Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File: ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier: hoivT7+mshv7qBTr2uzZyiQArmoLBlD58S8/g0uweG8=
Subject key identifier: 9F:68:CC:88:11:A7:D7:BF:D1:9F:32:8C:35:B4:CD:43:23:46:3F:67
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer: /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial: 0199FC8F62E95C6BA19F183D969DF07417AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number: 06D4
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: 2xI3MdGfsUhKpED0jB7FXlJX2bqh1Otr2gwUrPwv25c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:62:e9:5c:6b:a1:9f:18:3d:96:9d:f0:74:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102bc98d33270952534130afb4de696d8c340215
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=9f68cc8811a7d7bfd19f328c35b4cd4323463f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:70:32:bf:a7:e8:4e:a4:9e:e0:05:37:12:
d5:e7:14:e9:2b:fa:13:60:c2:d5:29:8b:50:0e:56:
41:be:43:21:89:59:4f:2f:ad:fd:1c:fd:af:9a:90:
25:d0:a7:80:c1:d0:d9:59:ee:0b:37:ef:c7:2d:15:
aa:8c:08:a6:6e:28:fd:30:73:91:8e:5d:e2:24:91:
50:2a:95:6e:c4:27:c9:60:7a:ab:ad:1e:2f:cb:e1:
17:8c:83:3f:d6:53:27:d1:ae:aa:94:23:09:20:fe:
d4:2f:db:b0:22:c3:45:a5:22:c6:e3:50:b6:91:c5:
b0:0b:a0:98:9d:83:73:cf:c6:5f:27:31:c4:7f:a0:
12:1f:ad:6f:a9:2c:f0:b2:10:3d:d8:a0:d7:3c:4e:
75:22:81:64:b6:4c:46:3e:0d:15:55:b6:9a:64:05:
40:3c:33:7c:9e:0e:ec:45:17:dc:96:f2:02:3d:0a:
b0:41:2a:f7:5c:85:b9:3f:f9:ae:d8:e6:09:7e:9f:
66:bb:3b:cf:b6:58:68:b9:f0:26:ed:38:4d:e6:6d:
a0:50:64:ef:86:7f:be:a4:3d:6b:57:94:68:9e:08:
c5:4e:a5:ee:df:a2:e6:0c:df:4c:ef:68:e3:2a:ae:
28:ea:f0:00:9f:a6:50:49:c8:e7:98:45:f2:bb:69:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:CC:88:11:A7:D7:BF:D1:9F:32:8C:35:B4:CD:43:23:46:3F:67
X509v3 Authority Key Identifier:
keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:a6:0a:0e:a4:e2:46:6c:0b:7d:6b:c1:34:51:65:a3:b0:
c4:81:89:47:cf:98:d8:14:d7:61:70:9e:3f:aa:74:c3:2d:9e:
5f:94:5b:66:54:b2:d4:9d:c4:0d:9e:0d:2e:73:bd:1e:ba:f9:
11:80:dd:6c:0d:30:3b:07:91:45:a4:5a:11:4c:00:56:ae:6c:
db:11:db:00:18:13:24:4f:f1:cc:c3:ee:9e:30:fa:e6:58:13:
09:2c:d0:d0:6b:ee:6f:e6:be:6d:73:c4:90:21:95:b7:75:d1:
bc:d7:77:03:63:8f:04:7d:93:b9:f6:14:85:7a:b0:ac:61:cb:
9a:ab:48:e2:da:8e:6b:18:84:7a:0f:0f:85:ef:3c:1d:47:5c:
02:f8:7c:9f:ae:e4:93:93:e2:15:a8:d8:f9:3f:f3:66:1e:3b:
72:72:79:32:87:72:f7:71:18:f1:c6:d4:0a:0a:7a:fd:b0:5a:
aa:d7:70:38:67:22:34:7a:17:9e:d5:f5:c0:b2:72:03:fb:6a:
74:5f:ce:52:82:b8:d0:47:61:72:12:3d:60:98:f1:e7:f8:38:
d0:79:1e:bf:6f:51:75:fa:a6:53:21:10:6d:e3:ee:4e:6a:2b:
b6:f3:2c:ac:61:26:53:39:a5:3f:1b:ed:5b:a3:62:17:ce:a1:
4b:e6:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:56 2025 by rpki-client