:02:d2:98:af:6c:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:B8:55:EE:E2:A8:22:94:74:D5:0A:E6:16:92:AB:6C:6B:10:DF
X509v3 Authority Key Identifier:
keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:fa:65:37:31:f8:e5:63:15:6b:96:6e:64:df:50:fd:fa:
24:d4:22:ee:81:f8:61:85:db:ef:fe:97:e4:29:d6:4c:a7:c6:
ff:33:40:7c:05:27:28:de:d0:25:a5:79:6b:92:2f:44:17:da:
40:05:f5:f3:d6:41:7b:a0:26:d8:dd:88:d3:97:63:c2:f7:31:
cc:eb:1e:a5:5c:1d:0f:47:94:e5:73:f2:40:36:37:26:46:ca:
6d:00:ee:0d:ba:44:2d:f7:c2:f0:3d:f6:fd:46:b0:cb:f7:08:
03:c8:f1:76:ae:de:45:2a:c4:c3:41:86:5d:5e:13:d4:1d:50:
3c:32:49:03:12:1c:38:00:19:3a:f6:83:16:5d:8e:5b:97:7a:
04:f5:89:de:61:d9:94:5b:59:60:b8:cd:d9:ee:9d:90:65:26:
84:82:b8:59:96:8d:ea:19:3f:e5:52:ec:d0:db:8a:34:c1:9e:
d3:19:f9:78:0b:f4:33:09:07:ce:76:51:56:60:d2:b8:e3:40:
4a:10:1d:02:79:40:f5:53:fb:1d:c3:53:2b:f2:b7:c9:78:b5:
82:15:f7:14:14:cb:41:8d:9e:fa:e7:b4:cc:dd:48:cc:b1:04:
f4:09:cd:8e:4d:a2:b2:f2:bc:eb:3d:02:a1:b2:5e:9e:1b:bc:
3e:fd:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:35 2025 by rpki-client