Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: CHMcd4lkBkaDqXRzVJHgvgrXMc8d1iN5WExBTihKTkQ=
Subject key identifier: 7F:E5:86:D4:88:CA:D6:43:ED:9A:D9:54:6C:76:1D:32:DC:2B:34:20
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 0198D4DFDE40A754320788E18D54ABA3881D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: iOBLDCMiYF7F2TYSMhR3agXpqRJvdkzAeKbnh78mJj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:de:40:a7:54:32:07:88:e1:8d:54:ab:a3:88:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=7fe586d488cad643ed9ad9546c761d32dc2b3420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:a6:3f:b5:3b:a3:96:2d:16:84:bb:0b:d9:
dd:d5:85:91:ee:89:e3:6d:59:fc:3e:6d:98:34:f6:
5c:ec:27:72:67:55:78:85:5d:ea:83:3f:05:84:9b:
4e:75:0f:eb:b8:94:b1:82:90:64:12:7f:0f:4c:52:
58:8c:a9:bc:0b:60:89:7c:e7:9c:26:1b:a1:23:56:
08:24:ba:6e:18:77:87:c7:33:27:ae:12:37:f6:1f:
ec:15:76:90:d8:86:7d:c3:f8:3d:26:83:a7:fa:85:
8f:f4:53:8c:2e:84:68:44:91:4d:b8:59:43:54:d8:
2c:e2:88:18:07:f5:a3:d0:9b:05:23:1b:7f:9c:05:
d5:d3:e4:0c:a5:44:44:bf:2f:5b:95:32:59:1d:0b:
cd:e6:b6:0f:c4:54:e0:ab:e3:36:80:58:ef:bb:94:
79:ab:b9:a1:95:3c:1c:1c:ec:d5:5c:82:c5:8d:f9:
68:df:0b:8f:43:97:3d:f7:a6:66:f1:02:b9:c5:a9:
32:42:63:86:c0:3b:a9:f9:ed:1e:e3:64:4b:f6:f2:
08:fb:ec:40:af:31:27:24:0d:ca:c4:c6:89:eb:a2:
62:41:8a:65:42:88:02:bc:2b:43:8f:4b:6f:bc:97:
76:40:65:17:55:4d:2d:00:f5:57:f1:83:58:7d:98:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:86:D4:88:CA:D6:43:ED:9A:D9:54:6C:76:1D:32:DC:2B:34:20
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:94:20:16:7f:8d:2c:fe:ae:24:07:b9:8c:1f:4b:57:b2:
ed:5f:21:13:1b:8b:00:a1:dc:7c:53:bd:d5:a6:00:d9:17:ad:
df:03:cc:71:60:5b:96:86:9c:53:bd:45:20:5e:3f:ff:a6:fa:
3d:63:7a:aa:c3:5f:a4:78:67:96:37:e5:13:80:01:48:5b:d7:
42:1f:13:f1:61:27:9c:4c:96:59:a9:c4:82:68:15:7d:a6:7f:
7a:bb:b6:9a:65:1a:ae:5e:bc:25:ce:f0:90:da:91:2c:d7:0e:
d1:27:0b:35:d1:db:9e:ad:67:d7:c7:07:8c:bc:01:9b:3f:ba:
f5:52:2e:6b:fb:58:83:75:1a:05:7b:ec:1b:ee:87:8d:35:69:
f0:1b:46:d9:31:cf:b2:88:b6:61:49:3b:a2:40:54:31:be:0e:
1f:a5:ed:e8:89:79:45:d1:62:e0:dc:5e:82:fa:48:00:6d:40:
c9:7b:7d:27:40:f5:8d:25:5c:8b:12:ca:f7:9b:ee:6e:40:ef:
d5:e3:a9:23:f8:d4:fd:12:8b:5d:9a:6d:46:d7:39:60:ff:af:
44:79:e5:f2:5c:37:dc:bb:33:a7:bd:92:a9:0f:2f:cd:c4:3b:
8b:25:55:fe:45:05:93:d7:54:e5:84:20:78:8d:75:5f:0f:7a:
c0:05:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:01 2025 by rpki-client