Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: IBca4jhJxpONOIVb8gJvV4YW1McsQ36PlRJilP1hYQA=
Subject key identifier: B4:20:67:7A:8F:30:41:65:29:7D:CB:5F:EF:81:E4:C7:3D:88:87:80
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 0199FFFE4B85B49284C7AE5A4C6D694778C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 05:01:19 +0000
Manifest this update: Mon 20 Oct 2025 05:01:19 +0000
Manifest next update: Tue 21 Oct 2025 05:01:19 +0000
Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: gDlDnh5r0BAXH5/tcR1HTXpXRcq0+xsFWF6IT63MfFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:4b:85:b4:92:84:c7:ae:5a:4c:6d:69:47:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Oct 20 05:01:19 2025 GMT
Not After : Oct 21 05:01:19 2025 GMT
Subject: CN=b420677a8f304165297dcb5fef81e4c73d888780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:bc:c3:7b:f0:f3:94:73:28:4b:3c:df:f1:
9f:88:23:c7:18:3c:67:c4:c9:f0:54:c0:22:2b:c7:
fa:ca:34:dd:15:dc:bf:e7:2d:cb:04:db:4d:99:dd:
dd:88:09:2d:aa:5a:0f:a0:59:cd:1b:df:70:4e:db:
6b:41:15:78:c4:53:0f:1c:53:74:66:d8:59:06:ca:
6e:24:80:89:46:62:33:fe:eb:45:9b:c7:7a:dd:09:
91:74:24:1d:a9:47:39:87:71:98:19:de:3a:f8:2b:
4c:8e:50:1d:0d:9c:6c:7b:9a:59:97:32:db:18:ae:
ca:98:9d:8b:e9:a6:99:22:aa:d3:ac:b8:14:37:ca:
c0:48:73:ac:9a:b4:14:39:78:54:3e:78:df:39:dc:
6d:a0:1c:22:98:bc:08:f2:33:5f:a0:aa:dc:07:ed:
41:b5:81:b5:aa:0c:e6:89:9b:9d:b0:bc:a9:e8:bb:
ec:cb:fa:cf:05:73:ba:3c:14:e4:ad:14:53:04:64:
e3:35:3a:35:f9:f1:6a:da:97:a6:5f:11:5d:df:dd:
50:60:09:bf:dd:96:0a:3d:11:60:8b:28:16:85:a6:
a1:dd:0b:0e:be:be:8d:0d:3a:dd:4f:b8:c4:fd:c3:
35:2d:f6:f4:e3:8f:b2:bc:d0:ae:61:7a:96:36:e6:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:20:67:7A:8F:30:41:65:29:7D:CB:5F:EF:81:E4:C7:3D:88:87:80
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ef:05:f6:1e:6b:78:98:04:05:0b:62:6b:36:73:d0:d0:d6:
00:dd:32:0e:1b:64:8d:be:fe:7e:cb:0f:0a:74:cf:8d:e9:4f:
cb:92:ff:d9:f5:54:29:95:cc:a5:43:83:40:fe:19:0c:65:63:
d0:05:bc:10:2b:00:7c:f7:03:8e:f8:fd:a1:be:05:05:24:83:
59:15:fe:81:8e:71:c4:74:63:f0:b5:da:0c:9a:60:43:42:04:
ad:a8:b5:8f:48:e2:c4:96:99:da:e9:fe:fc:90:63:8a:2d:f5:
91:b5:b9:68:44:28:64:36:b2:8e:b6:68:8b:0e:6a:41:4e:57:
3e:98:9b:b9:3e:09:a0:34:8b:a8:44:ca:d9:e7:41:55:1d:36:
d4:4e:d3:46:ec:d7:43:bd:09:97:8a:45:1c:30:5b:d2:3f:e7:
7c:d8:47:f2:91:33:68:1f:21:e2:2f:1f:de:e0:09:42:a8:c0:
5d:07:b8:bc:d1:a5:6b:4a:75:0d:07:2c:08:79:85:b9:a3:bb:
a2:e0:28:54:b7:19:9b:2b:10:cd:8c:dd:64:d4:b6:71:b5:d6:
6e:af:6a:33:d9:a4:42:88:fd:72:4e:ff:67:82:29:5e:da:f8:
a1:f8:20:e6:93:6d:5a:47:8d:f4:28:15:73:cf:cd:ee:94:d8:
a5:63:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:02 2025 by rpki-client