Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
File: Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft (raw, json)
Hash identifier: sjvGAALTL7FcwTf+23fkcPeFLZCAuIjuWYC1Qf42eEw=
Subject key identifier: 55:08:68:75:C5:D0:35:BA:3C:41:2B:93:6D:AA:5D:76:15:A0:47:22
Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Certificate serial: 019A725CA2BD06B32AF3F21DB64630E7741B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
Manifest number: 6F
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl (hash: eT0gzd0ZAww4aM0dxeIeA5oXoCdhTTQ7gGxFi5SbXec=)
2: Zf-qZ2UMzAyGiL8cjRBDf8GsL_c.roa (hash: hcx1HTNC9tU6Msn2W64wHhUXk0lGhQiRmQqK9xZ6N7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a2:bd:06:b3:2a:f3:f2:1d:b6:46:30:e7:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=55086875c5d035ba3c412b936daa5d7615a04722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:bf:8a:e6:81:5a:35:43:96:a9:80:52:ea:
3d:e8:eb:9a:4d:03:e5:05:70:e1:13:68:e4:ba:72:
4f:e9:fb:72:ab:9a:0c:11:59:f1:ab:1a:dd:a1:37:
52:77:4d:05:9b:ba:88:da:2e:d2:67:25:61:35:71:
e7:db:ef:0b:30:a9:85:fc:73:99:8e:db:f9:55:4c:
ec:0f:3e:a1:46:6f:eb:39:a4:89:cf:4f:b9:1e:62:
33:27:73:58:2d:28:e2:06:9d:c7:9d:8e:4d:41:c4:
da:13:89:4a:a0:7b:0f:32:ce:a5:4e:d2:1d:86:f0:
27:92:36:d1:ec:7b:56:b0:bd:f5:60:1a:31:0f:df:
e6:e8:4c:43:0e:8c:00:61:c3:92:f6:11:30:d7:7a:
19:42:0f:a9:79:a9:a5:ec:92:e8:59:7a:3b:48:ea:
19:e4:5c:1e:b0:5e:b7:b7:34:cb:e4:6c:0b:ce:fd:
8f:c4:1f:cf:86:c8:88:39:91:cf:3e:2f:66:75:08:
1a:48:f0:e4:3d:49:2a:7d:78:fd:4b:98:85:b7:23:
41:cc:78:44:df:24:b3:fa:6c:7b:a4:3f:95:d8:1d:
72:b5:06:b7:76:56:ff:8d:dc:a3:d3:62:76:fd:1c:
7a:d7:a7:3f:10:ce:9c:b6:ea:19:55:bb:fa:5f:10:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:68:75:C5:D0:35:BA:3C:41:2B:93:6D:AA:5D:76:15:A0:47:22
X509v3 Authority Key Identifier:
keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:d4:0e:bc:25:1c:06:f3:49:f2:87:04:18:1c:aa:8d:82:
ea:5c:42:82:32:e4:33:3e:c6:58:25:e7:ef:f6:2e:fc:1d:d3:
fe:4a:fc:10:ec:31:88:f0:0c:f5:b9:ce:36:ff:24:14:54:18:
61:3b:6f:54:e6:1e:87:f6:35:0d:7e:fb:4c:42:10:d0:52:0f:
b5:bc:fc:55:b7:5d:f8:57:0f:3e:7e:11:7c:96:8e:f0:52:2f:
a2:bb:32:3b:0c:c5:48:34:98:36:46:61:51:09:9a:89:46:60:
d6:f7:9d:3d:02:68:35:1e:c1:dd:86:cd:06:a7:76:e1:25:98:
39:94:70:8d:23:23:e1:38:3d:e4:21:9e:b2:8f:72:ac:c6:6d:
3d:0b:0f:aa:66:c8:a7:92:44:0d:94:2d:6c:d0:21:bf:26:02:
32:d6:b8:21:a5:06:d0:79:4e:1e:a4:7e:e6:12:86:7e:1a:7c:
08:a6:b8:76:cd:1f:a6:f1:0c:0b:41:d2:db:0f:45:41:20:62:
b3:34:57:da:48:fe:19:e9:68:8f:37:12:0c:92:fa:18:ad:93:
4b:8e:68:b1:4e:6d:f8:29:75:fb:4f:d5:af:aa:20:24:d8:6d:
cb:dd:a5:a3:4a:a6:b4:fe:83:ae:a3:70:a1:96:e2:b1:fa:b5:
86:1d:54:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:32 2025 by rpki-client