Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: sXLNgaoLnthehVkab9y0SO3NC9U8yyj8+UmcjUmIUB4=
Subject key identifier: B9:99:14:0A:4F:94:D8:1B:69:75:BA:56:E8:66:A5:68:C9:B7:58:5D
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 0199FC219D2E353C4C7963657F7D739B282F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 1340
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: Y/6KvggqrZpXm87yjZ8AkPRlHgtuHn9QAFJAlOBYiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:2e:35:3c:4c:79:63:65:7f:7d:73:9b:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=b999140a4f94d81b6975ba56e866a568c9b7585d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:94:4b:50:1c:d6:a9:c0:5b:46:48:46:ab:
28:76:62:e5:38:6a:c5:83:99:5f:89:00:0d:b5:34:
63:0b:74:45:ff:5e:f7:5b:f4:1d:69:80:13:23:38:
25:9a:90:c5:54:95:62:31:dc:98:2c:b8:5e:ab:17:
a5:82:8c:a4:72:e6:40:33:30:b1:ec:70:db:08:f3:
10:bc:7e:07:5c:8f:42:c2:f8:9e:65:aa:e2:e6:b1:
74:ee:b9:55:37:45:28:16:3c:ad:f5:69:47:a1:01:
ff:eb:d3:c6:99:24:11:da:f4:8d:3e:6b:4d:98:c2:
8c:b7:ec:ea:02:d3:7b:70:ac:05:ea:bb:39:24:87:
bd:ab:83:24:7b:74:05:55:8c:37:f7:1f:77:77:7f:
98:96:14:25:01:9a:aa:d3:89:5b:2a:5a:87:86:5d:
b1:89:05:7f:6b:fa:77:9a:49:fd:ca:67:f2:e9:c6:
f9:bf:96:4b:8a:4c:42:89:fc:5e:d7:16:71:80:e1:
10:f0:ea:e4:8a:7b:22:f5:3f:c5:87:c1:5d:68:61:
a5:e7:46:de:c6:02:b4:a9:58:ec:21:06:62:70:e5:
46:b6:a6:ba:d1:36:56:d4:5d:73:8f:d2:dc:57:41:
61:8a:4b:cf:40:c5:8b:45:89:36:19:a8:a8:75:08:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:14:0A:4F:94:D8:1B:69:75:BA:56:E8:66:A5:68:C9:B7:58:5D
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:14:7d:c8:46:f3:57:a4:f8:a0:6a:2f:ef:c3:5a:40:a2:a7:
64:b4:36:6c:da:f6:ff:c8:95:ec:24:bf:ea:7e:aa:79:81:71:
bd:5e:76:f0:04:4f:70:1d:c2:61:32:ba:f9:cd:25:8f:b9:1a:
ba:07:a5:a1:90:fe:e7:a9:a3:b4:13:ea:d1:a0:5f:1d:dd:21:
83:0a:f7:11:a3:74:b5:ea:27:fa:03:f2:7b:35:6f:bf:cb:f3:
36:33:02:e8:2f:09:42:d9:da:c4:59:1a:79:f3:55:58:78:de:
fd:a0:88:02:3f:f5:f8:e0:e3:5e:1f:d2:c5:bb:ff:be:d6:27:
90:2c:f9:1b:a1:c9:68:f1:58:06:8e:90:55:2e:7b:1c:37:62:
60:78:81:d9:12:79:e0:97:9e:e2:b3:8d:19:e8:c0:61:f5:0e:
40:e0:7f:4d:ae:63:13:50:30:5d:9e:d3:5e:c9:96:bf:6b:f6:
78:0f:f2:85:64:e7:1c:e3:24:4d:3c:f8:b9:3d:64:0c:a9:4b:
c7:74:97:ed:73:20:bb:36:7b:c0:58:f6:2a:3a:0c:f5:46:97:
c3:39:58:89:7c:cd:7b:cc:d0:74:d6:be:0a:4d:05:52:a7:a8:
c4:9d:8d:58:6a:d5:5d:ed:17:41:b3:ea:1b:42:3a:0a:77:e7:
e7:6f:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:39 2025 by rpki-client