Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: ApAdto/ulAxFN+MKsy4aKwg50AdM7Eoce1crZH3Te+4=
Subject key identifier: BA:61:C2:8F:91:BD:B6:7F:F0:8E:66:8D:FF:C6:E7:21:47:98:56:74
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 019A2AB117E238CFFC79350CAE2577D1FDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 06B3
Signing time: Tue 28 Oct 2025 12:00:40 +0000
Manifest this update: Tue 28 Oct 2025 12:00:40 +0000
Manifest next update: Wed 29 Oct 2025 12:00:40 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: MRiaEKihXmDhglo3X3F4WnngPclijilyDmbKv2TXFL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:17:e2:38:cf:fc:79:35:0c:ae:25:77:d1:fd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Oct 28 12:00:40 2025 GMT
Not After : Oct 29 12:00:40 2025 GMT
Subject: CN=ba61c28f91bdb67ff08e668dffc6e72147985674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:66:e7:fd:8d:ab:52:f8:ac:ad:db:6e:25:
ea:74:0b:91:ec:74:c4:33:c2:4c:77:a6:34:ad:4b:
99:4b:40:07:21:e7:74:fc:58:af:60:25:da:31:6d:
8c:df:aa:f0:b8:50:1a:4b:f9:06:be:21:2e:82:b8:
b5:7c:fc:27:86:8b:70:bb:49:bb:fa:5f:57:7d:63:
56:20:36:66:a0:e6:c3:fe:04:a0:42:47:de:46:6b:
1b:73:cf:2b:0d:14:61:be:24:af:fc:01:cc:1c:02:
d2:58:69:fb:15:e4:c2:77:32:1b:b2:f9:90:72:d1:
0c:3b:ff:de:26:78:7d:97:19:d6:16:5f:ae:ce:da:
ce:01:b0:0a:bc:dd:01:62:dc:97:73:71:6e:ab:24:
00:a9:40:1a:51:c1:44:3f:9a:86:75:14:31:1f:9c:
e6:04:b3:ce:36:5f:a0:d4:d9:29:58:03:1b:12:27:
68:29:c7:a3:4c:0e:04:84:bb:15:54:1e:60:65:75:
98:79:03:69:a6:d5:20:a4:46:b3:25:80:49:6a:da:
d0:f1:06:84:27:b9:04:90:3b:b5:49:77:9c:b6:83:
5a:0d:5e:69:f2:f7:35:9c:d9:d2:bc:20:1d:42:e6:
fe:60:9e:89:de:6d:cb:48:5a:80:3d:1c:00:61:d7:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:C2:8F:91:BD:B6:7F:F0:8E:66:8D:FF:C6:E7:21:47:98:56:74
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:33:e0:57:7c:e0:8d:11:a3:26:f7:4c:97:b9:08:bf:20:
10:66:8d:bf:11:31:3a:72:e3:ef:ed:22:2e:e6:a0:7a:b2:e5:
85:cf:3f:70:a0:bd:ea:d2:ab:54:51:26:66:da:cd:a7:e1:89:
7f:88:b5:13:5c:7f:25:45:7a:c1:c5:4e:6e:7f:b1:24:5e:ca:
bf:b4:b7:a7:72:45:bb:49:94:7e:8f:d3:4c:b2:cf:47:95:ef:
8f:1a:a2:7f:43:3b:9f:0a:f7:ad:86:eb:14:0a:0e:3e:0c:d7:
4d:ec:b7:9c:50:6c:4b:53:fd:15:c4:d7:ea:55:1b:da:0d:47:
ff:17:ab:18:c4:e7:0c:66:49:e7:92:fd:cc:a9:e2:41:70:ee:
83:5a:f4:3a:ac:5f:55:72:a7:c3:33:d6:09:67:3a:47:62:f1:
05:d2:60:be:90:18:d8:c0:94:0a:25:29:dc:f2:1e:88:4e:50:
c4:43:a2:0d:40:77:5f:24:5c:57:90:52:51:8a:7d:01:5b:55:
f0:db:d2:e1:09:3e:1f:2a:f5:5c:13:bd:36:21:0e:55:6a:08:
84:01:c5:60:88:17:61:a5:2e:26:52:49:27:13:5e:79:de:fc:
71:7e:45:05:85:f4:b1:33:de:0c:93:ab:ad:56:e2:0c:3f:7d:
f6:b2:0e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsRfiOM/8eTUMriV30f3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzIwNjQ4Nzk4YmI2NTM2YjIzYTRlYmM1ODgwNDU0MTVm
OTZlODAwHhcNMjUxMDI4MTIwMDQwWhcNMjUxMDI5MTIwMDQwWjAzMTEwLwYDVQQD
EyhiYTYxYzI4ZjkxYmRiNjdmZjA4ZTY2OGRmZmM2ZTcyMTQ3OTg1Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx5m5/2Nq1L4rK3bbiXqdAuR7HTE
M8JMd6Y0rUuZS0AHIed0/FivYCXaMW2M36rwuFAaS/kGviEugri1fPwnhotwu0m7
+l9XfWNWIDZmoObD/gSgQkfeRmsbc88rDRRhviSv/AHMHALSWGn7FeTCdzIbsvmQ
ctEMO//eJnh9lxnWFl+uztrOAbAKvN0BYtyXc3FuqyQAqUAaUcFEP5qGdRQxH5zm
BLPONl+g1NkpWAMbEidoKcejTA4EhLsVVB5gZXWYeQNpptUgpEazJYBJatrQ8QaE
J7kEkDu1SXectoNaDV5p8vc1nNnSvCAdQub+YJ6J3m3LSFqAPRwAYdeiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLphwo+RvbZ/8I5mjf/G5yFHmFZ0MB8GA1UdIwQY
MBaAFHnCBkh5i7ZTayOk68WIBFQV+W6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAt
MWZhMTZlZjhjMWFkLzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAtMWZhMTZlZjhjMWFk
LzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs8z4Fd8
4I0Royb3TJe5CL8gEGaNvxExOnLj7+0iLuagerLlhc8/cKC96tKrVFEmZtrNp+GJ
f4i1E1x/JUV6wcVObn+xJF7Kv7S3p3JFu0mUfo/TTLLPR5Xvjxqif0M7nwr3rYbr
FAoOPgzXTey3nFBsS1P9FcTX6lUb2g1H/xerGMTnDGZJ55L9zKniQXDug1r0Oqxf
VXKnwzPWCWc6R2LxBdJgvpAY2MCUCiUp3PIeiE5QxEOiDUB3XyRcV5BSUYp9AVtV
8NvS4Qk+Hyr1XBO9NiEOVWoIhAHFYIgXYaUuJlJJJxNeed78cX5FBYX0sTPeDJOr
rVbiDD999rIOCg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:06:08 2025 by rpki-client