Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier: BYDWSUvs6QhmhIMSUSqdiyC2EW2KrJViUpejInB/t20=
Subject key identifier: 3C:C6:AA:99:8F:1B:3F:6A:01:FC:08:54:CD:3D:8B:8C:A3:CC:85:DB
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 019A4FD05AB647188F789CA5B3C60CAA0D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number: 06C9
Signing time: Tue 04 Nov 2025 17:00:46 +0000
Manifest this update: Tue 04 Nov 2025 17:00:46 +0000
Manifest next update: Wed 05 Nov 2025 17:00:46 +0000
Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: zo3mV+ZcclsVpPMQ7EexCZxPrSh/VGq8gUi6WxqEJ/o=)
2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5a:b6:47:18:8f:78:9c:a5:b3:c6:0c:aa:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Nov 4 17:00:46 2025 GMT
Not After : Nov 5 17:00:46 2025 GMT
Subject: CN=3cc6aa998f1b3f6a01fc0854cd3d8b8ca3cc85db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:ab:3a:a3:d0:38:80:1c:23:12:a3:ff:62:
33:a7:73:02:f2:ff:db:c8:51:1d:08:bf:9b:e2:5a:
0f:95:51:0a:89:15:27:c5:d0:5f:3f:72:85:b3:cf:
a6:3e:8c:f0:f1:bf:97:c0:ad:a2:c6:49:60:1a:32:
9f:ca:91:f7:1d:f1:5d:e3:42:81:94:1e:cc:3d:d6:
2a:34:64:73:ae:4f:74:85:c4:cf:49:d8:fe:15:f4:
b2:08:34:99:4f:95:09:62:34:33:ed:18:4e:fd:ba:
50:00:45:b0:ac:c0:b2:03:09:88:14:bd:21:ae:99:
84:4a:4d:e7:70:7b:bd:c1:cb:ae:05:3b:a0:cd:fb:
6b:3c:da:30:dd:2c:0a:a6:05:c9:9d:86:5f:5b:64:
0c:69:f1:32:bc:ad:ee:a3:bc:5d:04:ce:3b:cf:77:
aa:b7:21:bd:e4:f8:38:53:b5:f3:f7:b7:86:cd:30:
49:a7:8c:80:7c:4b:7a:d1:51:7b:39:e2:bf:da:2c:
a9:89:7c:cf:c9:bd:66:a7:5f:4a:27:00:0f:b3:a8:
18:c8:bd:44:38:fc:10:4d:e4:2b:ed:fb:55:e8:2a:
b2:72:53:e0:c1:09:01:30:54:0c:c4:ae:bb:e1:c9:
81:1b:55:e0:45:69:3b:99:28:f2:ca:91:89:10:94:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C6:AA:99:8F:1B:3F:6A:01:FC:08:54:CD:3D:8B:8C:A3:CC:85:DB
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:d7:92:71:78:87:5f:20:fc:20:8d:a4:3a:5c:f5:64:ea:
21:2f:8d:6d:d0:b5:30:bb:f3:d6:03:3d:ae:1c:de:a6:b3:4e:
a6:78:af:47:72:aa:c4:47:74:80:46:29:4a:cb:39:50:2f:0a:
16:ba:8a:f5:88:c1:7d:87:2c:d1:ce:eb:8c:c7:12:31:73:30:
bf:23:65:ea:19:6f:6f:e9:27:b0:1e:21:b1:e2:ba:fe:6f:97:
7b:93:8d:8e:04:fb:37:d8:71:86:ae:e2:b8:29:99:ff:1f:d7:
e3:e1:82:9f:bc:d7:6a:31:45:3b:50:3a:40:d1:ae:05:12:ee:
a0:1f:34:eb:bb:fb:dc:22:c5:a8:50:3c:3e:1b:ed:46:d4:3f:
9c:9e:8b:2d:be:70:7d:9d:f2:29:57:b5:e1:aa:73:32:e2:1c:
c8:e9:28:27:31:1a:27:cc:db:39:a7:44:8d:82:ba:51:c0:25:
29:44:24:99:64:c7:8f:3e:4d:72:87:61:b1:30:0b:40:28:b3:
ca:9b:0d:b7:6b:7e:8b:1d:00:a7:2c:6a:78:c6:30:4f:a6:50:
a3:7e:f1:77:cd:39:ab:48:86:f8:f1:b3:bc:1e:f8:90:14:90:
fe:9c:8d:9b:80:f8:59:6d:4c:8e:2c:1b:90:4d:8f:c1:5f:34:
d3:33:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:08 2025 by rpki-client