Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: sGW4smmUUnajSdMKfJfE/gvE38KlmvuuiqQ25cskekw=
Subject key identifier: 98:82:59:D4:BC:AF:49:8C:F3:D6:90:84:8E:6B:7A:E7:69:3D:AC:D9
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 0199FC8F7E415319B26253A4C4324725BFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 1660
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: 2USwsNbgtJqiv2ZHOiw1FwmbGK9xTE9/z+glEhVBaSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:41:53:19:b2:62:53:a4:c4:32:47:25:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=988259d4bcaf498cf3d690848e6b7ae7693dacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:fe:25:60:cf:3f:60:ad:36:07:64:c2:de:
b3:0c:88:04:13:38:dd:ca:7a:84:ad:f9:4e:84:56:
f4:da:32:87:0d:53:47:c1:81:2d:cf:7e:63:e2:6e:
f7:15:39:b4:c2:66:0c:1e:8e:fd:0f:75:eb:a5:3a:
49:a6:6d:1e:38:9b:87:af:9c:bb:05:7f:e8:1d:1e:
af:f3:31:52:4d:8b:b2:82:d7:4d:4d:a1:b5:14:13:
31:9b:3d:77:32:83:fe:d2:74:8c:0d:ee:0c:f6:9a:
d6:5f:2b:75:68:f4:84:26:85:61:f0:21:04:6a:65:
f9:96:d4:c0:cf:00:df:90:de:48:07:8f:d2:39:db:
7c:99:11:0b:94:9b:81:4a:f0:c2:7d:f1:67:c2:3a:
24:45:b5:87:a4:d0:da:f9:fe:0d:f7:55:e6:bd:05:
a0:d1:49:c0:d2:10:28:44:9f:9e:35:76:5d:d6:33:
40:20:6c:83:93:4a:2e:88:2c:96:b6:50:47:40:3f:
32:50:af:1b:dd:1d:df:13:24:fb:33:79:03:62:46:
4a:5b:f1:d2:26:04:e9:42:d6:2d:24:c1:2f:bb:61:
ae:2d:cb:fd:0b:f3:da:aa:01:54:ec:80:3b:61:09:
0a:92:e2:2b:6b:ef:4c:92:a9:3e:a3:f2:5f:d0:3a:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:59:D4:BC:AF:49:8C:F3:D6:90:84:8E:6B:7A:E7:69:3D:AC:D9
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:36:9b:8b:6b:35:7b:44:f4:15:47:89:35:58:7b:6d:d0:cd:
76:e9:4f:37:e4:db:65:91:47:03:ab:2f:69:3a:b5:44:04:3d:
88:c2:a8:02:40:ef:63:92:02:92:ea:70:0a:61:68:f4:21:3a:
2d:31:cc:43:c5:0a:55:31:2d:d6:64:4e:a5:6e:95:bd:c1:7e:
4a:5e:95:d1:f5:80:35:dc:a1:d2:67:4a:98:6a:30:05:0a:f7:
1d:a5:0f:11:32:51:15:75:74:6d:ad:0d:e9:51:af:c7:73:0b:
12:fb:5d:80:0c:39:ab:88:c8:14:fc:8a:eb:5b:c3:c0:0b:03:
47:a4:a9:8a:d3:6d:08:e5:5d:06:81:e6:6d:40:81:fa:cd:f6:
31:10:f6:48:07:73:b7:25:ff:6a:9a:e8:2b:d0:93:07:1f:ce:
7b:b8:83:ee:eb:99:11:c2:8c:fc:3f:1e:bc:f3:df:f0:4b:8d:
b1:d7:47:8b:15:72:3b:f7:ab:e0:5d:3c:1d:94:29:85:b0:14:
9a:9f:d6:9d:8e:e1:5c:40:71:d3:d4:28:1b:03:48:a9:8e:9c:
26:f4:b3:d1:f5:f3:a9:b9:f1:e2:e7:55:af:e0:8d:8d:d7:8d:
b0:d1:f0:8c:e1:c9:96:f1:62:84:bd:00:6a:0b:97:9b:c2:61:
66:80:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:55 2025 by rpki-client