Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: zw8YnOnI1JB6Qf4QfQG67w+gpFXhJNHkli+nkHQsXAY=
Subject key identifier: 64:68:CE:C1:AD:CF:4A:00:2B:61:06:07:F9:95:D2:82:F0:5F:79:18
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 0198D5BC4AA9D944F8CC4B8191D0D7A4FADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: Am4Lc2OA3dzDhTw/GeVnr6L/zct4Zizm4NzfOwdXaSw=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4a:a9:d9:44:f8:cc:4b:81:91:d0:d7:a4:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=6468cec1adcf4a002b610607f995d282f05f7918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:62:fa:c9:da:c4:d1:77:b5:16:1a:40:42:
aa:a1:29:1b:f7:6b:73:a1:f0:5d:8a:ac:98:28:01:
8a:fd:98:83:d6:91:3f:df:2f:64:86:96:00:da:db:
78:27:3f:be:82:29:d0:13:97:09:a6:6b:eb:1f:03:
5c:ed:75:f6:a1:3f:5f:5a:dd:1f:70:3d:cf:5e:b6:
56:a2:37:79:48:8a:fb:0f:13:f2:ab:26:2c:0d:2a:
bd:3d:cc:27:2f:fe:60:9a:b6:31:2c:b0:51:fb:93:
3d:a0:ba:d2:13:eb:94:82:62:97:24:c1:93:14:46:
b9:c6:f1:1c:df:5a:d5:09:43:bd:2c:cc:19:e6:7a:
69:f9:90:1a:7c:9e:d2:e4:ac:7c:bf:c8:ca:7f:9c:
60:55:00:ef:2b:e9:e1:be:8b:b3:47:c9:74:fc:a9:
f1:be:22:02:9a:30:19:22:5d:af:5f:d2:fb:df:f6:
4c:83:7b:83:70:ec:33:9f:b2:2d:ac:0c:c0:11:bd:
58:be:47:75:52:c6:4d:73:dd:89:4f:4e:68:96:42:
e5:3b:29:81:2e:50:4d:cb:2a:34:44:5a:ad:e9:94:
7c:1e:b5:9d:57:af:13:02:f5:23:19:05:af:44:b0:
db:45:4a:ba:6f:2b:fe:1c:4e:ea:31:4b:d4:87:76:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:CE:C1:AD:CF:4A:00:2B:61:06:07:F9:95:D2:82:F0:5F:79:18
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fa:37:39:42:ef:1f:dd:56:70:a5:d3:98:dd:62:4f:30:ff:
ec:44:b6:53:7f:ba:6c:aa:64:85:cb:1d:92:c7:be:ef:31:99:
c7:e7:30:85:5e:d9:a8:8d:f9:6c:57:af:cf:d6:b9:62:67:79:
25:a5:63:83:9e:d6:04:74:6b:de:de:22:15:c9:c8:6a:34:3c:
69:17:29:08:b2:a4:b8:4c:fe:a0:03:18:71:16:00:07:61:d2:
97:98:27:a8:13:a6:54:02:1d:bd:12:cd:46:aa:fa:11:32:71:
81:54:cb:47:95:6e:2a:ac:af:5e:07:2e:ef:49:d5:3f:d6:eb:
9b:4e:9f:17:ea:5b:91:13:1e:98:4b:a1:15:88:15:b9:8e:8c:
18:90:da:27:25:7b:9f:dd:f4:64:af:a7:75:3c:80:f9:44:81:
87:f2:c1:28:fc:03:4e:51:2f:41:cb:d6:8f:4f:c3:d6:60:87:
2b:55:4a:23:84:1f:b8:53:46:bd:03:3e:ad:51:bf:ac:56:ed:
7b:8a:55:8b:83:ac:b0:75:8e:f1:58:8a:eb:3e:71:46:ad:62:
a8:5d:06:d3:ae:cc:1e:c8:7d:5f:02:71:e2:5d:dc:52:53:d7:
3b:cf:21:2e:ff:ef:5d:86:4b:88:71:30:2e:bb:71:d0:63:6f:
91:40:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:01 2025 by rpki-client