Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: jWgpJMOrzkLrQy8uOFJv9gHidmLYPsnyQs6+iIOL/8I=
Subject key identifier: D4:42:27:F7:AE:FC:A3:0A:C7:BC:9F:38:0B:66:DF:2C:C4:D1:59:2F
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 019A4D06E6A97FDDCE27C7C22516C878647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0F01
Signing time: Tue 04 Nov 2025 04:01:29 +0000
Manifest this update: Tue 04 Nov 2025 04:01:29 +0000
Manifest next update: Wed 05 Nov 2025 04:01:29 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: QPUM6yivvWPZeBks90TpmOS3uHC9oQAB/TQ/lDfc6qg=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e6:a9:7f:dd:ce:27:c7:c2:25:16:c8:78:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Nov 4 04:01:29 2025 GMT
Not After : Nov 5 04:01:29 2025 GMT
Subject: CN=d44227f7aefca30ac7bc9f380b66df2cc4d1592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:7a:56:4c:a2:e0:e2:08:ea:c1:41:b9:97:
c1:c2:21:6b:c7:d2:5b:4e:40:94:63:bb:c6:52:56:
18:b9:6c:67:71:59:e2:47:fe:8d:2a:29:e4:e5:9f:
40:6e:ff:ff:cb:73:89:1d:9b:da:55:88:c1:7a:26:
db:c3:97:09:f0:41:27:a8:59:4d:c9:67:99:34:c3:
08:18:c0:40:78:76:e3:1c:dc:64:83:0a:50:9b:b5:
45:61:97:77:f6:d9:af:5c:42:28:d0:23:22:4a:35:
cc:45:b5:ef:d3:8c:9e:5e:55:12:16:d4:1f:e8:24:
43:e8:fe:1d:ac:09:96:8c:cc:8a:1d:b6:0f:17:da:
4e:50:f2:8e:41:3f:36:4e:22:08:0f:22:d3:a4:84:
99:e7:22:1f:8c:d2:cd:5a:b0:31:6e:3b:81:5b:6c:
aa:ae:dc:8e:4e:25:d8:8c:d9:3f:98:f7:3f:f1:fb:
29:e5:60:0d:e4:01:3a:cd:fb:8d:7f:2a:b0:99:48:
0d:41:7a:e2:56:57:f6:f7:79:19:ba:8b:72:c7:fd:
71:c7:5f:e7:e4:64:ac:3d:0e:fa:13:57:b6:bf:d3:
94:1e:a7:b9:48:a6:59:45:e3:03:2f:97:6d:c6:4e:
5a:17:55:45:c3:97:a3:34:15:1e:73:3f:f1:f7:19:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:27:F7:AE:FC:A3:0A:C7:BC:9F:38:0B:66:DF:2C:C4:D1:59:2F
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:f5:ee:69:12:94:f4:d2:24:5d:31:be:c5:49:a2:51:f1:
2c:a8:4f:96:73:cb:c4:bc:9b:a9:c1:ff:23:2e:00:f6:c6:74:
18:68:de:bd:17:00:aa:81:78:eb:a9:85:ae:dd:5f:f1:46:16:
4d:a3:5d:b6:9e:a0:b3:89:89:0d:55:62:32:77:9f:78:db:bb:
a7:03:6d:2e:50:2d:fc:c9:8b:ee:bc:12:68:f0:29:c9:9a:13:
14:63:0e:55:af:8f:ea:ad:d5:7d:1d:1a:a3:28:de:84:a7:53:
8e:37:28:a3:17:fb:88:8e:b0:fa:b3:42:c3:62:80:73:68:30:
16:78:96:4a:08:8d:c1:e3:a1:7a:d7:6b:f3:4c:42:be:a5:9b:
be:7f:29:18:41:e1:24:f0:37:ce:89:02:3c:bf:67:5a:0d:5d:
f1:4d:31:9c:f3:a5:17:19:36:f3:1d:cf:f2:47:3b:36:5e:d4:
9c:16:aa:28:29:1e:21:ca:d9:da:63:0a:bc:da:a1:2a:0c:dd:
30:d2:c2:90:eb:4a:13:4f:f9:1e:f4:b1:1c:8a:1d:c7:61:75:
ad:20:83:35:6a:4a:d4:25:09:03:f3:fe:b6:a9:fb:8f:d5:73:
dd:50:8a:a7:07:4c:eb:50:69:d8:8f:59:dd:06:b2:5d:c0:e0:
2b:e0:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:48 2025 by rpki-client