Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: N0/lye/L7qeGxbNFcsVHCNmOebIvcGAad6FzvVzmN8E=
Subject key identifier: E5:7D:48:F6:18:78:CB:33:1E:E7:26:19:AC:E0:53:1F:D5:70:91:1D
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 01976EF4E6253DD40FB0E22281C3139F4A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 106B
Signing time: Sat 14 Jun 2025 15:00:32 +0000
Manifest this update: Sat 14 Jun 2025 15:00:32 +0000
Manifest next update: Sun 15 Jun 2025 15:00:32 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: vtj7nAbyzbhIWHefO1apFFF9oJMZOJyPXkd8rSWuReo=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e6:25:3d:d4:0f:b0:e2:22:81:c3:13:9f:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Jun 14 15:00:32 2025 GMT
Not After : Jun 15 15:00:32 2025 GMT
Subject: CN=e57d48f61878cb331ee72619ace0531fd570911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:81:e7:c2:c9:90:32:44:63:7b:f5:87:60:
34:3a:5d:14:e1:dc:49:af:d0:49:43:d4:b5:a6:ca:
74:fa:a6:7e:0b:9b:f6:83:cd:6a:d4:b5:5c:c4:a8:
1f:6b:9c:88:18:14:7e:5d:63:13:9d:df:32:23:e2:
c1:91:20:f8:e5:5c:64:35:c7:98:8a:c9:fd:7b:21:
dd:7a:8a:d8:31:c0:e2:71:49:9f:8c:81:59:f4:e9:
45:64:5a:4b:4a:a0:57:4d:4a:35:5a:a5:eb:da:4d:
60:e5:68:38:12:e6:3c:02:82:96:92:45:73:8a:93:
8a:75:29:4e:ad:b3:0b:7e:ba:a9:01:e3:17:fa:40:
5e:b4:3e:27:c9:1e:85:40:d3:4c:e1:68:81:6f:cd:
9f:5d:6d:74:1b:f6:a0:ef:70:0c:de:ae:11:03:d1:
ca:15:28:24:51:3f:32:8c:82:48:b5:ae:c1:19:b0:
1b:51:2f:20:7d:a8:b5:b8:6c:77:1a:e6:b4:30:76:
b0:ca:6a:4d:bc:08:2c:d7:8c:ca:d7:fe:aa:24:e6:
67:03:04:ea:2b:01:97:b5:73:ab:2a:83:fe:d5:90:
80:67:41:45:55:9e:85:2f:05:20:fa:21:28:e5:9a:
88:2f:a9:25:1c:74:b4:7e:8f:d1:71:20:26:22:d3:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:48:F6:18:78:CB:33:1E:E7:26:19:AC:E0:53:1F:D5:70:91:1D
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ae:be:70:ff:78:c8:54:c2:cb:53:2e:63:59:68:94:53:af:
11:a0:91:e6:3a:d9:e9:f4:fb:d4:87:b6:a6:73:b8:30:24:68:
f3:97:49:59:c7:65:9c:02:7c:7c:0e:48:61:55:c6:4c:8c:ab:
6c:ef:82:ff:67:b5:48:33:9a:40:97:19:51:80:13:9c:62:f5:
59:d0:08:78:40:90:44:c0:b6:d4:ae:d8:42:46:56:b1:c6:2e:
be:48:d6:25:b8:32:d1:5d:c8:6f:14:ab:d9:ff:ad:ec:10:da:
ec:41:c4:bb:65:cb:8b:04:51:29:ff:1f:1d:c9:21:0f:1c:8b:
e2:d8:a3:51:f4:8c:d5:b9:ab:64:57:66:93:5d:8b:cc:25:50:
76:aa:19:51:01:f4:6b:57:6f:2a:d5:c6:44:dd:55:fb:be:03:
2c:fc:b6:b3:a2:8e:72:42:1c:fe:7f:cd:54:66:b5:48:82:d1:
43:23:ed:a9:58:9b:ce:13:16:5f:67:48:d7:aa:18:5e:e4:4b:
98:76:67:c6:4d:73:7f:06:eb:34:6d:7c:4a:71:fb:6f:fd:4d:
b2:eb:a3:37:45:43:2c:ef:68:a6:43:07:9e:a1:a3:07:a3:a9:
fa:eb:67:28:81:ee:52:75:01:5b:a0:9e:e6:d6:37:04:36:29:
50:65:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:22 2025 by rpki-client