Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier: qUU9t6r19pQVzN5fvCONz/ZJzDGjNySf9RlwUkInUeA=
Subject key identifier: D2:40:75:C6:BF:97:04:B2:E4:A9:B6:C0:F6:A9:1C:D4:0A:AB:40:13
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 0199FB7CEF8479983C5B64BDB65560F450D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: 7o164VkenIAkIkVskMggDUrZew9KY64XNV97Me7RLP0=)
2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ef:84:79:98:3c:5b:64:bd:b6:55:60:f4:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=d24075c6bf9704b2e4a9b6c0f6a91cd40aab4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:6e:20:3b:a3:d6:5b:47:2b:2f:ce:96:77:
83:02:99:9f:3e:2f:62:da:dc:40:97:f7:19:c4:c1:
2a:b7:ae:7b:c2:0d:70:34:64:72:43:bf:c1:39:73:
22:96:bb:a5:fa:85:5b:0b:19:9e:8e:f5:90:66:59:
70:fd:4b:d8:d2:6f:3c:9f:4d:49:fe:2e:28:05:a7:
9f:ec:01:63:cd:23:e0:e3:a2:d0:b3:3d:f6:3b:52:
10:2f:65:1e:f9:c2:10:26:6a:27:35:b2:06:6d:a6:
28:d5:87:82:cc:1f:0c:9e:35:0f:ee:ea:ed:b9:a1:
a1:56:1d:a5:b2:d6:70:9c:10:e4:28:81:9d:3e:b5:
9c:84:28:cf:30:d9:50:e8:cb:a9:0a:37:3f:57:a4:
a5:e4:7e:59:f0:c7:01:65:71:d6:93:83:1f:26:00:
e5:1b:6e:f2:be:23:e3:eb:03:f1:bb:97:1e:10:29:
12:c9:b7:d1:4a:cb:14:e3:0e:84:ad:50:61:cb:98:
f4:68:ac:ea:d3:f7:80:46:b6:24:06:d5:2f:80:19:
97:28:18:dc:1c:86:a9:85:67:a9:c6:4e:d1:67:55:
d7:fb:5a:85:72:82:35:3d:7a:21:70:fc:b0:22:3e:
47:a3:ad:db:66:8d:c2:1c:b3:88:f8:b0:a0:fb:41:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:75:C6:BF:97:04:B2:E4:A9:B6:C0:F6:A9:1C:D4:0A:AB:40:13
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:19:c1:9d:4d:f6:46:b7:2d:b6:91:d1:b9:7f:56:29:c3:
e4:4b:25:f6:34:45:4b:ef:64:2a:9a:b3:9b:48:8b:5a:c1:e4:
31:2b:49:68:ab:bd:11:04:13:99:0b:96:b7:34:6f:ab:b7:6c:
a6:f9:3e:8e:08:d7:b9:9d:f9:34:a0:92:ce:91:ff:42:d9:40:
9c:90:f5:9d:84:11:05:9f:19:b9:d0:c2:16:69:bf:b5:1c:c6:
c8:d6:32:ea:03:ea:48:a7:34:ed:5d:05:57:bf:d1:f8:cd:aa:
6a:ec:b1:61:13:e3:6d:f9:65:a0:6a:29:f3:4b:21:c2:17:20:
ed:7b:0f:61:91:39:67:c7:52:b1:83:7e:3f:c3:d9:45:65:07:
3e:8a:6b:c3:66:c6:7b:b1:b4:57:00:fa:a4:45:2a:69:b3:a2:
0a:80:59:fb:be:47:bf:df:b4:ef:cb:ed:af:73:84:44:da:e7:
21:a5:8f:5e:26:73:4b:f1:7f:52:f2:5a:f6:d3:57:f7:66:ec:
ef:6b:0b:43:0f:7f:37:d8:cd:e0:8f:cf:da:cd:33:29:a1:6a:
04:dc:0d:9b:44:10:5d:54:ca:7c:65:8a:f7:a7:23:e8:73:2c:
f5:dd:58:24:6a:7b:1e:e1:c0:4a:06:30:31:4c:fb:c0:8b:70:
35:c8:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:42 2025 by rpki-client