Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File: Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier: Vk5OrefIhWBa3WtsM/ja2xmgwDeEyjyiCHKeELdBHPU=
Subject key identifier: 16:EE:28:BD:76:ED:D1:23:23:2F:7B:9C:3F:DF:57:C8:46:C7:4D:0F
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019A02C742940AFB93F9A71203FEBBB88B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number: 0627
Signing time: Mon 20 Oct 2025 18:00:04 +0000
Manifest this update: Mon 20 Oct 2025 18:00:04 +0000
Manifest next update: Tue 21 Oct 2025 18:00:04 +0000
Files and hashes: 1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: 2u7dzIE15382tt/VYmFA3/pDGq+QOrASdxfBtf6kNik=)
2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:42:94:0a:fb:93:f9:a7:12:03:fe:bb:b8:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Oct 20 18:00:04 2025 GMT
Not After : Oct 21 18:00:04 2025 GMT
Subject: CN=16ee28bd76edd123232f7b9c3fdf57c846c74d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e6:4a:b6:e6:92:13:01:9a:b6:09:fe:40:bc:
54:69:a5:3a:c2:e7:bf:16:1a:fc:27:36:b5:c0:f0:
5b:ce:08:99:91:b4:91:7b:38:63:97:68:1e:53:34:
4f:81:fa:ac:a6:09:df:2f:b3:6e:82:54:41:2c:59:
28:16:e8:aa:65:fb:29:2c:bd:3b:11:62:40:fe:38:
21:89:5d:65:78:0d:4e:4e:44:59:9b:78:01:81:5a:
59:8f:69:14:46:3a:50:65:9e:cb:3a:ee:57:90:ad:
8c:63:61:15:6c:31:c8:e6:ff:a6:e5:aa:d6:61:7e:
ec:27:75:ae:5b:4c:f1:a9:4a:28:b6:d7:62:3f:88:
61:a4:30:dd:d4:1b:92:d4:bf:4e:4c:c7:d4:0f:62:
a9:55:19:0e:3f:d8:87:df:de:ec:95:db:26:73:2b:
48:4d:ef:c8:88:53:62:da:3b:f9:3e:e8:c8:d2:0b:
d7:ac:20:4e:3f:b7:58:62:a0:dd:ec:be:58:4f:6d:
f4:e9:3b:96:c4:fb:e4:f7:3f:81:c0:16:33:bf:45:
6b:4e:dc:3a:cb:f9:e7:02:8e:80:ad:d9:8c:ce:59:
89:9c:1e:1f:ec:37:e3:8a:6c:2f:cb:56:31:36:29:
ab:3d:a5:13:99:97:b2:da:3b:f8:c1:86:43:11:4f:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:28:BD:76:ED:D1:23:23:2F:7B:9C:3F:DF:57:C8:46:C7:4D:0F
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b0:fe:b6:4b:58:20:a4:bf:d3:11:f5:21:cc:7e:1c:b8:73:
e7:8c:f8:cd:50:db:20:d5:c2:01:f2:e7:12:20:b8:6f:32:c9:
3e:94:68:b4:c4:fe:a7:03:9a:44:50:b1:0b:d3:32:80:d0:b8:
3a:9a:ad:67:15:30:26:2c:d1:d3:9f:d3:b7:88:cc:ee:48:91:
ca:3a:28:5a:1f:83:9b:73:62:37:96:af:06:fa:2c:07:2b:4c:
c4:39:43:2d:5b:c9:26:e9:37:b1:1c:b7:8b:2c:e3:a1:39:f2:
59:bd:92:b8:39:2c:f8:44:28:4d:51:19:36:90:cb:2a:8d:ea:
4a:1c:24:65:c5:99:b1:d9:73:0f:7f:00:2f:63:51:4c:d8:0f:
5e:0f:39:54:42:88:a0:a0:6c:46:cb:e2:c8:89:ce:42:45:35:
cf:0e:32:f0:45:a5:a9:29:40:7d:88:26:71:12:c4:47:93:bc:
2c:3e:2b:ce:00:bd:ba:48:5a:c7:b2:d8:c0:5e:1e:f5:36:d6:
9a:e4:4e:4d:cc:d6:38:3c:c3:58:b2:be:c1:09:ac:1b:b3:80:
98:13:8a:b0:1d:27:b4:bc:c1:2e:ed:1c:40:b2:e4:76:e0:78:
ef:f2:78:68:b2:9e:f2:89:a5:70:7d:20:8f:a3:d5:87:c2:cf:
0c:65:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:02:52 2025 by rpki-client