Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: 4ngR5BQ3tFUdqkL/v9hT2SI550JOfAc5sPWD+o+uNVI=
Subject key identifier: C9:7D:DF:15:12:D5:10:92:72:96:A9:F9:2C:70:79:BD:61:6B:AE:99
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019A4E4FAD492FB948361DBCC51875FE7CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: /8Ap4VtGCRDwJUyGPlyzCErgEV32LNpPKxNx2d54dhI=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ad:49:2f:b9:48:36:1d:bc:c5:18:75:fe:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=c97ddf1512d510927296a9f92c7079bd616bae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:3c:c8:13:35:81:c2:bc:83:4a:82:b5:76:
6e:95:07:4e:22:c2:d0:1b:16:79:a5:5a:8c:e9:bf:
a5:f9:32:21:be:e8:d1:ca:2c:c5:50:34:c3:f5:a1:
5d:6c:a5:5e:d0:fc:4d:9f:79:ea:ef:04:ff:b9:1b:
d7:ba:b5:a6:be:83:ed:46:17:4b:13:3d:e1:60:6c:
a3:a2:32:94:aa:95:85:61:85:81:fa:9d:32:b2:9f:
b5:be:0c:16:f8:89:2e:3e:47:98:0a:da:7f:74:09:
e5:72:c8:77:40:e9:0e:15:bb:20:c5:78:65:89:53:
f7:6b:40:76:f9:2b:97:c7:3a:6a:b8:92:69:31:79:
5c:05:4b:32:07:d6:a3:ff:d3:b1:20:4e:38:80:cc:
27:0d:a0:76:84:d0:09:75:ac:38:eb:2d:6f:be:fe:
ae:2c:80:5e:41:17:50:19:34:9e:39:2b:9a:ee:87:
4e:50:15:81:84:e2:22:72:80:22:f9:40:72:a3:bb:
c7:42:64:a4:7d:ee:b0:47:39:b3:9c:51:c6:db:68:
47:0b:ce:88:de:a7:3c:49:ef:16:6f:91:32:14:33:
0c:74:ac:97:ae:ff:d5:54:84:80:1b:c9:6c:fc:73:
4c:f8:e6:4f:4c:ce:87:4c:d9:c8:f7:a0:d6:27:15:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:DF:15:12:D5:10:92:72:96:A9:F9:2C:70:79:BD:61:6B:AE:99
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:21:96:88:18:22:e4:3b:6b:41:c6:e0:f8:2c:53:06:76:
11:a0:0e:de:f5:53:d3:ff:a1:09:2c:cc:a0:23:8d:07:88:2e:
9f:11:ca:0c:ee:98:d8:bc:45:58:bc:95:ce:68:78:c4:f9:84:
77:f2:a2:c3:82:0b:fa:80:69:1b:bf:bf:15:d9:91:8e:2d:bb:
28:cb:43:7b:53:64:f3:66:16:78:de:f5:ec:e1:12:3c:0a:33:
04:20:bc:80:80:7c:1c:7d:bf:2f:8f:62:81:01:b5:01:2c:21:
28:19:96:66:22:ef:d8:9f:2c:1b:fb:d6:86:51:df:ca:b3:18:
f6:e9:7b:97:a6:d1:19:01:72:8c:6f:bb:37:69:a6:7e:96:93:
e4:c0:cf:67:92:2d:b3:f1:d7:7e:a1:37:5b:18:98:38:48:4b:
c2:4b:6c:92:d4:42:18:37:a6:c9:56:de:dd:a3:c1:16:5c:4e:
9c:1e:2f:d3:ee:17:47:bd:c6:0c:ce:07:11:08:c7:b7:c4:16:
b7:31:9a:11:22:81:0f:83:58:91:7f:60:1f:fd:34:83:95:c0:
7c:0c:f5:86:14:9d:75:b7:d8:21:97:af:b3:d4:19:d9:1e:43:
4b:54:0b:be:2c:bc:ab:48:11:08:76:e4:f2:c2:7d:b6:b4:5f:
2d:34:9b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT61JL7lINh28xRh1/ny7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjUxMTA0MTAwMDM1WhcNMjUxMTA1MTAwMDM1WjAzMTEwLwYDVQQD
EyhjOTdkZGYxNTEyZDUxMDkyNzI5NmE5ZjkyYzcwNzliZDYxNmJhZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3A8yBM1gcK8g0qCtXZulQdOIsLQ
GxZ5pVqM6b+l+TIhvujRyizFUDTD9aFdbKVe0PxNn3nq7wT/uRvXurWmvoPtRhdL
Ez3hYGyjojKUqpWFYYWB+p0ysp+1vgwW+IkuPkeYCtp/dAnlcsh3QOkOFbsgxXhl
iVP3a0B2+SuXxzpquJJpMXlcBUsyB9aj/9OxIE44gMwnDaB2hNAJdaw46y1vvv6u
LIBeQRdQGTSeOSua7odOUBWBhOIicoAi+UByo7vHQmSkfe6wRzmznFHG22hHC86I
3qc8Se8Wb5EyFDMMdKyXrv/VVISAG8ls/HNM+OZPTM6HTNnI96DWJxU6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl93xUS1RCScpap+Sxweb1ha66ZMB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK8hlogY
IuQ7a0HG4PgsUwZ2EaAO3vVT0/+hCSzMoCONB4gunxHKDO6Y2LxFWLyVzmh4xPmE
d/Kiw4IL+oBpG7+/FdmRji27KMtDe1Nk82YWeN717OESPAozBCC8gIB8HH2/L49i
gQG1ASwhKBmWZiLv2J8sG/vWhlHfyrMY9ul7l6bRGQFyjG+7N2mmfpaT5MDPZ5It
s/HXfqE3WxiYOEhLwktsktRCGDemyVbe3aPBFlxOnB4v0+4XR73GDM4HEQjHt8QW
tzGaESKBD4NYkX9gH/00g5XAfAz1hhSddbfYIZevs9QZ2R5DS1QLviy8q0gRCHbk
8sJ9trRfLTSbzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:27 2025 by rpki-client