Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: 2O9AsY/8k9WvYyVhvf/GhvD3+eBp72C+C1yZbDpgXDs=
Subject key identifier: 63:A6:8F:83:F0:D9:9A:A4:CF:BB:6D:9C:4E:44:CB:91:C2:74:50:19
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 0198D4731B0C1FEDBFECB8B854D97081E1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 1124
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: 3YbQ1blb+0Ft7ZeylLe2GpUf1OjlfUtz33egVnb3g2c=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1b:0c:1f:ed:bf:ec:b8:b8:54:d9:70:81:e1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=63a68f83f0d99aa4cfbb6d9c4e44cb91c2745019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:57:ac:d9:70:14:51:85:f8:56:77:34:4a:
35:e0:5d:d6:5c:f8:5c:f1:3f:f8:53:ab:e2:07:2b:
a9:f8:6f:15:c8:6e:6b:8f:48:b8:12:ec:8f:9c:f3:
fb:41:b2:50:a7:d5:a6:c7:a4:32:c2:4c:80:e7:fb:
eb:fe:67:47:2a:ea:8f:f9:6b:83:39:a7:51:fa:62:
8a:45:31:20:b8:18:55:6d:cc:16:c3:ac:ba:89:95:
be:c2:98:3c:d0:a9:31:5a:1d:98:37:3c:ed:b1:56:
6a:8c:34:19:df:c0:55:2a:f2:d1:a4:de:ab:c7:97:
f4:53:66:fe:6e:ad:dc:2d:19:09:63:d1:a5:26:c1:
43:3c:ef:76:47:96:c7:02:a9:e1:c3:7a:95:bf:49:
3e:41:c8:d9:ec:6e:16:a9:15:db:3d:12:73:e7:3e:
1a:f3:7f:28:f3:91:41:25:09:91:70:33:44:86:9c:
14:c8:13:b5:06:93:d8:3a:37:30:6d:f2:ad:f8:33:
9e:72:97:c2:e2:4c:0a:16:09:f5:40:40:8a:6f:f1:
cc:a2:36:2f:ff:0f:bf:c7:e5:0b:ef:ef:20:77:d1:
dd:b9:c6:f9:c1:d6:a3:6c:d1:d2:bf:ae:15:2f:62:
09:ff:26:42:be:0e:08:8f:a5:2c:dc:04:a4:2e:c2:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:8F:83:F0:D9:9A:A4:CF:BB:6D:9C:4E:44:CB:91:C2:74:50:19
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:63:a5:a0:84:8e:03:7e:20:ee:4f:cb:64:90:1b:8b:15:
dd:37:a5:da:d0:ad:92:73:c7:5a:97:29:c5:f8:36:42:ba:be:
98:4f:00:7f:b9:79:5c:e2:95:7b:40:28:65:c8:40:29:66:a2:
56:eb:cc:41:89:52:de:6e:39:22:2e:94:a0:75:ae:ae:51:eb:
10:de:41:4a:db:a4:27:f2:80:d2:1b:2b:16:20:b4:a8:18:ff:
95:c2:49:cb:41:0e:8c:a0:35:e2:d2:df:06:10:93:ef:5f:3a:
f6:86:70:80:6b:13:4d:49:48:5e:9c:95:4b:7f:da:e1:9f:8e:
77:89:43:14:df:8f:80:18:81:e3:ba:dd:8f:fd:48:dd:e3:a1:
a8:1a:f7:d1:5c:52:d7:7e:ae:31:7a:ad:e9:d3:70:36:28:f9:
b5:ba:4a:c0:82:45:f0:00:e1:35:53:3c:54:13:e2:9a:c7:5d:
c9:1e:64:3c:bb:77:2a:00:4a:71:6b:2a:4f:c5:f9:02:8b:fc:
a9:df:ad:3a:9d:a5:de:39:81:b7:50:a0:9c:05:09:ee:0c:83:
13:7b:a3:ca:50:9b:51:6b:9c:60:0b:52:18:a0:f3:58:75:e2:
fa:4a:19:5c:20:4f:38:18:a3:76:64:6c:96:3b:a2:2e:56:a3:
5d:1a:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:06 2025 by rpki-client