Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: kvUqJcjHkNz/Og/Dee01a5Rid5S+ethWC//IK4J7rmY=
Subject key identifier: A4:42:DC:D4:17:21:A1:1E:C3:AE:79:CB:BF:A9:24:F0:17:2C:79:EC
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 0198D5F1802EA98319C1C6EC8A1B9A029248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: Aabq05GCsZYnaMaKOVuITvPZ4BWb0ccCetq2517Xkm0=)
2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:80:2e:a9:83:19:c1:c6:ec:8a:1b:9a:02:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=a442dcd41721a11ec3ae79cbbfa924f0172c79ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:8e:c8:47:03:97:b8:3d:41:4c:cb:bb:6d:
e9:39:4e:97:39:11:d9:7a:91:37:e1:a2:48:59:46:
d5:16:72:fd:5b:0a:73:2c:cb:12:cd:51:7a:06:e0:
37:6b:b1:b4:de:c6:84:b5:0b:7f:04:89:e5:a5:70:
92:6d:50:8f:03:2a:3e:52:9a:4e:37:22:17:15:26:
be:4f:c9:4e:39:98:0c:0d:a7:4a:4e:1d:e8:e1:a9:
18:a1:72:c4:3e:60:3d:55:56:55:fd:b6:e0:ea:b4:
89:f7:41:2b:a9:a7:73:c1:ed:3f:3d:59:d1:d8:da:
89:b7:2f:52:70:9d:63:62:33:5d:05:e9:b2:1c:46:
f5:4d:f7:51:d4:e8:72:08:ba:6f:08:04:9e:87:56:
a9:e1:a5:00:bc:9b:04:a1:89:44:c2:e9:d1:73:f2:
90:89:5f:f0:65:a8:15:ef:d5:ee:59:f1:af:99:48:
43:7f:53:a6:ef:bf:13:22:4a:65:85:b9:02:4e:a4:
84:33:73:86:fd:11:5e:86:6f:97:36:83:04:f5:2c:
2d:63:04:86:de:48:fd:20:c3:8a:77:43:45:a4:94:
ea:b8:5b:f3:5f:d2:8a:93:73:db:ad:bc:ba:74:aa:
7a:e3:89:90:89:20:e9:eb:b9:65:ed:d7:0d:a8:1b:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:DC:D4:17:21:A1:1E:C3:AE:79:CB:BF:A9:24:F0:17:2C:79:EC
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:a3:57:b0:66:0e:d3:62:3f:b9:7e:f8:53:9f:7b:f4:5b:
32:48:fb:c9:ed:38:9d:55:c6:bc:0d:12:95:6a:b8:13:42:6b:
b2:26:0c:d4:34:96:44:93:ea:24:67:63:8f:32:2b:cc:82:a4:
24:0d:12:61:f1:9c:fe:2d:94:f4:52:14:92:f1:40:bc:e6:58:
1b:56:75:20:a1:f4:aa:75:1b:9a:5a:a5:ef:73:56:42:17:de:
3b:3e:e1:17:ed:05:a9:43:94:8c:6a:67:93:77:b9:88:d7:eb:
01:ef:fc:eb:b2:cc:2f:4e:46:e7:cb:d6:d5:88:76:54:06:ab:
f3:c2:69:16:30:9d:93:f8:e2:1b:86:34:bf:7d:65:5d:b8:63:
94:0c:a2:7e:df:f8:66:8a:99:16:eb:f2:7a:92:fb:a5:85:4d:
d9:67:38:2a:82:98:d9:09:e0:16:36:0e:ee:dc:7f:05:0c:7e:
8f:80:e0:f3:b7:99:c9:18:64:45:7d:e8:0e:04:6b:33:66:74:
75:90:03:36:97:2b:35:27:73:6a:6c:ec:29:c6:fa:44:3a:a9:
71:2a:cc:0a:47:54:29:6c:7f:ee:44:2b:46:ff:dd:72:de:2f:
f8:1e:11:26:b5:6d:92:03:77:ee:b6:c1:fd:a4:14:c2:e3:99:
26:6c:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:54 2025 by rpki-client