Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: x1m5HxWf1RDkzzzl4/PYi47T+7/lCM0JpCucPmLLktU=
Subject key identifier: 08:0D:93:95:A0:06:E3:AB:F3:0F:49:2E:C2:DE:26:9B:80:6D:73:C4
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 019A71EE7E6224D0C6FC04C398070B51F711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: Z7/ITjH7NggrWzzqzAU/xj22WNNBvsvP7CBSIiC5I3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7e:62:24:d0:c6:fc:04:c3:98:07:0b:51:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=080d9395a006e3abf30f492ec2de269b806d73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:03:35:d4:fb:74:1a:a3:33:81:33:dc:e3:
e6:4a:33:a9:e0:d2:a5:28:d4:48:d2:92:b9:58:da:
86:60:5f:49:05:de:15:ba:cf:25:8b:f3:f2:01:0e:
59:7c:52:e9:8e:4b:61:87:24:b9:2f:05:c5:7e:6d:
97:3c:d5:37:39:9c:2f:06:58:74:dc:aa:86:14:e4:
61:ae:e6:a4:8d:9f:68:dc:9d:65:61:56:40:f4:ec:
2f:a7:b4:87:46:e2:3a:a1:21:49:50:77:35:a5:aa:
4d:b8:f7:3e:5f:5e:99:fd:f1:23:b1:8a:51:b0:3f:
fa:84:9e:d8:ef:20:c7:76:7e:b7:80:13:58:f9:33:
24:06:53:ad:60:ea:16:08:b0:9e:90:8d:c6:15:03:
cb:a9:c8:f8:05:16:63:55:cc:49:22:5e:c4:ce:a9:
5d:72:eb:29:82:aa:73:e1:54:df:a3:eb:35:ed:34:
d3:d2:b0:1d:75:5c:b1:b5:f1:d3:8a:bd:5e:6c:9a:
32:85:2f:fc:7d:9d:da:4c:04:63:18:06:26:ff:15:
5c:f9:95:c9:6c:56:88:de:fa:4b:dd:e5:20:90:ef:
f2:0a:4c:79:c8:fa:44:bc:ef:e6:cd:ef:b0:d0:f7:
79:b5:ee:99:80:83:6d:13:e5:30:3a:01:30:56:76:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0D:93:95:A0:06:E3:AB:F3:0F:49:2E:C2:DE:26:9B:80:6D:73:C4
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:12:e2:14:4f:fb:6e:30:58:c0:a2:69:d8:92:34:a0:8b:9b:
a2:6b:c0:03:e5:80:7a:00:82:2b:9f:88:d6:93:3c:f2:e5:51:
cc:7b:4a:ec:ce:d9:fe:b6:70:aa:e5:eb:4b:ae:ad:93:11:86:
c5:59:0d:df:89:f4:cc:18:8e:33:ba:c6:3b:4b:62:8e:7a:4e:
31:14:bf:5f:3f:db:86:e3:e7:01:23:b7:09:fd:fd:92:0c:90:
d0:2c:f2:20:10:27:87:78:ee:54:74:81:0f:12:d8:c2:72:48:
d5:da:11:34:22:a2:96:11:bb:b7:84:33:d2:dc:3a:e6:d2:e6:
93:5b:01:14:ad:26:25:c7:f5:45:eb:a2:2e:00:3b:6d:06:b0:
bd:b1:7f:01:ac:09:48:d4:b5:f4:7f:b8:73:1d:00:90:30:72:
33:24:87:ad:51:4f:73:ba:3d:89:75:64:d5:a1:d3:02:8a:f5:
99:2e:b4:9a:50:9d:ed:2e:ee:23:b3:a9:25:a3:65:9e:cc:25:
8d:af:86:17:f8:40:5b:cb:f2:0d:55:1e:f6:02:8a:f1:fc:32:
af:51:30:b9:25:49:b0:8f:d6:ca:ed:36:0d:b9:d6:dc:01:09:
20:17:64:e2:95:e2:91:95:ad:21:c1:c0:5d:1a:cd:c5:2d:bb:
b8:c9:ca:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7n5iJNDG/ATDmAcLUfcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzdlYTRkMzlmNWNiNWY0NTg2MGEwOWVhMzgzM2VmOGFk
ZDY4MjgwHhcNMjUxMTExMDgwMDQ2WhcNMjUxMTEyMDgwMDQ2WjAzMTEwLwYDVQQD
EygwODBkOTM5NWEwMDZlM2FiZjMwZjQ5MmVjMmRlMjY5YjgwNmQ3M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqucDNdT7dBqjM4Ez3OPmSjOp4NKl
KNRI0pK5WNqGYF9JBd4Vus8li/PyAQ5ZfFLpjkthhyS5LwXFfm2XPNU3OZwvBlh0
3KqGFORhruakjZ9o3J1lYVZA9Owvp7SHRuI6oSFJUHc1papNuPc+X16Z/fEjsYpR
sD/6hJ7Y7yDHdn63gBNY+TMkBlOtYOoWCLCekI3GFQPLqcj4BRZjVcxJIl7Ezqld
cuspgqpz4VTfo+s17TTT0rAddVyxtfHTir1ebJoyhS/8fZ3aTARjGAYm/xVc+ZXJ
bFaI3vpL3eUgkO/yCkx5yPpEvO/mze+w0Pd5te6ZgINtE+UwOgEwVna9SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgNk5WgBuOr8w9JLsLeJpuAbXPEMB8GA1UdIwQY
MBaAFHnH6k059ctfRYYKCeo4M++K3WgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTIt
MjhiZjNkOTBiZDdiLzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTItMjhiZjNkOTBiZDdi
LzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhLiFE/7
bjBYwKJp2JI0oIubomvAA+WAegCCK5+I1pM88uVRzHtK7M7Z/rZwquXrS66tkxGG
xVkN34n0zBiOM7rGO0tijnpOMRS/Xz/bhuPnASO3Cf39kgyQ0CzyIBAnh3juVHSB
DxLYwnJI1doRNCKilhG7t4Qz0tw65tLmk1sBFK0mJcf1ReuiLgA7bQawvbF/AawJ
SNS19H+4cx0AkDByMySHrVFPc7o9iXVk1aHTAor1mS60mlCd7S7uI7OpJaNlnswl
ja+GF/hAW8vyDVUe9gKK8fwyr1EwuSVJsI/Wyu02DbnW3AEJIBdk4pXikZWtIcHA
XRrNxS27uMnKaw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:54 2025 by rpki-client