Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: 8M7nISwtO674zq+ylKzf/S/hujvWDjP/N9D56r8HOyA=
Subject key identifier: A3:94:95:B8:86:14:44:B8:C5:62:49:E3:BE:36:16:DB:15:CE:E8:F5
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 0199FD346C872214CF532B52956D59A64948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: g7+LsBNj85SmXqaOn+xpGTX3Mma9jhk+IM4qva4UgNY=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6c:87:22:14:cf:53:2b:52:95:6d:59:a6:49:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=a39495b8861444b8c56249e3be3616db15cee8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:b3:55:15:b3:e6:c7:f5:94:ff:14:d5:9e:
f2:aa:b8:b5:97:4b:47:76:1e:eb:08:c3:85:40:02:
31:bf:dd:6e:56:2d:74:c7:00:c7:97:fc:75:64:43:
57:09:b2:f9:e7:31:ff:53:9f:d1:97:c5:8b:93:ac:
06:79:3a:de:86:96:8b:ff:63:6e:de:d8:f8:d9:d8:
e6:07:21:71:54:71:29:16:d3:e7:1b:6c:6f:03:ad:
8b:1c:52:82:dc:81:4d:d8:86:fc:42:7b:8a:81:da:
15:86:37:94:b6:9b:b2:7b:7e:49:67:9a:fc:da:80:
52:54:c4:a0:1a:84:92:84:4a:8f:21:96:17:1c:7c:
14:06:95:e7:2d:23:30:87:d8:6d:dd:20:c0:7e:1d:
36:e8:ee:bb:84:ce:37:21:64:92:32:43:cb:c6:c7:
b2:96:98:c4:16:b8:17:3a:54:2b:d6:b4:96:c5:e3:
78:79:f2:1d:ae:ed:23:e1:07:bf:01:88:cc:d6:2f:
bb:80:60:74:1b:07:79:c9:77:99:72:02:9d:b8:19:
09:03:ef:ed:fa:58:14:ad:9d:56:e3:39:87:1b:dc:
01:18:f4:a0:fc:22:79:71:33:56:e0:61:56:8d:1e:
cb:6a:88:a3:c8:69:a9:b3:6d:9b:5f:c3:82:5d:a4:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:95:B8:86:14:44:B8:C5:62:49:E3:BE:36:16:DB:15:CE:E8:F5
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:b4:2b:3d:e0:c3:25:97:86:91:01:63:5d:ce:d4:70:b8:
c1:e9:83:7a:96:22:e8:ab:ce:ef:53:50:1f:63:42:de:e6:50:
81:1d:00:53:39:de:95:4c:12:f2:c2:21:3f:32:c4:cb:02:cb:
a4:55:37:5a:6b:70:48:22:77:75:2f:a2:60:de:56:6b:da:6a:
ae:c7:c7:28:40:8a:a5:e0:ac:bb:ec:73:2a:87:9c:b4:04:39:
dd:5b:a7:86:3c:0c:f2:1f:26:e7:0b:8e:42:fb:f5:3c:d0:38:
bc:77:94:43:3f:97:d6:c7:ec:0f:24:cd:df:4c:2f:ef:83:ff:
a2:a4:0f:ce:22:bf:9f:0e:aa:8e:12:e4:f3:20:d9:03:d3:6d:
3e:22:bc:af:b2:69:86:b4:d6:a1:dd:bd:68:d6:22:5b:74:90:
7c:46:b5:9a:56:8e:e7:5a:59:ff:5c:11:24:e8:89:2a:8e:c1:
9e:b3:b4:db:73:6f:30:82:6d:b9:92:a9:b9:c4:97:83:dc:6e:
3f:32:50:6e:e8:7e:aa:3b:9d:8f:ea:94:80:a4:56:a3:4d:76:
2e:b2:6e:46:b9:bb:42:5e:9d:49:2c:f6:ce:dc:67:70:c3:09:
bb:f8:5b:1d:56:08:37:19:fd:74:57:67:58:89:2e:8e:24:60:
62:3a:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:02 2025 by rpki-client