Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File: Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier: tUrl5ai8A7M8DjBHtkxnzJeoocZj9Ry1OqbdMQ3dbHI=
Subject key identifier: 17:8A:6B:97:43:E4:D2:1E:73:E5:CF:6D:01:AE:EC:35:DF:4E:44:F1
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019A04B5F441CFBA47F255B470816F62A203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number: 0628
Signing time: Tue 21 Oct 2025 03:00:24 +0000
Manifest this update: Tue 21 Oct 2025 03:00:24 +0000
Manifest next update: Wed 22 Oct 2025 03:00:24 +0000
Files and hashes: 1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: wq0ztWDhZ3nrrkkmq3zOzWBcJE+b7gFaaCRtbD8SiN0=)
2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b5:f4:41:cf:ba:47:f2:55:b4:70:81:6f:62:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Oct 21 03:00:24 2025 GMT
Not After : Oct 22 03:00:24 2025 GMT
Subject: CN=178a6b9743e4d21e73e5cf6d01aeec35df4e44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:f8:f7:3f:94:cc:74:bb:6b:74:c0:c0:da:
51:ff:1b:29:63:70:ed:af:c7:30:7e:c0:04:56:8b:
4f:fa:24:db:cf:6b:62:03:e2:ce:a2:54:f7:ed:af:
a4:9c:a0:78:d1:d0:56:43:63:cd:0e:09:ae:ad:d1:
7f:f8:dc:54:79:fc:12:9b:48:db:0b:0c:b6:14:0d:
b4:28:8f:2a:cd:8f:02:4d:27:43:ec:f0:6f:c6:9b:
36:b8:18:23:5b:0a:98:f4:77:f3:7a:e4:9e:be:50:
56:8a:1a:80:2d:18:17:47:10:d6:ac:a6:bc:f0:52:
80:95:b8:80:7f:f9:f1:c7:11:99:73:a5:98:aa:d1:
b0:4c:06:cf:3f:4d:fa:a5:d1:62:f9:51:c9:c0:44:
d9:e0:1e:4a:f5:76:d9:e9:d2:70:d3:6e:86:e1:06:
7f:11:2c:21:0c:7e:51:b5:65:c9:4b:49:d8:73:a1:
02:d0:07:69:bf:4e:50:84:81:1e:8f:35:18:1c:d1:
d7:a5:2a:5b:74:ae:fd:e1:be:06:de:27:90:89:5b:
d7:2a:11:87:89:b9:45:09:7e:41:df:6c:27:3e:95:
a9:b9:ea:23:25:09:77:72:7a:f3:c7:85:fc:fe:93:
6c:0f:b6:3b:0e:a1:3c:7d:9b:ab:9b:83:57:ac:88:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:6B:97:43:E4:D2:1E:73:E5:CF:6D:01:AE:EC:35:DF:4E:44:F1
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:63:5f:21:8f:74:b1:df:ab:5d:9d:60:ac:02:c8:29:00:
45:93:21:01:14:9e:0e:a1:52:98:f2:e2:c3:a4:2d:38:3b:5c:
2e:8f:fb:c4:45:55:1b:19:38:23:83:05:1f:9c:36:ce:e2:e5:
d5:40:69:05:49:d3:a8:a8:5e:3f:dd:5d:2f:1e:00:ba:fa:b2:
ad:6b:f4:3c:9b:eb:41:9d:63:98:31:e2:aa:54:36:f2:b4:21:
54:e1:14:b3:31:1e:d8:92:3d:ce:6a:b3:8f:7f:58:76:07:19:
95:68:58:a0:cb:62:64:4f:b1:61:89:c7:ec:9e:1c:f8:0e:88:
cc:e3:7a:ee:fe:4c:f3:fb:28:61:a9:50:b0:13:50:15:6c:85:
bf:24:f9:8c:a9:d7:c7:61:eb:b2:71:32:71:2b:91:f0:db:85:
cb:5b:08:6f:0e:cd:5b:9c:39:f8:27:40:eb:ea:7c:74:b6:2d:
b3:05:3d:8c:47:16:dc:e7:0f:4b:f7:33:50:f5:40:2b:7a:74:
15:cb:25:dc:22:39:d5:d0:ce:51:f0:d5:5b:c3:02:a6:d3:df:
77:dd:de:b7:66:8d:4e:b4:b7:78:23:d1:cc:61:99:e4:e1:23:
88:fa:88:21:11:6f:40:1b:f4:f4:f2:52:14:c7:cc:93:1d:4c:
70:e7:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:28:01 2025 by rpki-client