Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: R4jTYrW1EOePhUTu3ae3kRJuvLX+HR+u7w7rBP9YRC4=
Subject key identifier: 5B:CC:F6:6D:EE:87:25:C4:38:7E:B9:CE:47:FC:39:D5:1F:98:35:11
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019A51F567D7BC5509EFDABDBF94E7816600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 0FF8
Signing time: Wed 05 Nov 2025 03:00:28 +0000
Manifest this update: Wed 05 Nov 2025 03:00:28 +0000
Manifest next update: Thu 06 Nov 2025 03:00:28 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: kQRpc04d/H9JF94ifwJZDnek2nTWxoCIyWA+ZWC4TQ0=)
2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:67:d7:bc:55:09:ef:da:bd:bf:94:e7:81:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Nov 5 03:00:28 2025 GMT
Not After : Nov 6 03:00:28 2025 GMT
Subject: CN=5bccf66dee8725c4387eb9ce47fc39d51f983511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:e9:f8:f2:15:5a:31:61:b7:fd:0d:39:ce:
68:de:68:68:7a:f0:f6:5e:f8:bb:b4:00:3b:34:1a:
ad:fe:e0:dd:9e:4a:94:9c:4c:99:0f:5c:bc:54:3c:
bb:0a:3e:6e:bc:bd:d9:28:8a:6d:db:2a:ab:c8:c9:
37:7d:c7:03:3c:ae:c7:3b:3a:96:38:37:d0:6e:59:
91:ce:5f:38:18:03:2b:46:54:19:cc:f6:b0:e0:ce:
74:4b:91:60:7d:51:f5:b6:38:c4:3e:2e:ac:f0:22:
4e:25:31:58:94:dd:6e:82:0b:3d:ef:ea:62:54:00:
7d:43:b1:89:c7:85:d2:85:4e:ad:fb:99:1d:d3:4e:
b1:67:fa:74:03:2f:a1:ee:40:8e:63:2f:57:d3:d6:
da:c2:1e:1f:91:66:3e:69:fb:50:0f:15:12:bb:2d:
1d:0b:6f:0e:c8:a5:af:c0:65:29:a8:0d:59:93:86:
62:f9:1d:92:4f:b0:e0:8c:16:7a:03:a7:70:18:84:
9a:91:d8:b8:30:4e:27:f1:96:24:f4:16:84:e3:ab:
f0:53:3a:50:aa:81:58:dd:b8:39:0e:d6:2d:cb:e3:
64:4f:09:ba:a0:ba:ad:52:17:9e:06:f3:69:21:3d:
b8:12:2a:ab:14:19:65:e2:4a:81:cb:d5:98:d4:ca:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CC:F6:6D:EE:87:25:C4:38:7E:B9:CE:47:FC:39:D5:1F:98:35:11
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:89:c3:3c:d0:f4:ca:3e:8a:55:5a:47:85:d2:67:84:4a:c9:
e7:e3:38:32:57:2f:be:18:0a:d6:0e:a2:47:0e:17:ac:64:0c:
f3:71:c2:52:a9:29:b3:af:50:20:0d:93:15:5b:59:fa:dc:da:
bd:1a:23:72:9c:28:31:4b:60:04:8f:c6:1d:11:bc:6c:bc:40:
da:e9:72:ca:be:75:93:55:67:42:38:06:bc:6e:ea:f8:2b:15:
8a:44:6d:63:5a:81:75:b8:62:85:72:fc:88:2f:3c:76:53:dd:
83:13:54:83:80:0d:db:05:30:35:73:f4:ae:73:97:b2:84:48:
19:4d:ff:53:5e:47:d0:7a:cf:81:10:c8:98:c0:76:07:fd:a7:
76:15:ea:d2:a1:63:a0:a3:0f:f9:3f:3b:81:fb:26:b6:fa:c0:
bd:0d:4f:eb:0f:d3:96:f9:47:54:b0:04:dc:b5:0f:a5:01:68:
8f:e6:21:1d:fd:41:eb:fd:93:65:f0:04:d0:0d:94:00:3e:67:
f2:b6:ce:6b:bc:1d:00:04:01:ad:3b:ad:f3:d5:3e:95:1a:68:
26:fc:04:bf:84:80:04:95:76:ac:b9:8f:1d:51:27:76:c9:d4:
c9:7a:9b:46:15:ca:bd:53:95:a8:32:14:8c:a1:94:a7:8f:88:
77:25:ca:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9WfXvFUJ79q9v5TngWYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2
NDUwZWEwHhcNMjUxMTA1MDMwMDI4WhcNMjUxMTA2MDMwMDI4WjAzMTEwLwYDVQQD
Eyg1YmNjZjY2ZGVlODcyNWM0Mzg3ZWI5Y2U0N2ZjMzlkNTFmOTgzNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1vp+PIVWjFht/0NOc5o3mhoevD2
Xvi7tAA7NBqt/uDdnkqUnEyZD1y8VDy7Cj5uvL3ZKIpt2yqryMk3fccDPK7HOzqW
ODfQblmRzl84GAMrRlQZzPaw4M50S5FgfVH1tjjEPi6s8CJOJTFYlN1uggs97+pi
VAB9Q7GJx4XShU6t+5kd006xZ/p0Ay+h7kCOYy9X09bawh4fkWY+aftQDxUSuy0d
C28OyKWvwGUpqA1Zk4Zi+R2ST7DgjBZ6A6dwGISakdi4ME4n8ZYk9BaE46vwUzpQ
qoFY3bg5DtYty+NkTwm6oLqtUheeBvNpIT24EiqrFBll4kqBy9WY1MrkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvM9m3uhyXEOH65zkf8OdUfmDURMB8GA1UdIwQY
MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct
MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw
LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4nDPND0
yj6KVVpHhdJnhErJ5+M4MlcvvhgK1g6iRw4XrGQM83HCUqkps69QIA2TFVtZ+tza
vRojcpwoMUtgBI/GHRG8bLxA2ulyyr51k1VnQjgGvG7q+CsVikRtY1qBdbhihXL8
iC88dlPdgxNUg4AN2wUwNXP0rnOXsoRIGU3/U15H0HrPgRDImMB2B/2ndhXq0qFj
oKMP+T87gfsmtvrAvQ1P6w/TlvlHVLAE3LUPpQFoj+YhHf1B6/2TZfAE0A2UAD5n
8rbOa7wdAAQBrTut89U+lRpoJvwEv4SABJV2rLmPHVEndsnUyXqbRhXKvVOVqDIU
jKGUp4+IdyXKAA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:54 2025 by rpki-client