Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: gB+TaSHre68OKiaxkJjcWR90c3Kb9jYeLb4WTjL47vE=
Subject key identifier: 63:D0:C6:26:00:62:0C:27:DF:77:45:2B:B0:8E:83:BB:41:72:F0:0E
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019882E784BDF00E4BD00A8D8D6E921B8D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0D82
Signing time: Thu 07 Aug 2025 05:01:07 +0000
Manifest this update: Thu 07 Aug 2025 05:01:07 +0000
Manifest next update: Fri 08 Aug 2025 05:01:07 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: WUzv/KeQT5t3J+GgyhNm8HRD9eIXXx/282rWEap1vm4=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:84:bd:f0:0e:4b:d0:0a:8d:8d:6e:92:1b:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Aug 7 05:01:07 2025 GMT
Not After : Aug 8 05:01:07 2025 GMT
Subject: CN=63d0c62600620c27df77452bb08e83bb4172f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:02:22:50:be:38:68:78:99:26:50:30:c7:
22:fc:90:ad:75:11:cb:ab:59:11:79:9d:95:5b:ee:
0e:8e:ba:9b:7b:98:eb:80:90:aa:c0:8a:00:41:58:
e2:40:f0:6c:69:09:16:c8:3e:56:d1:3d:6a:bd:81:
ac:09:1a:62:7f:17:71:fc:96:bb:d9:40:6d:c3:4d:
82:0b:90:f7:d3:19:91:bc:af:c6:4e:c4:b6:3c:bf:
f6:dd:8d:9d:9b:07:c1:ac:ac:63:7a:6d:f6:a3:cd:
6f:d9:e6:a4:de:66:52:17:8e:0e:d2:3c:8c:78:a9:
d8:d6:a1:be:a5:96:e2:40:43:f8:6e:3e:44:26:71:
e7:e3:e6:22:cb:70:3f:da:4c:43:92:64:3c:0f:85:
2d:51:55:09:70:17:7d:e3:4f:0a:79:b0:d9:86:ac:
7d:b1:5a:69:c4:d2:7d:cd:e9:81:1a:80:90:f1:95:
ca:cd:0e:a3:2d:33:0d:7e:3d:f1:56:c5:0f:8d:90:
bc:13:1b:d2:96:86:54:9c:4c:81:a3:59:e9:c5:87:
30:5a:33:22:90:e1:42:06:53:e2:db:21:e8:76:4e:
5c:e5:ad:2d:4a:b3:f2:b5:69:2b:a0:64:a9:8b:7b:
8c:58:6a:ed:a9:14:66:60:22:cd:e1:2c:5d:28:77:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:C6:26:00:62:0C:27:DF:77:45:2B:B0:8E:83:BB:41:72:F0:0E
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e0:81:2f:db:7c:b9:d4:51:69:7f:d6:12:9b:f5:a5:71:09:
48:53:00:a3:d1:32:d1:1b:ec:56:4b:c7:e8:34:db:1a:90:2f:
26:4b:11:cc:52:54:39:c3:8a:54:e7:69:4f:55:f7:7e:23:00:
9f:a2:3a:38:fe:cc:90:2c:42:03:4e:22:eb:78:ef:7a:4c:22:
7b:f7:53:35:64:32:64:e0:9b:71:91:71:a7:33:a1:dd:44:40:
b2:b5:53:f2:e2:e5:a3:87:b9:b0:7f:af:af:b6:67:ff:82:09:
df:bd:8e:6d:51:f8:f8:04:5d:5b:d9:35:c9:2e:99:a9:f2:8b:
b9:a8:77:e3:76:f1:a0:b6:a9:56:1a:8f:70:60:b6:f5:5c:bd:
d9:3b:55:d5:99:ca:ca:35:54:c8:86:9d:dd:9c:5d:ae:d6:2c:
c0:c4:c1:91:4b:a9:e7:85:63:00:3b:94:4e:9c:55:1c:db:29:
b8:28:e2:b6:43:b1:5c:19:b9:24:e0:bc:de:49:d8:9a:a7:a9:
af:11:d4:5f:57:9f:7f:08:b6:97:8a:ae:9e:16:c2:ac:3a:6e:
70:d7:c7:ee:c0:d7:13:70:0f:6d:79:26:49:ef:0e:dd:ec:a1:
4b:85:f7:5f:90:19:8a:f5:be:7b:3f:25:b7:ed:4f:70:4c:b6:
1c:33:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:23 2025 by rpki-client