
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier: lJrl9AcKbFp3daYeWAv/KkfWLKJOxIdjNxw3Hkao9nU=
Subject key identifier: 1A:A4:15:F7:11:D2:35:3B:25:E4:C4:07:EE:31:98:43:E6:FA:FE:F1
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 0198933632F95CA64643A779E774D73FC01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number: 1021
Signing time: Sun 10 Aug 2025 09:00:59 +0000
Manifest this update: Sun 10 Aug 2025 09:00:59 +0000
Manifest next update: Mon 11 Aug 2025 09:00:59 +0000
Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: LQQq5S10ZZlxirsD6ZETe712tgu17dKOWbiV1GdxGc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:32:f9:5c:a6:46:43:a7:79:e7:74:d7:3f:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Aug 10 09:00:59 2025 GMT
Not After : Aug 11 09:00:59 2025 GMT
Subject: CN=1aa415f711d2353b25e4c407ee319843e6fafef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:b4:03:96:78:09:36:cc:6b:eb:03:28:52:
f1:15:a4:a7:67:69:39:73:30:0b:38:bc:7c:13:33:
2f:1c:c5:02:31:b6:2e:29:da:6d:9f:bc:6c:af:5b:
c9:ff:ec:6a:94:4b:04:f6:ab:58:61:f7:e3:f2:60:
83:da:b1:0a:7c:75:72:0e:78:e4:57:8e:39:32:0a:
c8:96:3c:08:49:44:16:6b:c3:f0:8a:1f:6f:30:88:
df:5b:09:92:1c:1c:3e:cc:61:cd:4e:f2:9e:f2:88:
61:24:0a:94:3c:ce:7b:d7:e2:56:e8:6f:90:55:2a:
c9:2b:81:99:6a:89:fb:a8:04:44:34:4d:16:cf:01:
7d:38:aa:f0:c6:9b:ab:78:22:24:9f:36:21:dc:f7:
3e:53:d1:75:50:a0:c2:f1:ae:77:9f:c4:5b:1d:b4:
b8:c7:96:20:58:1e:63:be:15:c2:0d:91:90:b2:47:
04:4b:20:e5:da:7e:42:bb:d2:29:d9:82:f3:76:ef:
da:98:36:20:91:27:f8:3f:0f:cd:da:c7:3d:f8:f2:
c1:64:98:c4:09:ce:06:6e:2b:e4:37:b7:7c:64:32:
f7:7b:bf:2e:17:f3:16:af:1e:31:33:a8:48:07:f0:
78:75:7c:6c:b6:13:cd:22:ca:c7:e6:f6:91:22:13:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:15:F7:11:D2:35:3B:25:E4:C4:07:EE:31:98:43:E6:FA:FE:F1
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a8:97:01:3e:0b:82:fe:a6:8b:30:15:0a:90:fd:b2:b8:3e:
2f:37:ba:2d:65:82:31:75:b3:ee:c3:68:0a:50:93:05:ba:67:
1c:55:c6:c2:86:e7:c9:6f:06:cc:fc:ca:6e:da:6a:d8:9b:02:
c1:3d:c4:a5:e0:cd:22:c6:bb:b6:7a:80:c5:3b:66:66:c1:aa:
a3:65:03:4c:72:a6:3c:bf:ca:23:f1:9d:54:32:b0:73:f7:de:
9b:7f:43:03:0d:d0:7e:43:c7:b1:79:ac:88:cc:26:7b:74:0b:
55:ac:96:5f:ac:dd:9b:92:54:c0:41:3b:6a:c6:1e:9a:0d:83:
85:54:37:43:9b:c7:c4:e1:c4:6e:40:7c:2c:94:bb:88:a8:46:
96:bb:b0:61:24:5e:e3:a5:a3:52:8b:3e:fd:ce:25:a3:29:93:
a5:a1:5e:68:c7:1f:2f:47:cf:48:dd:ff:84:c0:94:85:b3:e7:
cc:ae:ce:26:12:21:43:fe:6f:99:02:f8:fc:90:cb:9e:19:1e:
11:22:6c:fb:08:a1:62:0a:93:db:f5:10:0a:f3:ae:17:21:08:
a7:de:4c:e8:c5:9c:3b:ef:a9:52:12:62:46:05:43:41:35:02:
5d:f2:de:ff:04:83:e9:52:96:0b:b2:77:05:f0:44:fe:71:ab:
d3:f7:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:02 2025 by rpki-client