Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: Q7TwRQgQ0VBytAZSnIb3l+U+mtLeyYzj2DVPTf+Xons=
Subject key identifier: 40:A5:59:DA:BE:52:50:5D:AD:48:A7:B1:EA:5E:7B:3C:7E:3D:0E:D3
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 0199FC58B22AB8725FB46DFA83F28C8F030A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: tUvliFPrhUmT/cIxxIdefTDaZDr+Y0camqtoyCBbCJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b2:2a:b8:72:5f:b4:6d:fa:83:f2:8c:8f:03:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=40a559dabe52505dad48a7b1ea5e7b3c7e3d0ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:35:c7:a8:c8:d4:b8:4f:04:02:ca:b7:57:
ea:1c:5f:c6:80:26:86:87:36:25:39:ec:33:a3:41:
ed:47:ca:18:b1:7e:a9:05:e7:42:5c:64:ce:71:a8:
7a:16:b5:73:56:64:ab:0b:48:7e:43:72:c9:e9:21:
e9:8e:34:1d:bd:e6:6e:6c:b3:e6:b5:81:ee:d6:0c:
10:81:37:29:88:50:dd:6f:14:7c:5a:79:11:06:4d:
93:e3:06:d1:e5:ef:8b:0e:cf:32:55:8b:ce:54:96:
fa:4a:0b:ec:15:66:bf:36:05:5a:34:de:61:0a:15:
aa:55:b8:93:07:bd:29:84:99:56:20:ec:cc:5b:86:
d8:8b:41:c7:a1:8b:41:e5:27:a3:9b:3c:c1:7f:59:
8d:a3:9a:bd:3e:86:78:a7:14:dc:30:4d:0b:3c:85:
84:2f:17:fb:b1:2b:1e:20:7b:b7:c1:6c:a1:6d:9b:
d0:fc:31:92:16:92:11:6d:61:06:0b:cd:d1:86:bc:
ee:38:d5:31:5a:00:a4:ca:ca:3f:bc:ca:74:1e:b3:
c2:d0:d4:21:5e:d4:6b:b0:ef:d4:01:99:35:6f:b6:
d0:fd:fc:3a:36:bb:0d:57:ff:a5:ff:ae:00:33:87:
56:35:3e:91:5c:44:cf:42:59:c9:9b:3f:36:eb:f1:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:59:DA:BE:52:50:5D:AD:48:A7:B1:EA:5E:7B:3C:7E:3D:0E:D3
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1d:2f:5c:f2:28:63:37:08:58:09:38:50:4d:45:2e:f4:94:
7b:f2:be:01:dc:14:0b:ea:ac:3a:c4:5f:71:f5:74:af:97:ca:
5d:59:05:94:61:8c:5d:d7:76:7b:e8:29:90:a0:d7:67:16:50:
09:95:26:c9:35:d3:03:9f:9f:94:a2:a0:c8:77:b9:96:28:0d:
7f:0f:18:c6:14:b3:5f:fe:58:b8:c4:43:42:a9:eb:b8:d2:85:
c3:b4:cb:70:c0:36:03:f9:02:c9:9c:94:6a:37:4e:3d:ad:7a:
c2:9b:2c:d3:45:8c:ca:7b:b3:75:89:ce:67:14:30:8f:5b:63:
98:21:d6:6d:c5:dd:ec:a5:f5:cb:ae:62:0b:43:c7:0e:61:68:
cb:4e:dc:a2:aa:e9:af:ee:8d:b0:81:7a:d9:3f:d9:65:fe:21:
94:3d:d2:af:fd:3d:be:6c:11:ec:5f:72:62:f2:02:87:e5:0d:
d3:03:70:7e:55:80:b8:95:dc:3c:58:66:8f:a8:dc:bd:9c:c3:
60:2a:74:26:6b:9e:94:8d:c7:b3:fe:1d:7a:55:c9:c1:7f:d8:
71:1b:a9:ac:89:c5:33:0c:7a:62:b5:00:75:51:90:84:16:67:
5d:2e:6d:9b:4f:f4:67:8e:0a:bf:71:81:46:5f:58:f4:73:77:
8c:fd:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:03 2025 by rpki-client