Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: +dl+NCZ/MH519zg+wvVmYvZPey1waOfqm27kgMB9lA4=
Subject key identifier: 76:67:79:90:83:A5:A7:B3:AD:63:A2:15:E4:A0:40:15:3A:42:07:BB
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 0197B7B2E55D4BF1C52F72C56B8E37B0F3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0E9F
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: +msPzj5xvK6FDtseS6NcHRVtyxaa0Ibaa4KfTYUACiM=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e5:5d:4b:f1:c5:2f:72:c5:6b:8e:37:b0:f3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=7667799083a5a7b3ad63a215e4a040153a4207bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:92:1e:39:e2:0b:e0:45:a9:93:68:92:89:
f9:fc:05:66:ff:b2:44:69:61:47:20:a1:16:46:4f:
82:04:2b:8f:54:88:b6:46:6c:e8:31:6f:e7:04:43:
d8:1e:e8:ac:ca:0c:2b:cc:5c:12:8c:68:b4:c3:1b:
dc:6f:51:5b:25:2e:c2:87:f0:f2:09:12:36:bd:6f:
61:8e:41:c3:4e:20:83:a7:07:b1:78:1d:ba:75:4e:
cb:84:4a:9b:43:fc:88:7f:16:c0:25:97:91:0f:39:
93:cd:56:df:ca:31:c7:bb:d3:04:bd:66:9e:67:82:
85:35:c0:fd:bc:4a:e4:4b:fa:11:9f:bc:61:3a:29:
25:9d:f9:47:b3:a1:dd:a5:91:29:de:3d:3a:3f:a2:
3c:14:4f:8b:71:bb:f1:d3:83:d7:34:cc:97:e8:e9:
2b:b1:d3:5a:91:ff:c3:1c:f9:fa:c6:89:72:72:a1:
9b:48:c5:c8:d9:89:0b:3e:02:bf:32:0f:67:6d:9a:
3a:12:60:9a:bc:9d:9f:ff:2a:5a:14:39:fb:b7:68:
0d:3f:9c:32:af:83:24:ab:0a:52:51:b8:ed:28:c4:
a0:ec:ea:ef:4a:92:d1:88:aa:32:a0:a8:a3:93:11:
6d:d4:62:5f:bc:d1:45:38:06:45:20:e3:8c:28:86:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:79:90:83:A5:A7:B3:AD:63:A2:15:E4:A0:40:15:3A:42:07:BB
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:06:0f:a5:87:4f:59:07:a1:68:97:93:5e:87:22:69:0a:
5d:d2:70:cf:3b:94:bc:1f:1a:6e:50:ec:4c:90:26:00:bc:cf:
70:50:ad:4c:f6:3f:7d:5e:4e:e9:9e:c9:87:47:02:51:a3:6b:
a0:c1:83:07:e9:fb:a3:ed:1c:7e:a2:0e:bd:cd:28:87:97:91:
85:b8:91:5b:9f:eb:26:73:b4:99:5f:49:bc:85:f8:50:26:5b:
9a:25:e2:52:44:ca:c9:ab:7b:ad:91:e8:3f:b5:91:79:88:7d:
0f:13:a4:ee:4a:d4:26:0d:48:f5:b9:30:14:45:34:e5:0e:7a:
d2:bf:6b:f9:4f:77:c4:0b:f7:73:c9:87:bb:87:2d:76:2a:d0:
91:cf:8c:3a:a3:b1:eb:64:21:9e:9e:d8:9f:19:3c:9e:7e:e6:
06:d6:20:4e:54:e5:1b:8c:03:09:16:3f:2a:12:a4:ef:33:3c:
12:df:dc:8e:af:cc:37:e2:68:57:91:34:d4:05:67:e7:6c:6e:
74:29:2a:f5:09:dd:2f:e3:78:b9:c7:a2:80:90:9f:1a:74:43:
71:f5:96:da:3a:50:9c:f8:da:56:fc:ba:c9:a1:b8:bc:8c:9a:
f3:af:f9:d1:62:8b:52:00:51:fc:9b:c5:7a:d6:5e:da:cc:db:
cd:ac:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:19 2025 by rpki-client