Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: O4+0xUpPb8VbaSA0oOK5fy1cqYArmOGGhCIXbXbmnjE=
Subject key identifier: 6C:C9:5B:FA:02:28:10:71:FD:70:44:88:72:22:45:34:AD:3D:BF:53
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 019873E37729317F41DDBD00EB2F70F1A403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 10F2
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: hAnWKjF/L0lSYFalVTS+ikfSaEZ9fWw+jYsX1YdOQow=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:77:29:31:7f:41:dd:bd:00:eb:2f:70:f1:a4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=6cc95bfa02281071fd70448872224534ad3dbf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:93:2b:af:77:0c:4a:27:f5:c6:8b:b5:b6:
38:6d:3e:f3:0c:f1:76:96:40:28:97:a2:18:e7:22:
09:86:bd:e8:73:e0:4e:08:1f:e4:6d:db:f3:e9:f5:
65:7e:9e:17:01:6f:77:a9:6e:d9:28:d5:2c:a2:ba:
fc:52:69:71:82:2a:b2:36:fb:83:f1:4a:f9:6c:7b:
b6:e9:0b:b0:2f:7d:c9:1f:17:7d:7a:99:7c:1a:af:
44:bc:80:b2:27:2e:da:96:14:b4:75:78:f6:4d:03:
e5:9f:30:a5:ee:ad:0b:c7:6a:90:44:aa:a4:2f:1a:
1e:9f:08:1f:bf:95:16:09:d4:81:f1:c6:46:7b:65:
69:b0:b9:a8:82:78:f8:3b:4f:43:d3:ec:3c:75:f5:
ee:9b:0c:d4:f6:e1:ab:e8:d9:20:18:64:00:0f:3b:
f5:d4:a9:06:ea:4e:ba:a9:41:91:34:64:d4:d9:d6:
b9:c1:5f:2c:e5:6c:bf:b1:c0:98:ea:42:18:f9:06:
6c:c0:06:12:e6:19:80:be:08:f8:8c:ac:93:b3:87:
8a:22:9d:3c:4d:44:25:58:60:6d:39:82:03:3c:fe:
a0:4b:1b:f0:ef:64:41:7b:2f:2e:13:ba:4b:f4:7f:
5d:89:5b:40:11:41:2b:fe:8c:d7:a7:28:1c:ea:f5:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:5B:FA:02:28:10:71:FD:70:44:88:72:22:45:34:AD:3D:BF:53
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:6d:0d:9e:a3:59:6b:00:97:18:93:72:15:85:db:3b:35:
c9:c7:4a:df:3c:8c:05:43:37:52:90:31:c3:f7:de:4b:38:7e:
ac:81:4f:d6:17:37:fc:1c:bc:20:a2:79:fa:4b:ce:78:de:d6:
69:46:b3:b4:4d:a2:b0:fa:d7:4b:e6:9c:93:2b:90:02:a1:1f:
4b:a3:df:18:6b:f8:73:26:49:1a:c1:57:1c:f9:37:db:97:c4:
66:12:11:fc:c0:8c:f2:fa:74:3c:f8:21:00:d9:06:70:a6:1c:
94:62:d3:a6:e6:d6:38:dd:94:a4:f5:ee:6e:3a:68:5e:57:d8:
ac:1d:c5:a1:68:54:ff:d7:48:70:cd:2f:72:cd:76:a6:f7:ef:
b1:0b:24:1f:23:09:97:f8:20:c0:99:f4:2b:fb:a6:bf:04:98:
5f:19:b3:23:f0:e8:8a:de:4a:d3:cf:71:e1:75:63:d1:25:48:
4b:53:9a:f2:f2:3c:e8:df:d8:82:79:7b:40:58:92:f0:6c:85:
ff:5e:80:eb:69:ae:e7:03:e0:d1:db:ad:d3:20:66:d6:f2:56:
51:0b:20:1d:91:ff:3d:18:b4:b4:42:4c:e2:fe:04:63:5d:b4:
14:d6:f8:62:af:e5:dd:96:7e:5f:87:1f:87:60:15:a2:90:2f:
18:2e:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:13 2025 by rpki-client