
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: SclC7ssMhunxtkh32Uw3FboEEHDjMny0IHYB9zB9sRY=
Subject key identifier: 16:AA:39:87:DA:D7:38:4E:70:76:06:8F:DD:78:49:F0:2C:B4:A8:99
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019873E3AC7CBF70D5FDF1F644E286B81875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0C41
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: A2aeobKO+fTxD6j5HyuVEPVo/yHmlxidWD77iBP/a3w=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ac:7c:bf:70:d5:fd:f1:f6:44:e2:86:b8:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=16aa3987dad7384e7076068fdd7849f02cb4a899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:b9:7c:3a:f7:45:bd:8e:58:bd:de:1f:e6:
72:13:71:38:4e:e0:da:95:cc:7d:da:d1:47:5f:00:
d5:80:e5:38:43:61:fc:24:fe:23:63:15:b5:19:10:
20:fa:11:96:90:e3:29:8f:b2:65:91:87:e7:70:ee:
b8:7e:04:1f:54:38:76:e2:66:4d:18:5b:c7:1d:6c:
c3:6e:b5:b8:c3:46:e6:4d:ee:d3:5f:3b:15:6f:54:
bf:e3:b8:47:e6:6a:14:07:bb:da:0d:4f:25:04:d2:
81:81:9b:76:66:e2:74:a6:37:fd:f8:31:2d:c1:cc:
cb:62:e4:43:72:e1:00:7e:38:9a:66:68:b5:cb:49:
fa:52:60:90:90:fc:ac:65:83:46:8e:a5:7e:96:83:
b5:83:2f:b4:be:16:d7:ea:75:c9:7b:b0:89:14:2c:
60:60:9a:fb:2d:89:b8:41:70:9d:24:44:51:82:a7:
39:b5:e7:6a:ca:f6:5d:38:5f:9f:20:ed:86:c8:a2:
67:a9:e4:0d:39:bd:f7:2f:fc:5c:44:80:04:3b:85:
ff:5c:a9:12:ce:2a:f6:4e:02:41:e1:75:c6:97:40:
cb:02:a1:97:46:03:af:70:89:39:f6:51:3f:42:4d:
2c:85:77:e3:57:f5:f2:66:39:a5:bb:c9:45:9b:01:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:39:87:DA:D7:38:4E:70:76:06:8F:DD:78:49:F0:2C:B4:A8:99
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:87:b0:f6:cc:da:00:eb:86:4d:4c:dc:f8:77:c2:b9:00:77:
c2:72:6b:91:f9:c9:51:bf:b1:e2:3d:d9:70:5e:d5:5b:1f:1c:
4b:77:81:b4:c4:34:d2:23:93:67:5d:99:3f:89:18:46:69:88:
3c:99:e5:2a:cb:d2:12:e5:0d:7e:2c:7e:72:15:92:eb:d2:62:
a3:f6:a8:59:cd:09:55:99:23:05:b5:d3:49:6d:d3:f4:55:24:
59:14:3d:c8:c5:a0:10:4d:59:bd:12:61:8f:0b:b3:f9:76:43:
75:ad:7d:af:61:26:e0:f0:af:b0:fd:27:68:24:d4:c9:0a:5e:
0c:2d:32:de:bf:07:5c:09:09:03:7e:76:a1:8c:5a:94:f7:d9:
17:4a:bb:40:2b:54:7c:26:6c:79:9d:8c:33:40:e4:b0:5f:5a:
ad:7c:8b:b5:8b:f9:b3:a9:79:78:1d:b3:42:91:5b:a1:c1:48:
ad:11:b1:d9:c1:3f:f0:38:43:94:61:35:f7:4e:77:d5:29:f5:
37:e3:23:cb:c2:ca:54:0b:b8:1b:9c:bf:53:61:80:62:22:33:
5a:1f:c8:3d:47:0b:b8:60:f6:41:8b:6b:3e:5b:23:fe:9c:cf:
25:54:f1:cf:a8:35:36:49:65:d4:48:d4:4d:99:14:4a:3a:d8:
50:01:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:15 2025 by rpki-client