Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: 4UwHGUP+XklwCcGCNsqZwRJ9212/xLR6lOX0vjeBjJc=
Subject key identifier: F3:2D:33:4C:50:57:7C:5F:F2:18:0A:92:06:92:56:D6:A4:82:4A:00
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0198D7E11DA3FDAC54A03B7D60FE8D29C5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0C5F
Signing time: Sat 23 Aug 2025 17:01:51 +0000
Manifest this update: Sat 23 Aug 2025 17:01:51 +0000
Manifest next update: Sun 24 Aug 2025 17:01:51 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: AOKoI3daUMC+e0YjMrssTBSgwJ7tGiX2PghQP+q/0Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:1d:a3:fd:ac:54:a0:3b:7d:60:fe:8d:29:c5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Aug 23 17:01:51 2025 GMT
Not After : Aug 24 17:01:51 2025 GMT
Subject: CN=f32d334c50577c5ff2180a92069256d6a4824a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:29:85:d2:b1:60:e6:b4:43:7f:6e:8f:06:
4d:fc:85:c6:52:7b:14:0d:c0:cc:5c:24:db:2e:b2:
ad:d1:75:0e:8f:92:15:17:63:01:8c:b9:dd:42:87:
d8:eb:48:42:36:af:7e:1e:10:93:61:69:3d:70:4f:
5f:5d:61:24:97:44:51:70:46:4e:9d:da:cb:b1:d1:
82:2a:cd:2b:a5:e5:8c:8a:0f:0e:c8:31:4f:ae:57:
84:76:5c:63:ac:c9:b2:8a:28:62:ca:fa:0e:8d:31:
85:d1:77:e8:7e:7e:01:5d:f8:1a:4f:c3:c3:b6:ff:
2d:1d:fb:1b:a6:75:2f:9d:b0:3b:d4:0c:14:74:f9:
37:70:30:69:c1:38:9d:df:10:6a:d9:88:c2:56:05:
60:47:be:9e:e2:e7:66:93:80:b9:00:d2:10:89:c2:
03:27:db:77:18:f2:eb:a2:99:64:5f:5b:a5:38:e1:
d6:ca:fd:60:81:31:c4:e1:09:7c:23:74:04:27:93:
ae:16:93:3e:f7:8e:f6:99:01:d7:c1:68:1c:c0:24:
d7:92:db:25:30:03:82:ff:aa:d0:61:d9:3d:3d:a3:
e2:07:70:cb:40:76:93:78:c6:1c:6c:dc:3e:b3:e1:
0c:21:78:85:33:39:fd:4d:88:63:94:f8:70:70:1d:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2D:33:4C:50:57:7C:5F:F2:18:0A:92:06:92:56:D6:A4:82:4A:00
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fe:73:8e:65:b9:d0:ec:a1:17:7d:0e:8e:0f:34:aa:e9:38:
a5:de:d7:c2:24:0a:ba:24:29:31:fd:be:84:9a:69:76:64:ec:
5b:6e:34:e5:b9:13:63:93:fd:66:b5:71:7c:c8:13:e0:ee:89:
56:8c:79:e2:15:37:ec:d0:e8:82:a6:ac:eb:6b:c4:9c:14:3e:
37:2d:47:7a:7d:40:76:02:da:b4:ef:eb:0b:1c:cf:27:10:8d:
a6:48:e0:36:84:7b:9f:f7:c2:24:bd:75:38:b2:ba:4b:20:16:
67:48:6a:5c:54:bd:31:f6:22:64:79:ef:65:f6:a6:63:5d:70:
8f:98:f8:b4:f9:c0:ee:02:09:28:9e:72:ea:f9:a8:ff:c5:41:
da:94:24:62:d4:78:1e:2b:52:b6:08:b7:21:2a:3f:8b:60:1e:
63:5a:45:a9:85:7e:24:ef:5c:d7:d6:57:8c:93:03:00:4c:8f:
0d:4c:7a:90:f9:33:9c:d8:66:40:dc:05:bf:01:30:42:31:cc:
e8:6c:c8:16:92:ec:56:0e:c7:24:5a:ab:85:94:af:db:ba:ed:
d9:14:e3:c2:58:69:00:e9:c5:e5:10:ff:ad:f4:bc:fd:66:68:
12:71:dc:58:a4:37:fe:bd:d1:ae:80:72:eb:f8:5c:8a:e3:2e:
f5:df:c9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4R2j/axUoDt9YP6NKcXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjMyNTMyMWEzMDJmMGJhYzEzMWJlZTExYzlhZWE2OTZl
NTEwYmEwHhcNMjUwODIzMTcwMTUxWhcNMjUwODI0MTcwMTUxWjAzMTEwLwYDVQQD
EyhmMzJkMzM0YzUwNTc3YzVmZjIxODBhOTIwNjkyNTZkNmE0ODI0YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQphdKxYOa0Q39ujwZN/IXGUnsU
DcDMXCTbLrKt0XUOj5IVF2MBjLndQofY60hCNq9+HhCTYWk9cE9fXWEkl0RRcEZO
ndrLsdGCKs0rpeWMig8OyDFPrleEdlxjrMmyiihiyvoOjTGF0Xfofn4BXfgaT8PD
tv8tHfsbpnUvnbA71AwUdPk3cDBpwTid3xBq2YjCVgVgR76e4udmk4C5ANIQicID
J9t3GPLroplkX1ulOOHWyv1ggTHE4Ql8I3QEJ5OuFpM+9472mQHXwWgcwCTXktsl
MAOC/6rQYdk9PaPiB3DLQHaTeMYcbNw+s+EMIXiFMzn9TYhjlPhwcB2QQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMtM0xQV3xf8hgKkgaSVtakgkoAMB8GA1UdIwQY
MBaAFHgjJTIaMC8LrBMb7hHJrqaW5RC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEt
ZDI1NDY2YTFmYTlmLzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEtZDI1NDY2YTFmYTlm
LzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/5zjmW5
0OyhF30Ojg80quk4pd7XwiQKuiQpMf2+hJppdmTsW2405bkTY5P9ZrVxfMgT4O6J
Vox54hU37NDogqas62vEnBQ+Ny1Hen1AdgLatO/rCxzPJxCNpkjgNoR7n/fCJL11
OLK6SyAWZ0hqXFS9MfYiZHnvZfamY11wj5j4tPnA7gIJKJ5y6vmo/8VB2pQkYtR4
HitStgi3ISo/i2AeY1pFqYV+JO9c19ZXjJMDAEyPDUx6kPkznNhmQNwFvwEwQjHM
6GzIFpLsVg7HJFqrhZSv27rt2RTjwlhpAOnF5RD/rfS8/WZoEnHcWKQ3/r3RroBy
6/hciuMu9d/JZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:29 2025 by rpki-client