Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: Su+hoRgFAR+gMCAFhJUR/APR4iruzPVyyuQ+sYushbA=
Subject key identifier: 4D:FF:2B:AE:9D:6E:2E:CB:2B:78:44:28:88:06:A0:60:57:9D:36:34
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019A4F2B0AFA009749883496185B9E72A770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 136B
Signing time: Tue 04 Nov 2025 14:00:12 +0000
Manifest this update: Tue 04 Nov 2025 14:00:12 +0000
Manifest next update: Wed 05 Nov 2025 14:00:12 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: b+zeFnjwgFudyrkZMxydT6qGlWb/S3TAGYU1VxHetvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0a:fa:00:97:49:88:34:96:18:5b:9e:72:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Nov 4 14:00:12 2025 GMT
Not After : Nov 5 14:00:12 2025 GMT
Subject: CN=4dff2bae9d6e2ecb2b7844288806a060579d3634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:25:aa:b9:58:7a:d1:ed:c6:27:77:91:a6:
0e:1b:f4:0c:ad:0b:1e:24:15:7d:0c:2d:68:f7:03:
78:bf:b1:8a:31:b7:02:e2:1d:fb:65:e8:f6:5b:cd:
f2:78:28:ad:c7:10:5e:0d:ca:d3:86:92:d3:61:7f:
fa:86:c0:4e:e0:27:b0:f3:c5:08:04:9d:6e:f1:8a:
44:7a:1a:17:9d:8f:20:11:61:84:d8:2c:f5:81:75:
98:a5:08:be:82:ad:8a:87:a4:f0:95:3c:d6:c0:14:
ad:21:5b:f9:f2:b1:6d:4c:11:f3:4e:f5:13:d0:06:
19:e4:d5:b5:1e:b5:91:d2:13:08:b2:f1:5d:e0:89:
ae:9c:6f:62:8c:39:59:0d:a8:91:9e:77:dc:d6:ba:
3f:cd:d5:5d:83:79:57:e2:7d:38:dd:ea:75:59:a3:
a6:95:e0:57:ef:9a:24:b6:ec:ee:00:81:18:55:43:
e8:45:21:7e:a1:52:2a:57:0a:2c:6b:29:dc:3e:99:
86:16:2e:f9:90:aa:ad:d4:53:9b:eb:e5:60:b1:2a:
71:d7:59:43:4e:ff:be:ee:64:cd:6f:8d:a2:d4:c0:
00:e2:6e:ea:04:7a:e1:44:13:2b:b9:ec:47:12:39:
4c:32:91:60:b0:a6:36:60:03:92:66:de:9b:dd:46:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:2B:AE:9D:6E:2E:CB:2B:78:44:28:88:06:A0:60:57:9D:36:34
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:d4:55:bd:90:7f:a4:10:fb:0c:7c:b1:63:08:36:06:dd:
d0:85:7f:bd:03:9d:7c:5f:9b:ab:77:bf:e2:78:79:8a:88:39:
55:40:f5:94:b3:45:e8:a6:f0:f0:8b:5c:3d:b8:6a:e4:2b:4d:
3e:0d:96:c2:1b:cf:f2:d3:74:54:32:fe:58:d5:ed:86:7a:d2:
30:a3:bc:51:50:47:59:8b:b3:80:e1:9a:ae:89:9e:44:9a:f4:
50:04:87:70:e4:d6:b1:4b:cc:56:3f:d4:76:bc:f5:8e:81:90:
5d:14:ad:6a:80:2b:90:20:39:3d:ff:78:3e:93:4e:ff:9d:d3:
bb:e3:df:ad:a1:10:d7:8a:1a:2b:8d:a6:f3:f3:75:65:c3:fa:
32:bb:aa:89:24:c7:01:c9:b0:d3:e3:d0:60:9a:49:f0:7c:57:
b6:6e:db:e6:bb:6d:d4:a3:3e:f7:97:2d:6d:ae:17:ad:a5:bf:
e5:d5:0d:f3:19:4e:41:c4:2d:81:e4:fb:6c:69:f1:bf:73:fd:
a4:fb:0a:13:b7:d9:41:73:10:e3:ff:e0:9e:82:72:a9:48:b6:
e2:99:7a:76:f5:0d:b7:2f:8b:ba:6f:02:34:31:0a:b0:9a:90:
fa:ac:5a:ce:3b:03:aa:0a:6b:78:61:d1:91:2e:fb:8f:a5:2b:
70:ac:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:33 2025 by rpki-client