Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: XmEJhBuH+dmgRWPs7qrqfn4fxAnVxbRvrasDfN4sJ+o=
Subject key identifier: D2:F0:7A:A9:4C:F9:3C:50:59:A2:D5:B8:24:FC:DF:EB:88:EA:4F:97
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 0198A128CC2A69AC8AC33E7CA039651811D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 04E2
Signing time: Wed 13 Aug 2025 02:01:02 +0000
Manifest this update: Wed 13 Aug 2025 02:01:02 +0000
Manifest next update: Thu 14 Aug 2025 02:01:02 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: Dm+xs0pEZI3hh8PVIyQzqtAEDSL07O+fVYA6NLR+9/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:cc:2a:69:ac:8a:c3:3e:7c:a0:39:65:18:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Aug 13 02:01:02 2025 GMT
Not After : Aug 14 02:01:02 2025 GMT
Subject: CN=d2f07aa94cf93c5059a2d5b824fcdfeb88ea4f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:cb:69:8e:bc:5d:57:b0:56:0a:a6:6f:d5:
4d:df:6a:15:a8:ca:4d:b5:e4:09:38:57:33:90:6c:
93:24:b3:77:a1:86:4e:75:0c:18:fe:c6:3a:62:94:
d6:82:80:7b:9e:47:ce:30:3c:de:bc:fc:28:ce:00:
10:11:7f:e9:e6:7a:7d:55:6c:f6:a4:32:52:f7:69:
69:a2:4b:7c:0f:99:12:15:49:f7:96:a6:e9:11:f8:
a4:90:67:cb:0d:ab:0f:37:c9:da:48:f5:a1:5b:f4:
9d:9f:64:a3:52:d2:a5:ae:3d:33:d4:33:e4:7b:4d:
09:89:6a:e7:70:5b:44:91:27:a2:c8:07:f2:3d:cb:
38:83:d2:c7:c5:20:f0:c3:68:6f:fa:ea:0e:f3:c1:
91:84:36:b9:12:9a:8c:81:08:d5:9f:95:67:75:43:
10:95:04:42:d3:f0:9c:af:fd:2a:74:68:24:46:0a:
f1:0d:54:ac:25:c5:97:5c:7b:cf:6b:3d:79:98:17:
fe:9f:ef:87:2d:71:ea:00:81:e7:6d:8a:60:15:8d:
e2:9d:6e:87:96:e6:b3:83:fd:b4:11:68:4b:ba:4f:
19:1c:8d:e3:b0:24:ec:22:f9:0e:78:5b:0a:57:3f:
01:e0:27:9a:b2:70:d2:60:8a:f0:2d:ca:1c:7f:6e:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:7A:A9:4C:F9:3C:50:59:A2:D5:B8:24:FC:DF:EB:88:EA:4F:97
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:02:2f:41:6d:0c:58:15:41:76:0c:8a:c2:52:20:8c:87:
b9:09:ae:bb:78:d0:77:fe:3c:99:08:1b:64:a9:7f:64:ed:bc:
a1:ac:32:a8:df:74:fb:09:8b:7a:66:0b:5d:d5:81:e2:72:a5:
fe:23:65:79:46:db:34:bc:f3:af:1c:20:92:55:a1:72:c8:6f:
0a:e1:97:2b:cb:9f:ba:73:1c:59:72:31:e1:c7:8a:8b:ec:9d:
ec:c9:7d:e1:0a:68:1c:ed:1a:f7:c4:71:40:c8:14:01:48:66:
36:1c:9d:b9:78:8b:cd:b6:89:49:47:86:05:c1:b0:3c:0f:4c:
9b:5e:ae:62:e9:05:4d:70:31:c4:60:bf:9f:72:f0:72:e5:a1:
b2:60:99:fe:5e:ea:1e:da:c3:71:63:c5:0a:a2:d4:0c:bb:23:
d6:b2:a9:be:cf:b1:3a:f7:1a:84:20:b3:52:f1:d8:c5:e3:b6:
11:0f:92:bb:69:65:c0:f9:25:34:cb:fc:15:6a:6b:4b:0c:57:
48:a5:20:3a:09:53:18:1c:79:9d:a2:66:b0:a3:8c:b6:7a:f4:
96:bb:fd:5d:b1:bf:23:9a:15:cb:d4:39:92:ed:27:0e:cd:56:
96:dd:ab:52:89:2f:91:11:7c:6e:e8:08:f6:a0:a4:f7:ed:61:
9a:66:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:34 2025 by rpki-client