Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: YbA4XNbjMCixx7EXjJGEYrq+NClelnxhE92VfrdDTks=
Subject key identifier: 6F:BA:D7:CA:80:5F:06:EE:84:61:F5:A0:91:32:54:E4:57:B2:12:83
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019921E7548571A465C62D953AC8CB0A0528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 12CF
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: QVF13XQWL2BSxg2j0pC3V1zvnApJQB0yCK+NjAJTfq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:54:85:71:a4:65:c6:2d:95:3a:c8:cb:0a:05:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=6fbad7ca805f06ee8461f5a0913254e457b21283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:b0:1b:10:12:bd:37:c8:d5:34:d2:47:7d:
74:86:da:fe:45:ba:90:94:23:34:50:f9:4d:c5:fd:
5c:5c:40:56:8b:0b:f4:f8:fd:cd:89:25:4a:d7:c1:
7b:79:44:7c:ff:81:89:bf:a7:bf:f7:0f:86:80:ef:
e7:73:5d:d7:8a:e6:e4:eb:25:97:44:b1:6c:2e:b2:
c0:6d:e3:1f:9f:54:9e:19:80:b4:d9:b3:aa:25:86:
8d:0a:2e:e4:45:60:66:df:8d:73:22:36:28:28:76:
6a:e9:ee:16:ef:79:36:f1:4e:91:a9:aa:23:92:65:
d4:08:b3:79:02:ac:9e:12:4a:96:aa:78:0a:1e:cd:
d6:3a:f2:e7:0f:bb:ec:b0:de:94:c4:e5:19:91:95:
70:98:8a:49:d4:27:40:d9:b5:31:0d:5a:50:da:f7:
a4:c8:4b:2a:a0:5b:70:00:13:af:f1:bf:81:76:ac:
8f:ac:d1:94:41:f8:6a:49:eb:8a:e7:56:d6:60:f4:
9b:cf:f2:99:ad:66:60:e8:f7:e3:9a:34:b4:39:91:
8e:24:82:9c:b6:14:1a:52:51:72:c7:37:c9:9f:f1:
56:85:14:34:ea:5e:43:5e:03:65:dd:89:f5:62:31:
7f:e9:45:65:f8:55:24:1e:70:5d:50:4e:24:0c:9b:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:D7:CA:80:5F:06:EE:84:61:F5:A0:91:32:54:E4:57:B2:12:83
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7b:40:2c:b2:4c:11:ba:84:ed:b4:1f:5a:db:91:41:33:ba:
40:b9:19:75:81:7c:f2:1f:13:fe:12:d9:9a:65:e2:d5:ed:e7:
0f:d5:3a:57:fc:05:67:61:e0:fc:78:c4:73:82:23:f5:56:1a:
48:c1:84:6c:b4:4a:2f:9e:f8:ce:7e:5f:9d:6b:3b:b2:4c:fd:
de:ea:2c:0e:31:7c:de:d7:f5:80:b1:c1:99:d1:ec:8f:87:9f:
b1:51:08:9b:91:ce:a7:cd:d1:ef:be:09:9f:a9:cb:3a:ac:84:
45:ba:f4:bc:ef:5e:35:a2:c8:ee:3f:37:c8:82:13:0a:83:e4:
49:c4:67:89:a3:66:53:54:5a:f5:58:ce:a7:18:ee:4c:47:f4:
09:31:7b:2c:58:50:d9:47:fd:b2:52:f4:4c:a5:79:0e:b9:89:
eb:cd:56:91:73:44:e0:33:ad:ec:7a:37:99:4f:a1:ee:d4:5f:
84:86:99:fe:9b:69:3d:0b:45:67:5f:fb:96:92:9e:49:60:bd:
8d:46:d7:2e:57:21:37:58:a4:82:42:9e:06:6b:d2:ce:08:48:
d3:bf:7d:87:0f:25:3c:56:0b:93:f2:4e:96:cb:0a:32:7f:8d:
bb:5e:53:3d:13:01:e1:eb:98:75:f5:b1:6f:9a:22:96:a9:3f:
20:b5:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:10 2025 by rpki-client