Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: 8c2WWpiAy0XXL2uPEprxykZ6bE98sSfkRIp0GPWxZO8=
Subject key identifier: B8:53:6B:87:49:20:A3:7A:15:60:D1:3E:D6:35:22:A8:8D:7B:32:96
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 0197CC4CBD5CC70AE0A028887F86019C5544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 0FBA
Signing time: Wed 02 Jul 2025 18:01:10 +0000
Manifest this update: Wed 02 Jul 2025 18:01:10 +0000
Manifest next update: Thu 03 Jul 2025 18:01:10 +0000
Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: SpqvZxDnNNuLO73fMBtAilR+KGszeNBAcl5C04u0fvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:bd:5c:c7:0a:e0:a0:28:88:7f:86:01:9c:55:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Jul 2 18:01:10 2025 GMT
Not After : Jul 3 18:01:10 2025 GMT
Subject: CN=b8536b874920a37a1560d13ed63522a88d7b3296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:d4:96:86:02:a9:d3:06:3f:e0:83:6b:1d:
b1:78:1f:f4:1c:e4:aa:e8:e3:75:3b:7f:70:f9:22:
25:7e:6d:25:ed:91:ab:ce:3f:f2:54:90:6a:38:c4:
ea:b1:c4:73:6a:a6:1f:c8:73:2b:92:c9:3c:f9:81:
71:4b:71:8a:35:01:f9:b2:c3:c4:b6:18:cd:f4:7e:
d4:74:8c:85:4c:9c:20:3f:81:db:e7:a8:18:38:f3:
cd:3c:19:a5:3f:42:b7:80:99:13:8d:02:c1:e3:bb:
d2:fa:25:a3:71:c4:35:79:b6:77:53:3f:12:8f:32:
d3:ad:22:13:d0:bf:cd:26:77:c7:b0:32:a3:86:45:
33:a5:cc:2e:f4:13:94:08:22:2c:7a:e2:67:19:8d:
d7:48:f3:74:9f:03:63:a0:a2:25:a8:c0:c8:18:47:
7e:61:26:21:2d:2b:ff:ea:89:c1:23:fb:3a:6d:bd:
c5:fb:74:78:a6:42:77:38:1e:2f:0a:aa:23:16:23:
cb:7e:01:a0:27:60:43:3d:25:86:b9:21:7f:02:0e:
39:00:54:56:ec:2c:72:7a:e8:30:8a:69:4d:f1:43:
b2:0a:74:de:fd:b8:37:3c:5e:ad:c1:97:10:5e:f3:
a2:aa:a4:7c:12:c3:1a:63:a3:9d:d1:27:cb:58:b0:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:6B:87:49:20:A3:7A:15:60:D1:3E:D6:35:22:A8:8D:7B:32:96
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:16:8a:ec:98:12:df:f4:05:0c:65:ae:7f:a5:57:43:a5:
fb:1b:8f:1f:6d:29:ad:9a:5d:99:21:fc:72:51:33:46:98:12:
f3:6b:96:c1:96:2f:ea:52:40:b8:b6:e9:d5:71:75:7d:e0:7b:
e0:da:4f:c8:5d:34:42:f9:72:26:a2:56:00:0b:b9:93:92:db:
d7:4d:90:e8:ae:28:f0:79:2d:2c:97:4b:73:f6:56:21:36:a9:
65:28:53:07:81:dd:da:14:0a:76:16:6c:8c:9e:d5:13:a9:8c:
f0:a9:4b:2e:e8:e1:24:a6:25:4c:36:30:78:a9:12:7f:46:c9:
a2:d2:db:54:d0:7a:b2:12:f7:90:50:77:b2:5d:37:e0:ed:c9:
d2:c3:05:3c:46:42:31:6b:43:6f:16:ab:5c:a5:92:6d:22:f9:
a4:30:da:b9:71:19:32:72:06:16:7d:46:e2:68:f4:fe:5c:41:
7b:4f:c3:94:1b:ca:bd:81:37:2f:12:a7:70:43:4b:fa:f5:60:
6f:22:bf:8d:c4:fd:f3:81:d6:e8:9c:42:ae:35:34:de:85:18:
5e:37:a8:b9:24:c8:b1:28:90:ba:a4:04:51:c5:78:5c:e7:43:
78:89:c5:73:20:64:0a:25:18:d9:67:aa:0b:d5:61:19:7d:65:
a7:ce:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:21:01 2025 by rpki-client