Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: nfCg2ln1FgPMwbgNef84ldp1xcBlaheib+EAVGbigas=
Subject key identifier: C5:92:99:4D:7F:A0:F9:DD:2D:9E:86:CD:BE:0D:1B:69:EA:DC:EC:AA
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019783C5DA6A41878F417D3A49BAD21FB46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 16:01:11 +0000
Manifest this update: Wed 18 Jun 2025 16:01:11 +0000
Manifest next update: Thu 19 Jun 2025 16:01:11 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: pyezfio4UJERn10biB3WJxTyJCbO+BHF7VFvOVWs7aA=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:da:6a:41:87:8f:41:7d:3a:49:ba:d2:1f:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Jun 18 16:01:11 2025 GMT
Not After : Jun 19 16:01:11 2025 GMT
Subject: CN=c592994d7fa0f9dd2d9e86cdbe0d1b69eadcecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:ec:ad:06:c7:45:de:8c:28:a2:aa:54:ba:
4a:05:8d:82:27:2f:e1:42:f9:3c:72:d3:7a:28:61:
46:75:fa:25:ef:3e:de:64:52:1c:e0:a4:e1:b9:ea:
ed:cc:73:d9:ca:8e:46:48:1d:a4:fb:32:82:56:9b:
91:6f:9a:26:43:37:e7:a9:d8:8e:60:d5:21:6b:e0:
58:88:d1:1e:ef:c7:9a:40:7c:c8:52:80:75:50:bc:
73:69:38:a6:db:4d:d7:5f:91:00:a1:93:75:12:64:
9c:35:8c:68:16:b1:b2:25:43:cc:50:c7:51:86:e3:
da:62:fa:b1:84:2a:79:ed:67:a7:74:0e:78:aa:42:
09:d5:86:31:5e:a9:74:f7:b9:93:96:b8:dd:7b:19:
6c:d6:4f:b4:9a:66:85:f9:35:39:be:7f:55:0a:af:
75:15:a7:06:6c:f2:97:71:ae:98:37:26:66:10:52:
de:cb:0d:f9:f2:36:b4:74:d5:2b:22:e4:0c:5e:9a:
13:67:2f:a8:f9:e3:d0:4d:8d:24:82:07:56:11:24:
2e:b8:16:7c:ac:95:5f:9d:a2:ef:82:eb:bb:b6:80:
15:2a:d6:4d:cc:82:e6:50:38:97:2f:33:58:23:5b:
a5:cd:2f:0e:4f:96:23:00:6f:b4:37:c6:19:ab:ae:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:99:4D:7F:A0:F9:DD:2D:9E:86:CD:BE:0D:1B:69:EA:DC:EC:AA
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c5:ce:5a:61:a5:2a:62:83:b6:88:38:e3:7d:fa:4e:b7:66:
f8:c6:b4:22:92:48:fa:c3:fe:80:0a:d8:48:4d:e5:fa:4f:b6:
cb:64:b3:96:e3:26:0b:2f:ef:f6:b8:18:66:91:a0:ce:01:02:
79:6d:78:77:26:9f:25:36:13:8c:d5:31:7f:30:99:18:41:3f:
84:07:09:da:85:73:74:51:4d:91:44:2d:c9:18:0d:79:bb:3e:
a4:c1:27:71:4f:d4:3d:80:46:09:99:50:f7:6d:77:86:33:e3:
25:d6:80:af:29:54:fc:c9:0f:c6:fc:e1:58:48:35:41:59:cc:
14:11:83:e8:d6:38:9a:ef:2f:d0:6b:f6:25:6f:4c:ac:fe:b6:
8d:eb:af:01:7d:62:9c:e7:8b:3e:8f:06:94:fd:aa:8c:ac:14:
7f:31:d8:a4:8e:b5:64:89:09:87:36:49:60:2c:5e:78:57:1d:
8b:9c:a7:00:92:14:1b:f2:25:9e:51:00:10:44:d2:bd:e4:7a:
17:c8:6a:fb:ec:fa:c9:d0:c8:06:35:23:fb:61:24:b0:aa:30:
7f:90:c8:40:80:49:99:ec:49:dc:54:6b:da:c0:8b:79:6f:02:
48:ee:05:7e:2f:1c:8c:b4:96:6b:99:c5:b1:ac:d8:3b:14:e2:
fc:c5:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:55:14 2025 by rpki-client