Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: liSykSVFNFbu7c6mzfj7aR6MvyKDAXlsZNOMTC3UwgU=
Subject key identifier: AA:25:57:CC:00:AF:DA:6D:F4:CA:83:B5:84:76:18:58:F4:4D:14:51
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 0199FC21743BB86702CBCF904C1CCC7FAA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 0365
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: AVsaTVBlya8JHRQIHim+lQRh/CXnRV6ighab4MLcBb8=)
2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:74:3b:b8:67:02:cb:cf:90:4c:1c:cc:7f:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=aa2557cc00afda6df4ca83b584761858f44d1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:c2:58:b3:cc:a2:44:52:bd:ff:e0:7d:15:
14:12:bc:a9:e9:82:b8:6b:33:7a:e2:47:81:b9:0b:
15:4b:7a:c4:fd:70:ea:3b:a3:29:90:c7:00:1c:d0:
2d:b1:02:5e:25:31:b1:4f:ba:f6:1e:b3:12:76:4c:
5c:da:42:c0:9b:c6:e8:27:fe:68:16:63:1b:5f:e2:
20:b5:b4:68:e2:ca:af:39:68:16:c8:2d:eb:9d:3a:
9f:bd:c5:8a:f5:22:89:f8:aa:f1:1e:43:cb:87:f0:
fe:f0:4e:0c:f0:02:ab:5d:4c:28:7b:41:31:66:17:
b9:bd:a0:a9:d6:d5:48:ab:c8:04:28:64:4e:05:c1:
9d:e6:b2:23:56:e7:d6:8f:d0:53:29:5c:c6:56:2f:
be:da:09:d5:3f:72:be:91:97:37:7c:df:bc:cd:87:
b1:22:0a:9e:b2:d0:cd:74:e2:c3:da:40:af:52:1e:
48:b6:5a:f3:2e:78:d8:fa:82:bb:cd:36:e8:29:0f:
ee:31:58:e5:b4:65:af:61:fa:e3:08:a9:86:db:91:
8d:b2:e8:d2:e7:8b:02:2a:d6:9b:f2:65:d4:22:09:
fe:e9:85:73:2c:95:35:0d:01:45:88:fb:d2:d4:b5:
b8:ae:40:2f:75:6b:aa:8d:4a:de:1f:55:1c:44:3d:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:57:CC:00:AF:DA:6D:F4:CA:83:B5:84:76:18:58:F4:4D:14:51
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:98:62:af:67:65:5b:3e:3a:b6:da:79:08:a9:50:10:0b:
e7:5d:d1:15:90:21:59:40:41:62:f7:52:ee:10:a6:75:b2:c3:
2e:f6:60:b8:6f:73:34:8a:bd:ad:82:50:6c:97:2d:8e:53:32:
4e:ef:9e:b2:df:0c:10:c4:ac:b0:05:c9:c2:72:86:01:f5:9d:
ce:56:9c:d8:d0:64:a3:df:49:6b:5c:67:12:27:bc:a3:76:df:
c9:3f:a1:b9:f1:be:5c:6c:70:fd:6a:d8:6c:0c:d4:49:42:27:
f7:1e:40:fa:ff:7b:cd:12:8f:92:4a:e4:00:22:bb:56:24:d1:
51:c4:34:b0:68:c3:16:07:eb:5b:e1:2a:2d:cd:5e:db:07:20:
ee:21:3c:78:e0:c0:70:22:a6:37:ae:97:16:5b:9a:2b:57:c0:
27:ac:91:1a:fd:dd:af:45:c8:c2:52:45:73:be:f8:ca:48:b2:
8b:99:85:6e:87:2c:8c:ca:ab:b2:61:91:66:f3:22:e6:5a:44:
32:15:92:a2:ae:70:98:c4:37:db:6f:94:aa:98:8d:61:07:75:
65:9e:5e:a1:ef:f9:9d:5c:6a:70:8e:14:e2:20:52:1b:38:ab:
6e:0d:1d:50:c8:06:6d:f7:ab:16:24:a0:16:77:0c:d2:fe:81:
ad:74:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:19 2025 by rpki-client