Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier: 0fbju91v7bJsLh1LZ2L1ZZxB5DwEIxay1nUStGEqwmw=
Subject key identifier: 58:AA:90:2E:D3:68:01:C2:DA:68:FC:33:1A:D1:D8:BF:9B:14:E4:3F
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 019933EDCB4B97AA8EEB65466FB5020EAD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number: 0636
Signing time: Wed 10 Sep 2025 14:00:45 +0000
Manifest this update: Wed 10 Sep 2025 14:00:45 +0000
Manifest next update: Thu 11 Sep 2025 14:00:45 +0000
Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: +k/QxnZcb9Hl9rn+1vx3t6JYh9gjuikY6PNBuF9EZZ0=)
2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:cb:4b:97:aa:8e:eb:65:46:6f:b5:02:0e:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Sep 10 14:00:45 2025 GMT
Not After : Sep 11 14:00:45 2025 GMT
Subject: CN=58aa902ed36801c2da68fc331ad1d8bf9b14e43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:06:f9:a8:ce:8f:3d:8c:57:52:fb:af:fc:
a5:a8:f7:a4:69:87:01:55:1c:e2:a7:f7:a7:9e:ee:
ff:ee:d8:e7:71:db:3e:59:15:2d:7e:74:cf:ed:60:
83:68:97:54:1e:74:e2:8e:b5:a4:9b:45:25:d1:1c:
91:6b:23:f6:f3:4c:43:d6:a9:d1:9c:2e:c3:59:67:
8d:bf:6a:e2:c8:e2:1c:c3:45:f7:19:b9:e5:6d:f5:
b9:16:c4:12:19:bb:8d:bc:fd:3b:f2:90:b0:67:10:
99:bd:f3:21:b6:b7:62:98:81:a1:df:f7:8c:a7:eb:
4c:f4:ce:e4:6f:91:85:18:b9:be:63:8f:64:7f:91:
fc:22:49:70:09:00:d6:fd:d7:0a:f2:52:a5:c3:8e:
47:70:b3:08:ab:a0:68:56:f4:39:f6:04:04:04:fb:
3a:84:ce:98:01:f1:74:9d:8e:23:d5:7b:53:1a:26:
32:5f:5d:2b:59:42:65:00:64:b3:55:45:b9:c6:d7:
68:e5:f6:c7:4a:ba:c8:fb:41:ef:36:b9:96:7b:07:
a7:09:8e:4b:9d:84:40:d8:56:eb:52:ed:aa:29:db:
b8:b9:e2:60:bb:8c:0e:90:80:15:eb:27:77:f4:c5:
e3:fd:a1:3f:7e:b8:87:af:a9:90:0f:e4:5b:d3:a3:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:90:2E:D3:68:01:C2:DA:68:FC:33:1A:D1:D8:BF:9B:14:E4:3F
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:81:bc:0e:0a:e0:1d:c6:31:77:30:b0:b0:66:eb:bb:c0:
1b:6c:70:49:4e:d2:7a:58:4c:77:15:9f:62:d5:72:fb:4c:78:
ac:4d:86:fd:6a:af:93:85:77:0c:8b:2c:f2:40:16:3d:39:2a:
21:13:21:1b:1a:f6:1f:3b:19:5c:ca:1e:b4:98:73:05:47:42:
68:4a:94:3b:f3:aa:2d:f5:1d:53:6e:c8:43:86:3e:cd:7f:25:
a3:c7:55:55:16:53:70:5a:74:8c:dc:9e:13:6e:8c:f0:a3:8f:
ce:f3:c0:2e:7c:60:f2:f5:3c:74:1d:5f:48:66:23:02:90:84:
57:ba:f8:c5:38:0d:2d:a4:91:c2:3e:63:14:9d:c7:73:cb:a2:
b7:37:62:a2:f6:09:e0:40:26:aa:1a:8b:0c:59:e9:10:26:46:
ef:e9:89:58:70:9c:37:ca:f3:92:3b:66:83:c6:b6:cb:49:a8:
93:9b:cf:0f:8c:aa:f9:eb:a4:92:d9:67:80:6b:ff:84:31:fa:
d1:ee:2a:75:26:35:ad:47:1f:84:28:bb:53:3c:2d:ce:69:90:
8f:8f:46:6c:49:1f:0c:77:3e:e7:e6:94:b3:d7:ed:12:d7:6d:
52:35:18:97:97:68:c1:13:ee:ad:90:be:5c:aa:2f:52:eb:be:
91:60:1e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7ctLl6qO62VGb7UCDq2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDRkY2UyYjQ1YzcxZjQ1YmFmOGI1M2M2ODllYmRmYWNi
YWZlYzMwHhcNMjUwOTEwMTQwMDQ1WhcNMjUwOTExMTQwMDQ1WjAzMTEwLwYDVQQD
Eyg1OGFhOTAyZWQzNjgwMWMyZGE2OGZjMzMxYWQxZDhiZjliMTRlNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIgG+ajOjz2MV1L7r/ylqPekaYcB
VRzip/ennu7/7tjncds+WRUtfnTP7WCDaJdUHnTijrWkm0Ul0RyRayP280xD1qnR
nC7DWWeNv2riyOIcw0X3GbnlbfW5FsQSGbuNvP078pCwZxCZvfMhtrdimIGh3/eM
p+tM9M7kb5GFGLm+Y49kf5H8IklwCQDW/dcK8lKlw45HcLMIq6BoVvQ59gQEBPs6
hM6YAfF0nY4j1XtTGiYyX10rWUJlAGSzVUW5xtdo5fbHSrrI+0HvNrmWewenCY5L
nYRA2FbrUu2qKdu4ueJgu4wOkIAV6yd39MXj/aE/friHr6mQD+Rb06MOfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiqkC7TaAHC2mj8MxrR2L+bFOQ/MB8GA1UdIwQY
MBaAFBJE3OK0XHH0W6+LU8aJ69+suv7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQt
OTIzNmM2OGVmNDI3LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQtOTIzNmM2OGVmNDI3
LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYuBvA4K
4B3GMXcwsLBm67vAG2xwSU7SelhMdxWfYtVy+0x4rE2G/Wqvk4V3DIss8kAWPTkq
IRMhGxr2HzsZXMoetJhzBUdCaEqUO/OqLfUdU27IQ4Y+zX8lo8dVVRZTcFp0jNye
E26M8KOPzvPALnxg8vU8dB1fSGYjApCEV7r4xTgNLaSRwj5jFJ3Hc8uitzdiovYJ
4EAmqhqLDFnpECZG7+mJWHCcN8rzkjtmg8a2y0mok5vPD4yq+eukktlngGv/hDH6
0e4qdSY1rUcfhCi7UzwtzmmQj49GbEkfDHc+5+aUs9ftEtdtUjUYl5dowRPurZC+
XKovUuu+kWAe2Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 16:07:06 2025 by rpki-client