Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: Rq/uozs+wTGYwAS5TMZ5NBtcDo+ZKZ8IH98ZMr+euRk=
Subject key identifier: B8:E4:F8:1B:AC:A6:39:A4:DF:8A:36:84:85:40:25:34:E3:25:E5:BB
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 0199FB0EDF2549C2C3D2547CFD09F72B076F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0FCB
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: iYZZWWsSPb9WvIEVv+1zfTzLbSIspLzTF6dTtZMudq4=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:df:25:49:c2:c3:d2:54:7c:fd:09:f7:2b:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=b8e4f81baca639a4df8a368485402534e325e5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:41:7f:b5:7b:a7:e2:b2:31:cb:cd:c5:fa:
60:72:9a:03:08:ec:2c:e4:82:d0:4a:e5:70:23:08:
e1:c6:a6:42:88:f4:c9:f4:26:63:24:61:8a:5d:7a:
25:03:92:81:0e:36:d6:13:b4:03:03:79:2a:e4:87:
6b:24:cb:ee:7a:8b:41:c5:31:2f:23:28:08:44:69:
31:b1:9c:af:ca:0b:37:6d:9a:b3:0d:b4:fe:51:18:
f9:39:ca:ed:14:7e:f2:cd:a1:9b:c6:97:05:fb:32:
d8:c0:2a:51:ad:d5:16:92:fd:a3:7e:0b:85:16:21:
31:5e:73:f0:e2:b8:95:83:6f:0f:45:11:f4:f3:c9:
d0:3a:1f:27:53:c0:58:02:22:fa:6f:79:fc:97:c8:
59:4d:eb:c4:89:e5:a3:24:33:86:dc:55:d9:e0:01:
40:0b:d9:66:14:ff:3e:9b:63:9c:bc:7d:2f:1c:17:
10:3a:2b:52:17:36:1e:4c:ee:f3:12:5e:46:01:af:
c4:cb:fa:9c:d0:d3:43:84:10:70:76:6c:6d:9f:ae:
18:00:55:8c:ae:af:f8:18:f2:66:8b:7c:aa:9c:92:
b6:4c:94:2c:c4:59:f4:b2:cb:09:93:4c:db:d2:6f:
f2:6a:f9:81:3f:7e:ce:5c:22:0f:49:73:be:be:f4:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:F8:1B:AC:A6:39:A4:DF:8A:36:84:85:40:25:34:E3:25:E5:BB
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:00:6e:fc:c1:21:9c:df:3e:98:91:8f:80:da:3b:de:a8:
6b:fd:12:c8:f3:37:43:65:04:18:76:65:50:54:77:5c:7d:57:
26:19:0a:a8:53:09:87:8f:e1:3f:90:4a:f3:07:be:7b:20:99:
1e:09:64:59:f8:e3:3a:40:79:53:55:e5:f5:7b:b6:31:44:ec:
63:68:20:9e:0b:2e:bc:20:8f:02:73:2e:36:ca:3b:87:c7:df:
24:96:90:0f:e3:11:4b:fc:56:f2:1c:47:97:43:f3:12:56:de:
f8:09:f6:1c:8c:e4:98:67:4e:c4:ad:d2:f3:fe:b3:31:53:8a:
fb:07:32:32:71:ce:95:c6:a1:a0:4a:f4:e2:fb:d7:32:58:35:
65:e5:52:73:2a:8e:a2:c9:a4:ae:6e:58:58:0e:fa:63:db:1f:
fa:7e:4b:0c:13:5a:a0:f6:36:58:06:91:b4:e3:80:93:cb:5c:
16:52:44:93:f2:45:d6:bb:ea:08:6b:38:47:e2:b1:dc:5a:8a:
71:17:d8:a3:bb:d3:2a:61:8f:ad:f5:b9:05:ef:ac:b1:fb:d6:
02:01:6f:4d:0c:2d:76:58:2a:95:82:7d:e1:9a:98:23:07:3d:
f8:d4:6d:cf:d0:e3:23:6a:af:dc:7a:cc:93:90:61:6e:fd:3a:
c3:73:ce:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dt8lScLD0lR8/Qn3KwdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2
NDUwZWEwHhcNMjUxMDE5MDYwMTE5WhcNMjUxMDIwMDYwMTE5WjAzMTEwLwYDVQQD
EyhiOGU0ZjgxYmFjYTYzOWE0ZGY4YTM2ODQ4NTQwMjUzNGUzMjVlNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxBf7V7p+KyMcvNxfpgcpoDCOws
5ILQSuVwIwjhxqZCiPTJ9CZjJGGKXXolA5KBDjbWE7QDA3kq5IdrJMvueotBxTEv
IygIRGkxsZyvygs3bZqzDbT+URj5OcrtFH7yzaGbxpcF+zLYwCpRrdUWkv2jfguF
FiExXnPw4riVg28PRRH088nQOh8nU8BYAiL6b3n8l8hZTevEieWjJDOG3FXZ4AFA
C9lmFP8+m2OcvH0vHBcQOitSFzYeTO7zEl5GAa/Ey/qc0NNDhBBwdmxtn64YAFWM
rq/4GPJmi3yqnJK2TJQsxFn0sssJk0zb0m/yavmBP37OXCIPSXO+vvT2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjk+Buspjmk34o2hIVAJTTjJeW7MB8GA1UdIwQY
MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct
MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw
LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEq0AbvzB
IZzfPpiRj4DaO96oa/0SyPM3Q2UEGHZlUFR3XH1XJhkKqFMJh4/hP5BK8we+eyCZ
HglkWfjjOkB5U1Xl9Xu2MUTsY2ggngsuvCCPAnMuNso7h8ffJJaQD+MRS/xW8hxH
l0PzElbe+An2HIzkmGdOxK3S8/6zMVOK+wcyMnHOlcahoEr04vvXMlg1ZeVScyqO
osmkrm5YWA76Y9sf+n5LDBNaoPY2WAaRtOOAk8tcFlJEk/JF1rvqCGs4R+Kx3FqK
cRfYo7vTKmGPrfW5Be+ssfvWAgFvTQwtdlgqlYJ94ZqYIwc9+NRtz9DjI2qv3HrM
k5Bhbv06w3PO8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:45 2025 by rpki-client