Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: HwURvhPfrD3nyZ4+xc4d1/kpSAclPRzGL7DXjIwpAww=
Subject key identifier: 24:03:DC:A6:AD:BA:0E:07:8D:9E:7E:DC:5C:D4:B9:1C:2E:ED:6F:70
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 01988B45FC76F8AF9F2E3D7DBA558F1E2C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 1281
Signing time: Fri 08 Aug 2025 20:01:16 +0000
Manifest this update: Fri 08 Aug 2025 20:01:16 +0000
Manifest next update: Sat 09 Aug 2025 20:01:16 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: wwBTmFdw7LG/VOi1rkB1LDAe0julMJSj8k0b9yOqqsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:fc:76:f8:af:9f:2e:3d:7d:ba:55:8f:1e:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Aug 8 20:01:16 2025 GMT
Not After : Aug 9 20:01:16 2025 GMT
Subject: CN=2403dca6adba0e078d9e7edc5cd4b91c2eed6f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:f4:92:ac:3f:3c:7c:11:b3:0d:ea:8f:1f:
3d:aa:16:96:c0:82:37:ef:21:72:4b:33:dd:11:1e:
ee:9f:d2:f4:6f:4b:db:7d:d5:f0:d9:ea:89:68:3a:
75:e1:ba:44:58:ef:c7:d3:a3:ea:f1:6c:0b:b4:6b:
87:07:07:41:49:36:5c:46:ad:c3:bc:d9:a7:a9:64:
df:78:e4:24:ea:de:ae:54:4b:9d:ed:8d:b1:69:3f:
fc:75:31:bc:af:ba:01:a6:b1:09:9b:52:2b:16:e5:
73:1d:3d:3b:16:eb:5f:73:c8:2c:20:3f:68:c3:a8:
36:db:f5:9c:d1:45:71:9f:dc:bc:c9:20:80:88:42:
be:c7:df:77:2e:16:d4:0e:06:5c:e1:0e:dc:a0:f1:
70:6e:da:7e:17:17:aa:15:da:0d:ab:71:1a:a5:ea:
16:0a:00:66:b6:42:ca:0d:88:b9:67:25:00:c7:43:
f3:1b:b4:a6:e4:1c:ac:ed:d7:f5:c9:71:29:18:c2:
40:69:55:4f:1a:d1:bf:b9:8e:76:f5:3f:19:32:b7:
d1:f3:d9:ca:ea:91:ae:30:0a:82:94:96:45:f9:55:
d5:c1:4e:b3:fc:76:5c:65:67:c2:d8:d1:fd:53:99:
ab:ee:a0:e9:88:be:00:27:41:da:2b:7b:c7:97:45:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:DC:A6:AD:BA:0E:07:8D:9E:7E:DC:5C:D4:B9:1C:2E:ED:6F:70
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7c:0f:df:9b:0f:81:5b:21:fc:85:0f:ea:cb:0c:96:cd:f7:
62:df:85:1f:6e:5d:cf:71:e6:19:26:cc:f7:68:9d:64:49:d0:
7e:41:b0:e7:86:f2:73:ed:7c:1e:c4:e4:39:80:c2:12:a1:1e:
3f:38:1d:d1:e5:62:0e:fa:f4:54:96:29:10:2c:6e:88:53:a1:
53:1e:81:9e:ed:2a:86:d4:26:92:95:bc:d1:f7:3c:59:5a:45:
7e:78:b6:df:74:c6:93:8d:dc:f5:15:8f:44:b8:ed:93:b8:35:
f1:f9:fe:49:61:e6:12:76:3d:4e:54:1e:f0:b3:35:37:0e:9d:
95:36:88:10:36:1b:6c:47:50:7d:4c:45:b2:7b:d9:0f:7f:50:
b8:14:b6:f1:7d:01:e6:89:1d:68:00:63:b6:e6:05:81:46:32:
ed:af:f1:7f:f7:09:a0:2b:1f:d1:48:bc:4f:28:ee:b1:3f:80:
4d:b4:b1:1f:7b:ce:86:ac:34:04:b4:12:14:03:b2:a5:de:f6:
c4:01:93:0f:65:e7:01:76:0d:6b:c6:6c:92:48:92:fa:e5:b5:
9e:7f:eb:55:f7:e4:00:a9:8f:ed:cc:60:9a:57:a5:c4:1d:5f:
4b:06:91:fa:a1:4e:17:58:57:db:f0:09:bb:ee:37:73:d7:6e:
74:01:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:44 2025 by rpki-client