Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier: bgIhu3KnwtQ/VTuHpyrAIGYjfQiloUQsxtLpP60ay7o=
Subject key identifier: 31:63:DA:C2:F4:F8:3D:65:9A:86:FA:99:EB:2C:30:62:5C:F5:4A:B0
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial: 019779AFF49758EC4A91062B0690439EB82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number: 0449
Signing time: Mon 16 Jun 2025 17:01:03 +0000
Manifest this update: Mon 16 Jun 2025 17:01:03 +0000
Manifest next update: Tue 17 Jun 2025 17:01:03 +0000
Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: wDtF7y/tZHbS9cooeKeoYFp9DVaDwfqlmVrHMk5y02I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:f4:97:58:ec:4a:91:06:2b:06:90:43:9e:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Validity
Not Before: Jun 16 17:01:03 2025 GMT
Not After : Jun 17 17:01:03 2025 GMT
Subject: CN=3163dac2f4f83d659a86fa99eb2c30625cf54ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:36:4d:45:58:7c:53:bd:ab:0d:81:fe:d1:
37:c6:0a:cb:60:09:76:30:c9:93:12:21:31:cb:87:
dc:5d:6b:c5:a2:1e:fa:9d:4c:1d:ae:f1:f7:f0:fe:
b3:9c:b9:5b:f6:14:95:6d:ad:46:6a:ec:fd:fc:66:
ac:ef:8d:0c:1b:61:b5:ab:b4:6c:e6:f3:41:88:1b:
14:05:fc:48:6b:71:d8:94:e6:fc:71:d7:0a:fe:4c:
83:96:a1:ad:7c:76:39:af:c8:bc:29:f6:f5:b3:7e:
e1:05:f8:b8:88:1d:6a:13:1b:84:05:84:d6:96:18:
20:57:ac:9e:34:7d:d1:69:2b:92:d6:f8:81:06:b0:
82:8c:17:0a:b5:ed:17:83:b1:8a:53:32:06:0d:de:
ee:b0:64:af:7c:2f:8b:49:98:9d:23:c9:de:5e:22:
32:60:64:4e:c2:4f:13:39:c1:0b:b5:27:33:93:99:
6f:91:3f:02:74:91:1b:6b:e1:43:d9:b9:74:83:02:
06:9c:39:e1:1e:a2:5a:f0:b3:ee:1b:3d:20:d4:68:
67:3a:ae:7d:d0:29:f8:78:e7:18:fe:17:71:1d:57:
df:83:52:16:07:72:b1:84:62:32:a6:68:0d:f5:aa:
c1:8e:b2:3f:89:9c:b2:a2:1c:52:ce:eb:d5:03:ca:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:63:DA:C2:F4:F8:3D:65:9A:86:FA:99:EB:2C:30:62:5C:F5:4A:B0
X509v3 Authority Key Identifier:
keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:74:9a:55:40:0f:b4:03:9e:c8:f6:32:e5:d3:5d:64:a6:c2:
5b:d7:e1:b8:1a:37:07:4a:d5:7b:a4:56:8b:d1:47:1f:cb:f9:
82:5c:16:a0:f4:b4:ad:14:dc:03:a5:67:be:42:26:0d:25:18:
56:97:f0:e8:97:ce:bc:78:80:41:ed:e8:58:aa:5c:51:6f:00:
25:42:b9:1d:c2:58:e5:6e:8d:b0:59:20:ab:cf:26:b5:6a:9f:
ba:70:d7:d5:90:a5:87:83:e0:b2:5f:fe:1d:96:e8:62:c5:9f:
b5:ac:bb:e7:6f:b0:ab:9d:79:bc:be:c9:f8:2b:b7:15:18:ac:
57:fc:85:ce:12:2b:85:64:15:36:75:09:85:3c:be:e3:d7:c8:
c0:ea:4d:e1:54:f8:35:30:a8:fe:61:a6:a2:bf:4b:f2:ba:5b:
99:07:ff:83:d7:dc:28:1f:d6:6c:52:40:05:26:51:49:ea:d7:
a5:f4:4c:00:b8:b1:ab:44:d9:d2:10:5f:4f:df:d9:20:c6:ef:
e6:3d:63:17:2a:56:dc:5b:cf:d0:38:0b:c3:c3:b9:61:98:5f:
01:e0:a6:5b:a0:b9:36:2c:7a:90:f2:08:f0:85:ce:de:3d:49:
ea:df:49:b8:f2:2a:ab:16:e1:3c:76:ee:8f:4f:8c:e4:6b:43:
a5:3f:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:11:30 2025 by rpki-client