Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File: ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier: 2FCvX1Tm+dTwLAzo5aOeAdaSBLlVc8FUUQ/NOuc+pqw=
Subject key identifier: F1:70:CC:41:CF:D0:67:AD:2C:63:A6:A5:92:86:38:6F:F3:0A:E1:CC
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer: /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial: 0197B74533739DBEE5A0BF58B8DE09150DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: DJHSBUPQgmROWQK7uz+G0owwjiDREV6kHrQwEml9rnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:33:73:9d:be:e5:a0:bf:58:b8:de:09:15:0d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=f170cc41cfd067ad2c63a6a59286386ff30ae1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:12:f2:13:96:3b:68:2c:83:ff:82:09:6d:
8a:fd:7e:e6:a1:42:db:90:6f:75:b9:8e:0e:17:88:
ff:e9:7a:01:77:93:6b:c9:82:db:5a:24:5e:79:41:
3a:3a:35:0c:8f:53:3f:d9:72:38:2f:8a:84:7e:bc:
4e:5f:73:06:58:5d:ee:4e:5f:61:3a:1d:0c:3e:09:
52:73:e3:19:76:ff:a5:f2:03:db:8e:82:87:f8:22:
b6:65:8d:57:9a:30:d6:04:e8:71:18:ab:f6:85:5a:
22:f5:a7:f6:5d:7f:f8:a5:85:9d:2a:6d:65:72:8b:
3b:a9:ba:cf:62:02:3d:53:65:5a:fc:8c:52:c3:d4:
82:30:70:0c:50:46:4c:de:5a:43:fa:d6:ba:be:c6:
89:cd:f0:3c:03:a5:3f:fa:9c:51:dd:c5:be:a2:f9:
b3:af:7c:57:bf:21:a1:9a:20:9d:76:14:e8:02:ff:
cf:63:c8:ff:32:09:1e:18:cb:c9:60:12:c8:c4:2a:
b0:37:89:56:47:ca:91:79:51:3b:c6:b4:66:dd:9c:
46:67:35:b2:72:57:e1:c0:45:7d:84:61:e0:1e:99:
0d:99:4f:9a:9a:90:f5:44:8f:d0:9a:6d:47:2b:c8:
6a:e6:f6:47:f4:af:51:46:76:72:1a:51:64:7c:c9:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:CC:41:CF:D0:67:AD:2C:63:A6:A5:92:86:38:6F:F3:0A:E1:CC
X509v3 Authority Key Identifier:
keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:22:76:53:e7:f3:69:39:8d:92:9e:bc:fa:08:ea:b6:80:
01:e1:8a:34:88:89:87:09:92:b1:a4:7e:b7:40:4d:5b:06:5e:
3c:32:a4:64:a2:8e:51:17:1d:bc:41:73:67:60:ff:46:6c:b7:
f0:d5:bf:9d:74:7d:48:48:30:0b:4d:5c:a7:a2:cf:85:9a:e3:
8f:d4:3e:b6:5d:2e:09:ed:40:fa:7d:29:e6:87:14:56:9d:01:
9b:69:05:7c:24:a8:bf:81:e1:b0:21:30:f8:eb:a9:55:d6:5a:
02:1c:d4:31:4e:7b:36:02:98:98:26:5d:25:8c:b4:b0:49:cc:
fd:65:ca:a5:79:c7:97:38:4b:52:3d:97:64:e2:71:41:18:95:
c7:80:a2:54:bb:b1:25:7f:cb:16:29:13:f9:76:68:9a:1e:e3:
64:c8:98:cb:44:a6:b0:d7:3a:f6:b5:7a:3e:8b:10:20:a2:8e:
7a:01:5b:8b:5d:87:bc:0f:ea:c7:75:01:1c:44:0c:b6:e2:35:
65:2b:7d:a4:36:ef:94:b7:29:56:e6:c1:1b:a7:c3:4e:18:3b:
09:69:05:35:d8:ec:29:9e:a0:c8:f8:bf:3d:b4:63:ab:29:0f:
4e:4b:c8:08:c9:db:15:b1:dc:95:8a:ae:d6:71:e2:27:b8:e6:
37:b1:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:49 2025 by rpki-client