Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier: DK5a/PehOWBzgMmsIIXg4UnrDKpY6mWDPvf2Nbht1h4=
Subject key identifier: 67:E0:B5:E9:DA:30:28:09:88:2C:FE:81:78:1B:67:DE:E9:52:F2:3D
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 019A3E6F1E6489A209FC94D1F4DC47C1F647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number: 06C0
Signing time: Sat 01 Nov 2025 08:01:00 +0000
Manifest this update: Sat 01 Nov 2025 08:01:00 +0000
Manifest next update: Sun 02 Nov 2025 08:01:00 +0000
Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: M5Uw789Q+BaOrbfv/JchIB5DOOeyoYQB9uLmSNzf6wE=)
2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:6f:1e:64:89:a2:09:fc:94:d1:f4:dc:47:c1:f6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Nov 1 08:01:00 2025 GMT
Not After : Nov 2 08:01:00 2025 GMT
Subject: CN=67e0b5e9da302809882cfe81781b67dee952f23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:63:2d:80:6d:2b:6e:98:04:8f:c4:df:d7:
09:d7:c0:87:a1:ee:fd:5d:26:49:d7:79:d6:e8:46:
d6:29:07:64:18:1c:9d:83:5b:ec:b0:59:de:ee:03:
0c:12:a5:6c:a0:62:3c:c3:30:d5:b7:45:48:2f:41:
9c:e0:72:cb:c2:8c:21:19:cf:10:ab:2c:3a:4a:0f:
2c:0e:2b:bc:60:38:40:8d:6c:d1:10:a5:74:26:49:
44:f2:58:af:a7:be:3b:2a:27:40:1e:15:fd:a7:9c:
c8:02:93:86:fb:b2:70:69:97:23:c1:01:86:18:35:
87:69:32:19:86:f6:59:b7:2c:c5:89:b9:fa:7f:61:
38:cb:b4:40:23:12:a9:b9:08:cb:15:a2:55:07:14:
cb:0a:7c:ce:31:2e:b0:19:c1:22:8b:8e:31:b6:1a:
af:1c:0f:a2:94:79:2d:40:c7:b1:92:86:6c:27:19:
61:0f:83:3e:cb:af:4c:12:c7:0f:e4:4c:ae:49:25:
44:4b:b5:aa:21:e1:74:44:d0:a1:8f:c8:5d:ff:d1:
4f:ca:d1:80:c8:76:7d:8f:78:66:ef:3e:25:20:2f:
3f:af:79:37:df:8e:dd:aa:8f:43:6b:8b:26:6f:1d:
d2:ce:a8:84:03:b1:14:77:2c:55:f8:67:dc:7f:da:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:B5:E9:DA:30:28:09:88:2C:FE:81:78:1B:67:DE:E9:52:F2:3D
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:41:59:9f:0f:03:d7:a4:6d:68:ec:94:d4:0c:39:61:b3:
6c:ce:c2:ca:ce:47:6d:28:fe:db:af:91:be:7f:c3:8c:a9:7b:
2a:88:75:4c:97:f7:e8:47:7b:88:ee:0b:63:17:b9:9a:aa:41:
6a:d1:96:d1:91:c5:f9:a8:5e:c0:e1:ad:6a:45:71:b7:61:23:
ac:b1:64:af:28:b4:2a:29:ab:20:e9:29:b1:19:14:0f:cc:37:
5d:0d:8f:01:e9:df:0c:4c:d9:05:32:6e:87:28:e1:79:b3:b5:
b9:1e:99:4a:6b:58:d1:55:cc:1a:41:f7:2a:a2:39:07:c3:75:
d2:2f:36:50:0b:9b:67:37:c2:48:a5:db:48:00:ff:7a:b3:b6:
f2:9d:84:b8:a9:68:1f:ca:58:90:1a:4a:c8:a8:02:fa:f2:60:
4c:9c:1c:ae:8c:ee:57:9e:c1:7d:e7:66:09:58:af:ce:3c:fe:
ce:e8:a8:8b:08:6a:6d:a0:7c:f0:61:26:b5:31:34:fc:67:6e:
46:31:a3:dd:70:94:8e:7b:67:49:fc:99:c3:68:79:0b:26:bf:
95:2c:f0:e3:38:49:a6:c1:b6:66:24:55:9f:56:5d:12:70:6a:
e9:44:38:bc:4e:3b:14:ef:a9:1e:91:0a:02:7b:fe:92:df:43:
83:cb:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:06:34 2025 by rpki-client