Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: xh44N5/fGOYoJJDk/jB0K6fwK/+L90T+ieyhDDfY1gU=
Subject key identifier: 07:DD:BA:C7:3F:73:16:75:33:66:93:EB:4E:A2:A4:14:6F:B8:32:3C
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019897EE33D6C9CA126C70899F552BFE11FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 07:00:26 +0000
Manifest this update: Mon 11 Aug 2025 07:00:26 +0000
Manifest next update: Tue 12 Aug 2025 07:00:26 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: xpkdnc5G9kY9QVhSvEpRZG83Cbdg+0wcAKd23gJp6LA=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:33:d6:c9:ca:12:6c:70:89:9f:55:2b:fe:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Aug 11 07:00:26 2025 GMT
Not After : Aug 12 07:00:26 2025 GMT
Subject: CN=07ddbac73f731675336693eb4ea2a4146fb8323c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:22:31:6d:51:ea:9d:92:4e:ba:08:88:df:
5d:da:9e:0c:35:09:f3:f2:b2:0a:e1:97:4a:15:12:
b0:c6:8b:69:20:84:27:40:9a:b2:8a:15:ae:69:ed:
74:ce:ce:50:07:3d:2e:a4:f2:9e:b6:b6:02:89:2a:
07:53:bd:e4:7b:14:96:10:12:b1:74:7e:39:54:c6:
b0:cb:47:7a:6a:8f:50:f0:38:af:73:cd:db:bf:22:
14:62:2c:d9:c3:c2:4f:db:eb:1d:25:d5:10:3b:06:
66:b6:05:04:93:e0:e7:b8:15:2c:4f:4a:8f:09:fe:
0b:33:89:1f:fd:8d:2b:6a:83:6f:bb:4b:b5:92:7e:
5f:9b:48:d3:e3:3b:33:3a:70:97:f1:2c:15:8e:b1:
df:30:52:db:a4:59:e8:7b:cd:a0:5b:8f:41:32:f5:
8d:c1:f5:07:ff:a6:be:44:7c:64:f6:c8:24:fd:8e:
59:f3:bd:f2:b1:49:69:7c:ad:a9:a2:fc:9b:e2:6a:
7d:be:e4:03:3e:87:5a:60:7c:71:b4:51:ff:fb:a9:
69:a1:04:5a:b7:d6:64:4b:82:41:4f:14:6a:80:ef:
7a:83:65:ef:76:a3:71:ef:c3:72:42:05:f4:cf:e3:
ef:62:dc:c2:ec:19:3c:53:d1:1d:e9:74:42:63:a9:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:BA:C7:3F:73:16:75:33:66:93:EB:4E:A2:A4:14:6F:B8:32:3C
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:ff:22:75:d3:05:87:bf:3b:14:06:e9:0f:4d:de:f1:44:
ba:55:29:cd:6f:5d:6c:6e:b5:a5:c9:ec:de:c8:e8:4b:43:e7:
21:cd:15:1e:17:0a:d4:d5:98:5b:38:fc:6b:87:fb:37:05:3e:
75:17:4b:98:88:6b:01:20:02:17:bf:75:3e:dc:92:e1:a0:5b:
fb:dc:82:5a:2c:72:b9:56:d1:8d:63:f9:9b:f0:c7:16:cc:d9:
c5:65:f1:0e:f0:9e:46:d5:36:5c:90:49:f7:02:72:71:76:45:
28:bc:51:e8:4c:3c:9e:a5:3a:37:44:93:eb:2b:c3:79:28:73:
c3:2f:6d:8e:10:4e:c4:67:12:32:b8:b9:0a:eb:ab:49:98:01:
69:80:c8:51:5e:c4:74:cc:35:6e:2e:5b:25:f2:fd:46:14:22:
e0:8e:53:04:89:f5:c0:77:55:f7:a0:03:11:e6:3c:23:d8:ad:
f5:50:bc:1e:f5:43:1d:98:88:81:58:f1:18:d6:3f:fc:a8:60:
c6:22:c2:09:28:fb:a9:ff:11:62:73:78:ed:a8:5a:6a:76:0b:
77:00:0a:39:69:fe:c0:04:af:06:5f:91:50:82:64:2e:6b:98:
18:fe:a2:97:41:61:38:6b:b2:99:df:2e:b4:94:d6:bc:4a:dc:
de:2d:55:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiX7jPWycoSbHCJn1Ur/hH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjUwODExMDcwMDI2WhcNMjUwODEyMDcwMDI2WjAzMTEwLwYDVQQD
EygwN2RkYmFjNzNmNzMxNjc1MzM2NjkzZWI0ZWEyYTQxNDZmYjgzMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02QiMW1R6p2STroIiN9d2p4MNQnz
8rIK4ZdKFRKwxotpIIQnQJqyihWuae10zs5QBz0upPKetrYCiSoHU73kexSWEBKx
dH45VMawy0d6ao9Q8Divc83bvyIUYizZw8JP2+sdJdUQOwZmtgUEk+DnuBUsT0qP
Cf4LM4kf/Y0raoNvu0u1kn5fm0jT4zszOnCX8SwVjrHfMFLbpFnoe82gW49BMvWN
wfUH/6a+RHxk9sgk/Y5Z873ysUlpfK2povyb4mp9vuQDPodaYHxxtFH/+6lpoQRa
t9ZkS4JBTxRqgO96g2XvdqNx78NyQgX0z+PvYtzC7Bk8U9Ed6XRCY6nMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfdusc/cxZ1M2aT606ipBRvuDI8MB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXb/InXT
BYe/OxQG6Q9N3vFEulUpzW9dbG61pcns3sjoS0PnIc0VHhcK1NWYWzj8a4f7NwU+
dRdLmIhrASACF791PtyS4aBb+9yCWixyuVbRjWP5m/DHFszZxWXxDvCeRtU2XJBJ
9wJycXZFKLxR6Ew8nqU6N0ST6yvDeShzwy9tjhBOxGcSMri5CuurSZgBaYDIUV7E
dMw1bi5bJfL9RhQi4I5TBIn1wHdV96ADEeY8I9it9VC8HvVDHZiIgVjxGNY//Khg
xiLCCSj7qf8RYnN47ahaanYLdwAKOWn+wASvBl+RUIJkLmuYGP6il0FhOGuymd8u
tJTWvErc3i1VrA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:15 2025 by rpki-client