Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: zcFGCko/6xxXUDc/pEmGxIEuVNmOLl4d228HGyOsINk=
Subject key identifier: F5:33:72:4E:45:85:01:79:64:C3:A7:46:25:38:47:10:7B:81:B0:E4
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 019A4F2B006AC49111C3BAE16338D21144A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 0390
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: U335sjYb7r/ZgEPcR25O4CQK4/55AVm9V8kgC0w2/k8=)
2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:00:6a:c4:91:11:c3:ba:e1:63:38:d2:11:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=f533724e4585017964c3a746253847107b81b0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:e5:83:e1:4b:06:33:6f:67:ea:b9:98:02:
6e:c7:2d:e3:6e:a3:6c:f0:ed:61:f7:08:fd:fd:41:
96:69:7d:38:27:5a:e1:a2:08:2f:ce:53:92:4c:53:
0b:9b:fb:ad:03:fc:0e:67:2e:c4:84:97:11:eb:09:
10:fa:4c:63:37:02:20:ae:c5:d0:df:54:29:fc:31:
f0:8f:99:33:51:b9:65:44:77:79:a1:77:a6:bd:13:
56:a6:59:9a:5b:16:00:35:6a:91:4b:20:b5:84:de:
6b:ef:07:b2:bf:03:c1:1e:a2:63:fb:54:53:a5:e2:
63:3e:23:41:b5:d4:34:24:e5:e8:43:01:a3:4e:77:
fa:36:3e:3d:b7:0a:7c:07:ea:9e:ba:43:d7:df:29:
c2:a7:68:13:42:b1:a7:b8:23:89:2c:94:4e:3a:3b:
94:ea:42:db:bc:ea:31:d4:53:38:31:48:1f:a8:8c:
b6:eb:37:1d:d9:b3:53:de:00:cf:fc:bb:b1:62:5a:
71:3b:5f:23:c3:8a:f0:cf:7a:ed:3a:93:c6:56:31:
5f:60:97:e8:09:9d:fd:d5:00:fe:42:94:d0:88:c9:
ec:67:a2:4c:7b:dc:8b:18:57:21:9b:35:37:1f:08:
be:17:48:fd:92:ca:4f:49:5d:ff:a9:ac:00:ec:9b:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:33:72:4E:45:85:01:79:64:C3:A7:46:25:38:47:10:7B:81:B0:E4
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:97:fb:fb:d0:e6:aa:0a:35:00:ba:4f:4f:7e:c4:e0:3d:
5b:8f:85:b6:2f:55:1b:b9:ea:26:b4:c2:b4:c3:b8:ec:c4:0d:
b9:e2:71:b8:3c:1c:24:96:6e:ba:13:1b:bd:36:d6:af:f9:3c:
95:68:4c:c8:fd:be:75:a6:b0:fb:c9:e7:b2:1a:79:4a:05:0d:
c0:d8:a3:25:87:1b:60:84:0e:77:37:1b:20:94:12:0a:4b:7b:
1f:ef:6d:8d:a6:fc:5a:14:79:9f:5f:88:f8:7e:fd:5c:34:e4:
77:df:28:8f:5c:ab:29:25:a4:0f:64:2a:02:ba:71:4d:9e:34:
a8:93:b6:e3:d4:f8:7b:8d:2a:41:a7:88:75:11:04:83:71:1c:
90:ee:8b:6e:3d:80:d9:76:07:0f:64:ff:2a:ee:6d:d8:1f:d0:
37:6b:e3:0f:a0:46:c3:cc:da:7e:8d:f8:e9:be:3d:3c:35:8f:
d5:dd:85:d7:7e:71:f0:22:ce:e7:67:0c:0d:02:8c:5f:64:2e:
69:a7:54:17:d4:91:d7:49:b5:21:35:ae:db:ba:b9:d8:29:14:
3a:e4:b7:61:e6:6e:0a:26:df:e0:50:fa:31:5b:0c:ee:7a:5a:
59:80:91:8b:0e:b9:fa:0d:d4:20:9f:c5:55:fb:b3:a6:75:d9:
6b:5c:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:47 2025 by rpki-client