Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier: eJSbz4zpOvCwsW6S1JUWkzU1VkbkAA+WG7hzigHLFiQ=
Subject key identifier: 09:E4:CA:49:86:88:34:73:BE:EE:6A:5E:F0:04:7B:EC:5A:49:FF:E3
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial: 0197586DE310D3EFC813C0BFE60D9253FB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number: 0C66
Signing time: Tue 10 Jun 2025 06:01:25 +0000
Manifest this update: Tue 10 Jun 2025 06:01:25 +0000
Manifest next update: Wed 11 Jun 2025 06:01:25 +0000
Files and hashes: 1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=)
2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: A2wDD6ObaUuTsTAHXzq9CeAry5G61b1BDMgd9RwTQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:e3:10:d3:ef:c8:13:c0:bf:e6:0d:92:53:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Validity
Not Before: Jun 10 06:01:25 2025 GMT
Not After : Jun 11 06:01:25 2025 GMT
Subject: CN=09e4ca4986883473beee6a5ef0047bec5a49ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:77:02:82:02:c4:71:58:5f:0f:2c:26:da:
11:8f:2a:ce:fe:e0:b2:b2:9b:0e:0a:52:8c:83:29:
28:bc:cd:ce:8d:45:13:96:c5:a5:af:6b:42:58:e6:
f1:04:46:f7:f0:e6:6f:e0:85:6c:ff:38:e6:52:f4:
86:89:74:cb:2b:7e:3e:0f:ee:a2:f6:0a:ba:df:e4:
d0:45:07:c3:ba:15:93:d2:da:5f:9f:07:26:cb:7f:
8e:09:44:fd:49:54:c3:bd:7e:c8:6c:83:f5:97:e0:
76:c8:aa:c0:db:dc:9a:87:cf:49:28:8f:a0:b1:5f:
67:96:ea:95:87:59:c6:f7:0e:8e:2e:39:5e:25:42:
09:c8:04:d3:c2:1e:af:4a:0e:89:32:f6:15:6c:cb:
57:8c:09:e6:e4:85:ca:48:b4:5d:e4:14:09:59:70:
a9:c5:5e:ee:9f:ea:03:c3:f2:e5:45:dd:f8:82:51:
ff:e1:28:99:cf:d2:cc:0a:8f:36:c4:4e:73:be:a6:
dc:9d:6c:33:33:72:fc:ab:e6:2d:58:63:1d:80:c4:
db:7c:6b:d6:90:29:c6:3d:9e:b6:58:4d:8a:9e:a7:
3a:98:44:63:48:33:1c:28:89:92:85:8b:17:f6:50:
1e:4e:fd:88:7b:ce:8f:2a:76:b0:ce:fb:11:92:c9:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:CA:49:86:88:34:73:BE:EE:6A:5E:F0:04:7B:EC:5A:49:FF:E3
X509v3 Authority Key Identifier:
keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:cf:95:f6:db:8f:49:76:6d:b8:cf:19:87:50:b5:2b:66:
6c:9c:39:20:08:94:00:42:30:3a:c4:08:e6:80:6d:ef:57:ce:
60:08:19:47:ab:d1:82:5b:a8:0b:62:d5:2e:32:16:1d:61:13:
1e:b5:6b:f7:79:a2:cf:76:2a:d3:c7:9d:2d:e9:a6:8f:82:f8:
00:81:9f:3f:db:36:79:98:28:24:7e:e6:ed:90:e6:c2:b8:09:
f8:8e:e4:2a:8d:fa:1d:91:72:0c:d0:8e:8c:53:74:29:c4:85:
fe:22:ec:ca:47:13:54:21:d2:c7:94:50:b1:04:e2:e4:67:1e:
24:04:01:d4:dc:a5:4d:a7:78:f6:d5:e1:38:78:d6:15:9f:32:
30:91:49:48:ef:26:1f:8c:48:33:06:c3:fb:4f:37:45:d9:f7:
81:23:8c:9b:1c:e6:5e:5c:63:a1:69:60:e3:05:e5:94:3b:75:
a2:40:17:74:f0:61:c3:88:b4:4a:c4:d4:25:13:c7:3a:d6:88:
97:51:5f:41:7d:d5:75:de:dc:b1:34:aa:ea:61:4e:5a:8f:f0:
12:7e:00:2d:93:9a:e7:4a:41:41:ca:02:f6:45:68:aa:0f:b1:
74:8b:f1:8d:71:39:08:62:18:f5:9b:b8:df:60:e0:71:54:03:
a1:02:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:34:44 2025 by rpki-client