Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: JuhPitUmJUU7lhkslOW+fbkX6APj4wfn+/HTWxXgG+8=
Subject key identifier: 1D:9C:89:98:D3:BA:86:E5:89:6C:5F:FC:83:C1:6D:90:3A:59:79:CC
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019A50751337C0047F9F7E3F3B73B74F844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0E71
Signing time: Tue 04 Nov 2025 20:00:41 +0000
Manifest this update: Tue 04 Nov 2025 20:00:41 +0000
Manifest next update: Wed 05 Nov 2025 20:00:41 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: aWcfQoWRDePg/IaXxKZWRKEaWPrtBq3jetl3RNPUB8A=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:13:37:c0:04:7f:9f:7e:3f:3b:73:b7:4f:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Nov 4 20:00:41 2025 GMT
Not After : Nov 5 20:00:41 2025 GMT
Subject: CN=1d9c8998d3ba86e5896c5ffc83c16d903a5979cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:5b:da:cc:22:1a:d1:c2:2c:65:a3:c9:15:
c9:5d:ba:ae:e6:2d:a8:13:1c:66:83:e9:8d:57:70:
60:0c:4b:78:fe:a8:29:d4:2a:7e:44:60:f6:6a:2e:
b7:01:cf:89:41:06:f2:f7:eb:4a:50:54:f6:f1:f6:
77:13:78:81:9d:33:71:a9:ec:90:81:67:0f:52:f4:
20:da:3e:08:e7:fa:53:b8:98:3c:3c:a8:17:cd:77:
55:20:18:4d:ec:9b:7e:19:4d:8c:6a:c9:e4:a8:3d:
3b:ff:96:9e:3d:82:d7:5c:3b:7c:84:55:e2:74:56:
d9:83:0b:1f:6a:87:8c:3b:80:25:14:e6:66:39:64:
a8:b9:87:12:df:ce:1f:3d:36:44:e5:a5:01:f3:18:
0c:96:9c:36:e9:82:7d:16:1a:63:1a:fe:c8:40:db:
6e:ee:dd:6d:53:ae:3e:4b:7c:71:b1:5c:04:b7:19:
5d:08:99:6b:67:54:2a:3f:e1:cc:6b:48:c3:9a:86:
76:82:fc:b4:0f:6e:56:b9:e4:36:26:73:af:db:b8:
08:a3:90:8b:f9:45:3a:66:c3:e8:ce:01:68:56:69:
1e:c1:da:79:32:2f:75:f7:23:7a:80:5f:0d:f9:af:
69:69:24:41:4b:30:b4:95:ad:ac:bc:9e:5b:ec:ab:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9C:89:98:D3:BA:86:E5:89:6C:5F:FC:83:C1:6D:90:3A:59:79:CC
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:80:52:b5:f6:43:10:3d:4c:9f:73:04:7b:35:55:46:87:
b1:c3:be:9c:e0:73:ca:64:9a:34:a8:97:6e:48:36:9b:58:68:
01:60:f2:7c:8d:ce:f5:16:c0:da:49:d8:fc:52:52:a1:37:af:
cc:4d:3b:48:ad:c6:d2:d9:c0:0f:5c:b9:5e:3c:49:af:8f:99:
cd:76:ac:f0:f8:22:0f:1a:fb:63:b9:d1:3e:8c:5f:17:60:22:
94:5a:12:49:0f:f0:a5:07:0c:8a:f6:6b:31:56:81:a0:46:a7:
c5:af:ad:4d:cb:22:3e:b5:af:fd:83:e2:65:72:cb:f1:ad:43:
6e:ad:06:44:b5:1a:36:b7:1d:61:13:55:a1:89:69:51:a8:96:
4a:03:e1:ea:eb:e8:ef:68:0f:46:97:a2:91:b8:1c:f3:df:dc:
12:fc:74:8e:00:62:ac:1b:f4:ef:ab:2c:70:ce:4b:c7:c2:06:
4d:8a:b3:0f:ec:7d:c6:8d:f8:25:2b:3f:ec:c1:6f:fc:ed:c6:
8f:b7:20:72:6f:fb:25:b3:be:0c:95:b7:9c:bb:44:d5:b6:89:
51:57:01:d6:e0:d9:ec:ae:10:a5:33:27:f6:a0:76:c3:87:5e:
a6:d3:03:ae:f5:bc:a0:16:c0:9b:f3:98:98:3e:85:2c:40:7b:
a6:33:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:12 2025 by rpki-client