
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: 8T2mgrj/A4FwkpIApP6uPOgg+S3ygXTYJv4c3TZxB/c=
Subject key identifier: EE:72:F8:A5:59:93:49:12:4B:3A:62:63:87:30:6C:0B:2D:72:85:90
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019768F2D7F3BC3D45E16BF524ABE1F64C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0CF0
Signing time: Fri 13 Jun 2025 11:00:34 +0000
Manifest this update: Fri 13 Jun 2025 11:00:34 +0000
Manifest next update: Sat 14 Jun 2025 11:00:34 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: n5GaaquKAo6+s76fbMeRCqQ5Wf/horqoSQ1zO7F1tf0=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:d7:f3:bc:3d:45:e1:6b:f5:24:ab:e1:f6:4c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jun 13 11:00:34 2025 GMT
Not After : Jun 14 11:00:34 2025 GMT
Subject: CN=ee72f8a5599349124b3a626387306c0b2d728590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:0a:25:a8:e2:5a:6f:1f:7e:f8:eb:61:82:
f1:67:bc:c5:45:a6:c3:a1:44:8f:16:a5:c2:56:13:
73:06:4f:13:07:df:7c:a5:b8:34:a7:86:9f:85:70:
a1:7d:21:d1:5f:ac:5c:dd:85:59:bd:ac:47:11:dd:
6c:75:48:f4:ab:28:f4:ef:f8:b0:df:09:5b:46:6e:
fa:cd:fa:f2:85:c7:48:b6:7d:1a:65:f7:09:01:ec:
fb:0a:ea:c2:d4:df:5d:77:87:20:34:69:88:78:4f:
e0:ee:0e:2f:44:24:9f:ae:ea:2d:0d:4b:e2:b9:cd:
87:f2:e6:bc:a1:13:a5:d6:18:ef:99:23:20:42:9d:
0b:5b:f1:4d:6a:76:f1:96:d8:58:ad:8d:9b:83:d8:
2b:38:a1:99:39:25:8d:bc:65:79:91:80:db:ec:40:
a2:9c:c3:09:e9:d1:1e:7b:f5:40:d0:7b:61:f0:f0:
8a:74:6f:53:9c:74:c1:95:9e:1c:01:15:d6:38:cb:
cb:b5:60:85:9e:3c:8c:02:fc:e2:21:a3:25:38:e8:
14:a7:27:f3:33:34:d5:1c:07:e7:d5:43:62:55:ae:
09:fe:16:64:2e:d3:b6:93:61:29:ce:a2:a4:ea:00:
16:37:6b:b5:17:97:1d:53:b4:97:c8:4d:16:e7:7d:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:F8:A5:59:93:49:12:4B:3A:62:63:87:30:6C:0B:2D:72:85:90
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:46:58:38:08:11:ac:96:a7:ee:b6:65:f0:27:0f:d7:74:
b5:3b:43:b1:87:f3:86:74:d6:c6:c8:5b:3e:20:62:90:bf:22:
0e:3b:cf:05:f9:a5:c2:3a:02:e5:89:68:d9:b8:ed:15:da:33:
f0:73:7a:4a:3f:0f:c1:27:31:b9:79:14:58:3f:ab:eb:67:97:
8c:f0:b8:35:e3:20:73:41:12:e5:1a:d9:4d:41:52:cb:6a:87:
a8:42:12:63:57:45:68:7d:ff:3c:e3:d6:a0:b5:f8:75:f7:f2:
6f:cf:71:0b:69:87:10:e7:dc:27:5e:b1:fd:a9:ce:a0:35:9f:
77:29:d2:91:b8:a6:5d:27:27:15:d1:66:a0:ad:83:11:bd:ec:
a6:ef:d4:9c:49:f2:7a:a3:43:25:e3:72:bf:f4:b7:ae:ef:c2:
1f:76:ba:dd:a7:71:d8:c5:49:bd:88:5f:d4:0b:30:43:de:32:
d0:34:86:2b:2e:53:72:00:2a:6f:3e:39:b6:12:ea:bc:ca:b4:
66:55:3f:69:85:f9:a1:fa:5a:26:34:d8:2b:25:f8:6e:c0:b2:
69:a2:30:4a:3d:af:53:62:0b:89:e4:4f:c0:0d:39:5f:af:61:
8c:51:4d:84:62:32:2a:b4:31:37:3f:43:d6:cb:dc:19:a1:bc:
05:1b:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:56 2025 by rpki-client