
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json)
Hash identifier: rQA5idC4k+RhMWoZ3gET5dzPKFh0BPNX33IvusTJYKw=
Subject key identifier: 12:63:5D:63:8D:48:BB:11:F2:21:A5:4D:BD:34:63:05:95:6D:18:99
Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Certificate serial: 0198D472E0B4362341DE4D988EBB2419E89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
Manifest number: FD
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: Yq+InvFupFoPl0pp3kaVEaxJjRNo2ho2ZR4d+7jgJfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e0:b4:36:23:41:de:4d:98:8e:bb:24:19:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=12635d638d48bb11f221a54dbd346305956d1899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:a9:63:88:ee:2b:5c:c1:09:79:5b:cb:b4:
b1:3e:76:37:5d:9b:b9:7e:0d:37:9a:a3:34:5a:0d:
fb:8c:f9:da:02:80:59:0e:aa:63:b8:b7:64:bd:29:
6b:eb:fb:13:11:a6:4f:a9:a3:e3:b5:ba:94:c1:71:
a4:a0:10:9f:4a:d7:e0:01:f4:23:ea:4c:53:34:69:
e5:49:bc:4e:dd:d9:56:4a:ec:44:36:79:f8:a7:a4:
c5:d2:fb:1b:85:f9:48:3b:fe:a8:a3:5d:6a:e9:0a:
8c:63:30:60:7a:0b:22:3f:ed:5d:d8:50:37:4a:66:
5f:28:b5:9c:f6:31:59:9a:e4:63:38:86:ce:3e:b1:
dd:2c:d2:04:1f:4d:01:27:49:44:33:de:86:24:42:
92:78:e5:88:c2:81:2c:64:04:2e:2c:1c:8e:68:66:
cc:4b:52:ef:a8:3b:82:9c:ef:b6:63:d6:a0:c4:8c:
00:af:07:c7:27:77:f8:80:de:70:8e:d4:4d:00:eb:
35:a3:56:f3:b2:f2:6c:db:84:81:d6:38:d0:9e:36:
2f:c9:21:d3:3f:a6:50:13:e8:bf:d4:98:6e:05:fb:
c8:e9:6f:d5:a7:a3:c6:31:32:36:d7:1a:19:e9:97:
7e:7b:95:ff:b5:e2:56:73:cc:72:ce:3a:b9:d7:fa:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:5D:63:8D:48:BB:11:F2:21:A5:4D:BD:34:63:05:95:6D:18:99
X509v3 Authority Key Identifier:
keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5a:16:7f:04:b9:b7:64:23:0b:ab:7c:41:7b:f9:c2:0d:f9:
bf:19:d9:f2:08:6f:ce:06:9c:29:9c:a0:34:ef:c2:4e:3b:6f:
c8:30:ac:db:81:85:7f:c7:29:cd:b6:62:1e:db:2a:3a:be:0b:
68:7c:a5:80:d4:77:27:63:36:b2:7b:44:3f:e9:46:12:61:b3:
d7:7e:15:b3:90:79:ef:3b:76:ef:6f:99:65:6d:e6:dc:84:43:
24:b9:c0:99:80:96:50:07:c3:4c:60:8a:51:b3:af:99:dd:b1:
54:6b:5e:bd:8d:0a:4d:c8:74:45:c6:04:be:d4:6a:66:b0:87:
69:cc:4e:0b:2f:bb:2f:8c:0d:ac:0e:6d:29:58:82:ce:98:cd:
c5:8c:b4:3e:0a:9d:ae:19:51:e1:5f:f6:0f:73:17:e4:db:ff:
55:0a:08:72:60:f0:7a:ec:71:ad:be:36:f6:9a:31:c5:8c:4b:
73:eb:eb:de:44:92:92:98:76:c9:c2:0a:ca:7c:b7:2b:49:c5:
60:90:6f:f2:55:49:54:25:a9:e8:f9:59:2c:83:82:fc:79:81:
30:e7:23:7e:1e:ae:97:26:6b:44:df:c7:12:f2:ee:8e:09:c1:
d1:3a:38:f3:ba:e3:b2:9a:5b:a6:b7:50:61:97:00:54:a7:36:
57:a0:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:35 2025 by rpki-client