Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier: lC7Y4QZWk3zU2hfzP58qTCgBR5jpy0zBukFKY9s9/jg=
Subject key identifier: 24:9B:E6:6C:54:FA:A6:32:AD:3F:6C:A3:95:4B:5C:2F:22:59:81:04
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 019A71EEC669DE6B8F8E614216EA6FDDAB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: OaIyN8sVHKd1jSS0faS4VyYqKloiq+WemYDjdKDtJbM=)
2: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (hash: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c6:69:de:6b:8f:8e:61:42:16:ea:6f:dd:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=249be66c54faa632ad3f6ca3954b5c2f22598104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:da:67:2e:7e:ea:b8:71:e1:16:ca:4d:68:
bf:82:99:df:6b:fd:72:a1:dc:09:78:fa:82:b5:f8:
83:9d:1f:ad:f4:c0:72:4d:ca:61:74:9a:39:d9:8b:
52:d1:81:39:c2:15:a0:b8:3b:48:17:37:49:c2:31:
27:a0:6d:1a:ec:f3:a9:7f:38:6e:36:4b:fd:14:4d:
73:01:93:7f:c1:0e:c1:52:7c:ac:54:13:a7:48:3d:
d1:c7:9c:6a:0b:7b:94:9d:da:23:0b:d8:cd:28:d8:
50:f9:27:1e:5f:4b:94:15:40:25:2d:7a:2b:f0:59:
d4:e5:80:05:0e:31:83:90:7b:c1:d7:fc:55:68:8d:
33:6c:23:69:74:8c:eb:7f:f2:1f:7c:6b:78:75:cc:
11:dd:a0:87:5b:44:34:a5:e4:cb:68:ef:46:da:66:
cf:c7:b9:57:f0:6c:ac:5d:9a:47:17:ab:32:f5:73:
88:87:3e:34:f3:18:d5:61:28:e0:51:10:b5:d8:fd:
2f:38:92:3b:8d:6f:78:ba:fd:8a:d7:8f:f1:e7:5c:
b4:33:24:f0:b4:dc:1f:37:e7:6d:b8:46:da:1f:fc:
e1:57:59:c2:1a:94:8c:3a:b6:d4:c3:5e:d7:48:9c:
cd:d5:dd:ed:16:6f:8c:05:a9:a0:ad:79:58:de:e3:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:E6:6C:54:FA:A6:32:AD:3F:6C:A3:95:4B:5C:2F:22:59:81:04
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:ac:94:e2:01:bf:44:73:a6:ff:2d:fe:0d:6d:00:72:7b:
99:fe:88:e1:1a:e7:84:44:28:74:04:09:10:76:0f:89:32:81:
ef:74:05:19:c8:ac:c2:06:3f:f7:af:8e:a1:47:43:d8:96:8c:
d8:a2:38:9f:84:2f:08:e6:ce:95:ab:d8:71:06:91:d8:a6:68:
53:68:a4:af:d5:e9:d7:24:e4:e8:eb:36:4e:ff:2d:b4:f0:3e:
91:31:5b:17:bb:e8:4f:f6:f8:73:18:b1:06:84:3d:db:36:fb:
69:90:78:e4:33:19:34:ec:b6:d4:e6:7d:75:2f:8d:f7:a7:f1:
df:a9:58:74:04:62:8e:86:24:81:d9:b0:53:86:45:53:73:f5:
e8:3e:92:82:2d:23:b3:68:7a:03:f6:7a:30:2c:19:e8:fd:07:
bd:a4:9d:76:ab:da:37:7b:3c:45:d3:b5:f1:6c:04:5c:6b:f3:
6b:c1:0a:3f:2c:63:bd:63:ea:a4:99:e4:23:c8:ed:a8:8c:f7:
a2:82:79:9a:05:52:79:ad:ad:a7:82:c9:85:b5:ad:88:e0:2c:
d8:db:64:68:fd:aa:9b:97:6f:46:35:da:50:47:19:de:dd:0d:
2f:fb:f9:73:51:24:d7:ad:26:c2:e8:04:b7:d8:21:e5:3f:6a:
88:fe:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client