Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: IJwbiNckloDDayfVQ7oMEn59gwfo9xwldqHMuWm0i3A=
Subject key identifier: 81:CE:B0:4D:BE:23:87:6D:09:E9:6D:91:11:FF:3E:91:ED:67:E1:DC
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 019A4EF4502DA459CAE03A22DC30478F4B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 11E8
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: dtoCUR+BufqU6LYg5klLT90L+mrnviA+6XY5UvYuNto=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:50:2d:a4:59:ca:e0:3a:22:dc:30:47:8f:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=81ceb04dbe23876d09e96d9111ff3e91ed67e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:6d:7e:cb:a0:a8:4d:cb:d8:9b:c1:ac:9a:
30:a8:cf:5a:71:37:8d:4a:24:25:4f:cc:09:55:84:
46:d6:fa:e2:1d:13:ec:ab:d9:6c:22:d8:c7:8b:54:
cb:df:25:7e:19:8e:71:45:0f:38:f0:e9:f9:0a:54:
d0:5f:fc:87:62:0c:c2:8e:84:70:9a:35:e5:1e:06:
bd:83:f4:b4:c4:5a:75:74:1c:fe:44:b2:fd:69:f3:
87:49:29:3f:da:39:fd:7f:6f:6a:42:83:d6:c5:f4:
a0:05:13:ff:50:e8:95:f7:a6:78:80:b1:bd:65:04:
9d:38:87:a0:7d:4d:7a:9b:39:a2:72:34:0e:b5:c3:
ef:ba:d4:8e:31:cc:bb:ca:7b:17:6a:e7:ce:48:44:
81:bf:09:86:44:c2:0b:44:8a:f4:87:5a:77:0f:99:
fc:60:e2:87:be:79:95:ed:1c:54:ab:2b:ec:a1:11:
4b:67:55:76:cf:b0:88:fe:7b:a8:f6:09:eb:0f:28:
7d:63:ef:41:cb:33:a5:c2:6a:98:06:13:2b:e8:8e:
37:ee:5a:8e:6a:c0:5b:fa:ff:04:89:f8:c5:da:c7:
1b:06:06:11:da:cb:fe:50:58:4f:9c:90:08:1d:c0:
81:da:c1:7c:9b:96:84:df:88:70:0e:3a:bb:d4:50:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:B0:4D:BE:23:87:6D:09:E9:6D:91:11:FF:3E:91:ED:67:E1:DC
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:58:fc:53:f0:63:0f:12:57:72:34:a9:e3:03:1d:7e:55:
25:5d:44:f2:16:af:81:59:e7:28:f9:8f:2b:30:8e:f8:ef:d6:
2e:36:10:69:af:0b:e0:7f:9a:99:e5:fd:bc:34:c6:bb:fb:44:
79:1e:fd:9a:78:08:6c:0e:1e:0b:2a:25:8c:0c:01:4c:9c:f8:
04:03:93:27:a3:3f:fa:e6:14:d7:e4:1d:d9:a1:9c:cc:4c:a6:
38:d5:46:29:7a:90:0a:f9:51:38:95:22:0a:24:ed:2a:92:39:
f5:65:f6:4c:5e:04:bf:5e:a1:b1:b8:c7:cb:d2:43:cc:52:ca:
1f:4b:a8:d3:2b:f4:6e:75:3e:a3:aa:19:49:ea:ba:16:d1:31:
4f:2f:d3:1a:e7:65:a4:05:93:08:18:39:d3:ea:15:b5:42:74:
e5:0a:50:08:26:5a:2c:68:85:4f:49:e3:41:59:4b:22:57:bc:
34:95:1b:7f:f3:40:93:c8:35:84:d4:30:73:24:08:11:8c:43:
09:c7:95:9b:b4:b7:d8:93:1c:d9:ae:b3:a8:32:2b:0c:13:ad:
dc:2f:34:70:b5:59:8e:85:3e:3d:4d:c6:e9:9b:7c:37:36:8a:
25:ff:6f:ec:67:6e:7a:fc:39:70:eb:6a:a1:22:2e:fa:3f:47:
94:b8:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:15 2025 by rpki-client