Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: pKy4XgVVARSjWXru8/4/UTsRcs/zXzyXakz3ZlUsshM=
Subject key identifier: 73:C3:AD:18:86:74:72:53:B5:AF:DC:E0:7F:73:55:D3:D8:D2:32:09
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 0199FB7CC967993A21D832F12C834E009A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0E45
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: fOb+yDjpQvKXfzJTiMl4WH/k5yd2TsWQ7varx0wXGFA=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c9:67:99:3a:21:d8:32:f1:2c:83:4e:00:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=73c3ad1886747253b5afdce07f7355d3d8d23209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:25:cd:c9:e0:4e:85:38:40:1c:2a:51:95:
43:06:b6:0e:0f:94:41:cc:03:9c:de:88:e9:2b:69:
32:bc:7a:5c:5a:5f:1b:f8:44:47:44:7f:84:c2:44:
b7:38:e7:73:cf:a3:1a:18:e7:02:5e:95:c9:f5:8d:
34:aa:05:91:52:af:0b:0c:4e:22:e1:e9:ef:ee:6f:
88:7a:72:70:1a:5c:92:0f:66:68:90:9c:25:81:26:
e7:79:af:60:d8:90:90:88:48:64:15:12:45:96:bb:
84:bf:51:da:6d:75:38:f1:85:96:c5:e2:ae:17:cc:
9c:c0:c6:d5:13:6a:d4:10:3e:56:f6:b3:6f:77:76:
c8:45:06:64:22:dc:0c:df:54:38:ca:1e:c0:42:ec:
89:31:23:06:2d:32:1f:e1:89:87:99:76:bc:d8:6c:
3e:71:3a:12:af:41:41:e5:c4:80:54:43:a9:c1:fb:
78:a7:ea:6f:d1:7c:df:ed:ad:26:9b:10:04:e2:88:
e7:97:a6:6c:51:0d:e2:99:c5:ad:a7:42:12:46:0a:
b8:b8:ea:6d:04:13:45:2f:66:88:cb:85:78:c7:4a:
32:e3:29:c5:61:cc:a7:2f:08:09:5f:be:2c:ac:e7:
2f:00:b2:71:6b:31:07:06:81:26:0c:89:e3:2e:1e:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C3:AD:18:86:74:72:53:B5:AF:DC:E0:7F:73:55:D3:D8:D2:32:09
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:b2:3f:f8:ff:f3:3a:f2:50:29:93:7c:fb:45:54:1b:1c:
fa:d3:62:b2:11:2b:6e:3a:3b:23:0a:94:55:db:d5:38:a1:ac:
75:78:b2:d6:ea:be:71:1f:3e:94:5e:04:91:31:4f:9a:b4:73:
22:b2:5d:b2:d1:96:17:9b:c4:81:48:89:0d:de:f1:b0:19:66:
69:66:2a:69:eb:8d:89:4f:f7:b4:80:00:89:cb:f1:76:fb:c9:
d4:88:9e:6b:a3:8b:1e:bc:8e:a1:a5:3c:56:37:20:f4:30:9f:
9b:c1:86:3c:e3:78:a7:6e:37:4a:a2:a2:c5:f7:cf:1e:e9:c8:
cd:f6:c4:d0:18:2a:4a:85:eb:e1:a6:d8:17:d9:f2:13:15:eb:
8c:db:dd:15:ad:e0:7f:89:64:54:0f:55:68:4e:72:73:8e:7b:
ca:af:e4:de:4d:aa:12:07:d6:5c:20:50:ff:47:b1:1f:0a:3c:
3b:79:f0:45:04:7c:89:51:7c:dc:3f:0a:7c:58:80:b3:c8:41:
3e:13:cb:87:d7:43:0b:77:ac:98:0b:8a:6d:f3:c4:7c:91:d9:
d5:00:cf:63:f8:d0:89:6c:f1:db:3b:06:7f:74:33:cd:14:cb:
0c:6b:06:8d:1f:b3:16:ac:dc:a6:93:17:16:48:09:b4:47:63:
48:15:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:48 2025 by rpki-client