Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: 3g89QkGligGqx+Qj8Zxjh+4wCxQp5OwyUYk6xIj1ZTI=
Subject key identifier: 8B:3F:9D:2C:8D:59:6D:F4:D2:A7:71:D7:95:05:5D:D1:94:79:B2:CC
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 0197B8C5F58FA032E346DE2DA3F0406365E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 1214
Signing time: Sat 28 Jun 2025 23:01:10 +0000
Manifest this update: Sat 28 Jun 2025 23:01:10 +0000
Manifest next update: Sun 29 Jun 2025 23:01:10 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: f4gj/DoQiIfewLTzYHyW2VcRaAFpBHGH5x0/uvxJGfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f5:8f:a0:32:e3:46:de:2d:a3:f0:40:63:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Jun 28 23:01:10 2025 GMT
Not After : Jun 29 23:01:10 2025 GMT
Subject: CN=8b3f9d2c8d596df4d2a771d795055dd19479b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:54:1f:13:79:39:a0:da:c1:65:48:d3:33:
11:0e:7a:47:cf:6b:fe:49:d3:be:20:8b:0e:c2:7d:
1f:6f:ee:fd:8d:30:0a:b9:1f:b8:62:de:52:12:0e:
5c:bd:0c:9e:a2:46:c1:4c:c5:f6:21:41:28:58:d7:
53:84:82:57:e9:1f:b5:93:76:4e:26:ef:c6:fe:8e:
36:c5:13:f1:3c:f7:31:04:e2:e1:5a:2f:fe:66:d0:
7c:61:3a:96:17:4d:0f:df:8e:4d:e5:34:c4:12:2c:
29:4e:31:c8:d9:78:5b:31:2c:de:4f:f8:1a:d5:b2:
a4:f6:bc:e2:ea:b0:e1:34:22:e1:06:6a:86:91:7d:
be:99:82:82:2b:6e:23:b3:39:eb:cf:cc:3b:fe:02:
46:53:43:9a:38:fb:f4:8a:f3:28:0e:e2:35:52:f3:
f8:a0:f1:cd:a6:d8:3c:a4:6c:fe:a1:78:39:cf:38:
c2:ba:3f:28:c3:75:e3:5e:6a:ea:4f:e1:88:ab:6a:
23:93:ab:92:2f:23:4c:7c:d6:7c:6e:bd:f4:0d:fb:
d6:d7:25:9d:36:bf:c8:1d:4a:a6:94:d1:a1:d1:1d:
c6:a9:35:09:98:95:94:81:9b:e3:06:68:e2:1e:a6:
a9:ea:8f:b0:f4:b8:da:71:d9:33:64:f6:67:fc:ce:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:9D:2C:8D:59:6D:F4:D2:A7:71:D7:95:05:5D:D1:94:79:B2:CC
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:b5:21:91:cb:6d:c2:c0:7a:a0:32:4f:c4:59:01:19:9b:
48:2b:3c:e9:a1:57:10:ff:50:c1:41:41:76:4f:00:95:6e:5d:
95:77:95:84:c8:7d:f5:74:96:5d:0c:f4:04:06:da:9e:11:8d:
fb:1b:b5:cc:f0:c1:06:71:8c:20:a0:ec:a9:30:9d:a1:81:80:
a8:a3:54:02:66:bd:3c:18:43:f6:14:b6:0a:dd:f1:cc:52:69:
49:c0:0d:92:7d:d4:96:fb:54:92:c4:7b:a1:c8:5b:42:78:00:
1b:e5:e5:73:ef:e4:66:eb:eb:7c:a0:26:d2:c3:54:9d:73:63:
78:1c:49:7a:92:2c:28:5b:24:1d:39:6d:55:3c:5d:1f:96:8c:
57:82:5f:5f:cf:b8:75:ff:34:ed:a9:88:11:51:4c:58:3e:61:
44:a6:56:b9:a3:2f:22:2b:72:84:54:48:de:8b:90:00:6f:3f:
98:5c:3b:23:e4:46:e9:a1:e1:a5:e8:63:af:0d:35:71:f7:25:
52:5e:17:88:b2:1c:40:6f:de:91:4a:3d:88:27:38:c5:f6:fb:
5b:97:4f:9b:62:f0:ae:86:fc:6b:99:2c:bf:f4:6c:e7:9c:f4:
75:2c:38:5d:ce:c7:1f:a2:a4:30:75:fd:1a:6b:e2:84:1c:93:
33:2b:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:33 2025 by rpki-client