Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
File: Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft (raw, json)
Hash identifier: TEe4KyFeohPZ2m4lweqdSmptPvAJgt9nDZZZ1jy+qLg=
Subject key identifier: 20:71:E9:CA:7E:C4:9E:FD:22:57:9E:54:4A:AA:19:46:84:25:8D:E2
Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Certificate serial: 0199FAA131F69596D1386A53820C8048591D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
Manifest number: 31
Signing time: Sun 19 Oct 2025 04:01:31 +0000
Manifest this update: Sun 19 Oct 2025 04:01:31 +0000
Manifest next update: Mon 20 Oct 2025 04:01:31 +0000
Files and hashes: 1: Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl (hash: 1hUPT6moXsQpYctPRsFzJF9GAt0qF0d8EEqqwG+QDnA=)
2: Zf-qZ2UMzAyGiL8cjRBDf8GsL_c.roa (hash: hcx1HTNC9tU6Msn2W64wHhUXk0lGhQiRmQqK9xZ6N7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:31:f6:95:96:d1:38:6a:53:82:0c:80:48:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696
Validity
Not Before: Oct 19 04:01:31 2025 GMT
Not After : Oct 20 04:01:31 2025 GMT
Subject: CN=2071e9ca7ec49efd22579e544aaa194684258de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:86:2e:d2:ab:a7:60:59:f1:4e:f3:41:fa:
d1:94:a0:11:a4:90:12:62:dd:f9:12:e5:75:cc:22:
e7:08:22:fe:eb:98:5a:7d:61:1c:6d:52:cc:0b:7f:
42:c2:e9:7d:36:fe:f9:79:28:42:cc:b8:05:94:ea:
36:32:2c:0a:4a:cc:ac:19:3e:c4:72:ba:f1:de:96:
0e:44:ad:51:c6:16:14:f4:98:f3:e8:f2:4d:44:f5:
d1:ad:67:6c:49:67:d7:5a:49:81:be:00:f4:f2:17:
02:10:7c:9b:84:dd:ae:24:6d:54:81:65:98:b3:bc:
ce:09:f4:c3:d0:d9:84:27:10:6d:8b:8f:6a:2f:f9:
46:3f:c1:85:4c:2e:c3:44:31:92:bf:cd:a2:2b:b0:
44:3a:3d:b5:0d:5e:7b:93:31:29:e4:4b:ff:84:c9:
f4:80:a6:7e:73:11:d6:d2:d4:10:b4:0b:f7:ee:32:
7e:d0:ec:67:38:f4:68:16:a5:4b:14:d9:9c:70:d5:
5b:dc:df:eb:a0:6c:a3:1b:c3:36:44:e4:b3:4a:0b:
85:d9:54:2f:9b:d9:95:22:8d:ca:8d:82:73:a9:aa:
7a:8d:bb:33:02:de:5f:69:c6:30:28:ed:7a:62:c0:
d1:91:55:14:fc:ec:cb:c3:22:34:be:14:5e:11:0d:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:E9:CA:7E:C4:9E:FD:22:57:9E:54:4A:AA:19:46:84:25:8D:E2
X509v3 Authority Key Identifier:
keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:7e:fa:c1:1a:b2:34:66:83:7e:b9:af:1f:c3:fa:ab:a4:
0f:03:88:de:49:ba:36:bb:7d:be:dd:00:e4:12:11:1c:c8:31:
60:19:1f:b4:24:60:d7:54:95:95:bb:39:44:66:b3:e3:53:ae:
10:9a:f4:3b:67:e1:30:28:3f:99:fd:ca:84:c0:a0:e5:78:a6:
ef:e0:c4:08:eb:e8:37:26:10:99:31:fc:fa:66:41:02:22:62:
54:32:2e:2e:79:fd:58:1f:a0:7e:56:c8:ed:c4:79:2e:ef:0e:
2b:a8:61:ef:52:0d:22:18:b0:89:4c:fd:38:2a:6a:97:12:ef:
cd:5c:cb:5f:65:40:6a:31:cb:d7:56:ba:d0:70:9b:84:9e:9e:
66:6e:85:ba:9d:00:f9:40:5f:c2:c8:fe:6e:f9:ae:77:e3:bb:
9b:14:de:dc:30:51:f2:26:7d:48:6a:37:5d:ce:65:b4:e3:ae:
e3:85:8e:b3:0c:58:c7:41:84:7f:fa:7c:f0:80:9a:cb:77:59:
a8:86:f8:82:51:83:f2:ac:14:61:31:3a:3b:70:a2:95:bd:3f:
91:a0:d4:80:55:6d:f8:27:02:fc:f7:01:67:40:72:18:4e:4a:
b7:64:35:f5:ff:bd:9c:80:9f:83:20:4d:d0:ba:c9:56:40:3b:
ae:71:68:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oTH2lZbROGpTggyASFkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYzdlYWYxYmY1MGYxNDFkNTY1MWQ4OTA5YWM3NmM5ZDQ4
MGE2OTYwHhcNMjUxMDE5MDQwMTMxWhcNMjUxMDIwMDQwMTMxWjAzMTEwLwYDVQQD
EygyMDcxZTljYTdlYzQ5ZWZkMjI1NzllNTQ0YWFhMTk0Njg0MjU4ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnyGLtKrp2BZ8U7zQfrRlKARpJAS
Yt35EuV1zCLnCCL+65hafWEcbVLMC39Cwul9Nv75eShCzLgFlOo2MiwKSsysGT7E
crrx3pYORK1RxhYU9Jjz6PJNRPXRrWdsSWfXWkmBvgD08hcCEHybhN2uJG1UgWWY
s7zOCfTD0NmEJxBti49qL/lGP8GFTC7DRDGSv82iK7BEOj21DV57kzEp5Ev/hMn0
gKZ+cxHW0tQQtAv37jJ+0OxnOPRoFqVLFNmccNVb3N/roGyjG8M2ROSzSguF2VQv
m9mVIo3KjYJzqap6jbszAt5facYwKO16YsDRkVUU/OzLwyI0vhReEQ3QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBx6cp+xJ79IleeVEqqGUaEJY3iMB8GA1UdIwQY
MBaAFBHH6vG/UPFB1WUdiQmsdsnUgKaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5Nzct
ZGYzNTQ1YjQ0YzBiLzEvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5NzctZGYzNTQ1YjQ0YzBi
LzEvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWB++sEa
sjRmg365rx/D+qukDwOI3km6Nrt9vt0A5BIRHMgxYBkftCRg11SVlbs5RGaz41Ou
EJr0O2fhMCg/mf3KhMCg5Xim7+DECOvoNyYQmTH8+mZBAiJiVDIuLnn9WB+gflbI
7cR5Lu8OK6hh71INIhiwiUz9OCpqlxLvzVzLX2VAajHL11a60HCbhJ6eZm6Fup0A
+UBfwsj+bvmud+O7mxTe3DBR8iZ9SGo3Xc5ltOOu44WOswxYx0GEf/p88ICay3dZ
qIb4glGD8qwUYTE6O3Cilb0/kaDUgFVt+CcC/PcBZ0ByGE5Kt2Q19f+9nICfgyBN
0LrJVkA7rnFoxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:04 2025 by rpki-client