Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: 0+Y7FA02vlR7JNk38C+KhIV8XgLJzTfNgGUysf5RfC4=
Subject key identifier: 63:71:E3:A4:AA:D0:E2:6F:C4:91:41:4B:88:C1:F9:CE:D4:48:11:97
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 019923316FCA203EEE977107676CB6C6A850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0C86
Signing time: Sun 07 Sep 2025 08:01:06 +0000
Manifest this update: Sun 07 Sep 2025 08:01:06 +0000
Manifest next update: Mon 08 Sep 2025 08:01:06 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: /EzvYOxIPrto1j2RQQTKVdLrPxu0Xcvn8OKWTOU7Wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6f:ca:20:3e:ee:97:71:07:67:6c:b6:c6:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Sep 7 08:01:06 2025 GMT
Not After : Sep 8 08:01:06 2025 GMT
Subject: CN=6371e3a4aad0e26fc491414b88c1f9ced4481197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:c0:3c:07:5b:c4:d3:f0:67:f9:5b:e6:d9:
29:a1:3a:2c:71:60:00:6f:dc:fc:bb:da:71:57:4a:
9a:be:2a:f0:7c:52:b5:2f:69:63:33:d2:68:89:56:
ed:9e:18:90:33:d5:ec:49:8b:1a:dd:29:7b:b5:65:
6c:3d:fa:f7:40:b7:6b:9d:00:b7:bd:2e:e0:55:73:
26:8c:b2:4d:36:02:3d:f6:4e:5c:f4:e6:4b:f3:20:
24:48:a5:ec:06:95:ba:47:32:6b:ab:9d:80:33:32:
c0:05:7f:95:79:c2:61:32:84:b5:f9:6d:c1:6e:9d:
5b:eb:07:90:ed:a2:b8:9d:ec:72:c1:11:7c:f6:31:
75:c5:b3:81:99:1e:39:8d:37:78:ba:c8:c3:f5:aa:
2b:fb:c1:63:1f:55:51:86:59:56:31:3f:57:67:38:
7d:30:8f:f4:cf:f4:c8:05:ae:f3:82:fd:b5:02:31:
1e:eb:5f:c3:87:d6:62:78:81:7a:25:84:a4:17:5c:
f1:55:25:45:21:aa:3b:9c:ce:70:a0:30:c8:e2:e4:
27:4d:9f:13:35:f1:46:02:ea:47:11:d2:67:07:71:
da:8a:09:35:6c:54:29:75:e3:53:a9:56:19:6b:3c:
69:a7:47:bd:20:98:d4:86:6a:ee:0a:1e:0f:17:8e:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:E3:A4:AA:D0:E2:6F:C4:91:41:4B:88:C1:F9:CE:D4:48:11:97
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c3:f4:4e:74:09:a3:c8:1f:4c:50:4e:13:ff:50:94:5e:90:
0c:bb:1a:c2:de:c9:af:fc:be:56:12:34:28:05:72:2d:ab:33:
8c:58:56:d5:a4:1a:f2:ea:43:ac:2c:42:93:8a:c1:8d:1f:06:
e2:7b:94:ad:7f:53:0c:3b:76:49:a0:7b:c1:af:07:55:18:da:
e2:a9:d4:74:d9:87:82:be:80:ae:08:a8:8a:95:b9:3e:b0:31:
05:b0:00:d3:af:84:27:20:93:7c:fe:61:07:09:f8:d7:52:70:
73:39:9e:70:4a:8c:d2:39:02:6e:79:b1:77:6c:9a:0a:24:f5:
e6:ff:c6:b6:1a:a3:02:a5:f5:55:fc:2b:58:de:94:46:ce:92:
15:55:50:df:a9:80:2e:00:9a:17:27:f8:82:f5:38:e3:3b:6b:
df:ed:1d:20:9c:c0:e3:af:a8:7c:74:91:58:74:ff:ae:95:4e:
4f:97:d3:7d:4a:16:ee:3c:0e:22:a5:74:20:3f:fd:7f:4f:10:
d1:cb:40:eb:e3:e7:df:33:b7:8e:bb:ee:f2:e9:a5:c6:69:e4:
89:18:d3:70:8d:26:da:05:37:ce:a2:64:47:a5:f9:6a:e2:9b:
3b:48:53:23:b0:42:31:f2:34:a3:09:f7:aa:d0:4c:ec:a4:19:
31:c2:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:09 2025 by rpki-client