Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: Fhiq28bwaWweCOIk3+z5didT1iVE/cXkJ7qFwAP00qE=
Subject key identifier: 61:10:0F:91:27:4B:E9:30:BB:7A:F4:23:33:6C:D0:7D:1A:75:BB:58
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 0197B7EAB2A6D776599C8E1A7798AFF88C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: Z57dJdgwfsK5AKdQzN4VgS6H3YnmlsJwG0L3H5a0Oyo=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b2:a6:d7:76:59:9c:8e:1a:77:98:af:f8:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=61100f91274be930bb7af423336cd07d1a75bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:b8:aa:97:5f:40:26:6c:53:07:39:7b:62:
6e:c0:de:19:9a:0b:bf:41:50:c1:55:b0:fa:02:2a:
39:d2:4f:c4:35:6c:85:2c:79:a8:7c:f8:2c:4f:b4:
78:86:02:1a:ca:c8:c7:f6:f4:59:e5:1b:b2:d0:9f:
50:a9:43:75:2f:49:5d:46:1b:be:66:c7:ed:a4:9d:
1a:dc:d0:8a:7f:36:fd:d4:8a:d0:d6:f6:e1:cb:af:
68:2b:6a:a7:17:73:64:53:cb:d5:d7:24:e6:b9:23:
09:49:fc:53:21:40:58:07:50:8e:99:35:4b:ab:be:
3d:5f:3b:fd:7e:b1:de:f6:fc:93:1f:63:dd:b5:bd:
72:36:39:6d:11:80:b8:9e:48:12:b6:7d:fc:3a:71:
61:50:fc:50:f3:c5:ca:4a:71:b4:41:48:9d:87:54:
86:48:9c:4b:57:36:9b:50:af:7a:e9:f8:c7:3f:0b:
21:40:73:6d:62:44:12:f5:e9:b5:75:e8:c4:2b:02:
87:e7:97:7d:85:43:33:33:0f:0b:c2:31:24:cf:1e:
09:ff:a3:e4:74:34:19:d7:66:f4:e9:da:37:c5:0d:
25:90:19:ff:be:c3:22:dc:62:55:97:2f:07:b0:73:
aa:f6:70:89:06:63:e4:0c:82:ab:e5:48:2f:af:87:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:0F:91:27:4B:E9:30:BB:7A:F4:23:33:6C:D0:7D:1A:75:BB:58
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:44:b0:86:56:99:a1:82:0d:1c:3e:97:dd:71:dc:f3:98:
47:73:d9:1d:96:f5:fd:fa:57:4d:2e:13:09:e8:0e:9e:60:ad:
f2:b0:60:a6:71:8b:b7:0d:9e:9b:ea:14:82:39:2f:cb:6f:e0:
1c:db:00:20:f4:1b:c7:6a:c6:8e:37:af:8a:9b:00:2e:0f:df:
47:15:35:42:12:87:56:69:cf:dd:9a:fa:c5:65:7f:9e:93:e0:
03:1b:a8:f1:4a:d1:97:32:dd:eb:65:8f:91:12:b0:83:f1:33:
30:9b:c8:49:e8:62:80:78:9a:4e:f3:b7:e8:ab:7d:e8:c3:d7:
2f:f3:2a:a0:e9:35:fd:7b:5f:58:b4:9b:e0:b8:43:a7:82:62:
14:25:c3:a2:a3:3e:39:89:6c:ae:80:b8:b5:8a:50:41:3d:d8:
42:b9:0d:44:17:d5:dd:36:dc:dc:d3:37:d4:39:7f:5b:be:e4:
10:9d:7a:af:67:2e:d4:5c:1e:35:fe:b8:c6:87:9e:0c:a4:2e:
2e:93:0f:fe:6f:fc:3f:c5:63:d3:78:fd:a6:45:12:13:54:0c:
db:82:02:24:6f:c8:29:79:fb:31:12:b1:4c:39:73:53:4b:d3:
a3:c5:95:ee:79:e1:03:1f:98:55:0c:7d:cd:c8:03:e8:de:96:
df:4c:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:15 2025 by rpki-client