Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: vP0zGYlJIHi+8dNCqi7ZfZJiI7WGhLTCGXjaSOOKuJQ=
Subject key identifier: 90:67:9C:F2:60:89:47:4E:24:6C:C1:AF:F1:A0:DD:ED:A3:92:15:E4
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 0199FBEB1D7B9A6518598028A3B6F282C9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 11BD
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: gvGWkqhAMXgzcuGNmqBJJdGu9/t1qnhppBkDfGr2iyM=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1d:7b:9a:65:18:59:80:28:a3:b6:f2:82:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=90679cf26089474e246cc1aff1a0ddeda39215e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:e5:85:39:74:15:e1:6e:b2:72:63:54:7e:
df:80:47:19:be:83:35:0c:da:ce:9a:50:e8:cb:c6:
4f:3f:84:92:78:a6:a6:a8:d6:61:47:8d:02:34:01:
72:5d:4c:9d:04:f7:b6:91:df:14:32:c3:dd:a2:1a:
80:aa:ad:1c:96:49:8e:ee:0b:be:01:64:6d:b8:d6:
24:3f:4d:6e:e6:2c:39:29:04:98:cf:e8:e5:fb:c8:
43:6f:1e:a2:c9:05:46:b9:44:fc:39:95:e9:22:0a:
2d:2b:dd:ea:85:c6:da:0a:ff:36:05:7e:7f:5b:48:
c3:7f:04:e2:90:9b:14:42:32:eb:08:ff:e1:fb:65:
81:a9:c7:f0:d1:85:85:05:db:d1:8d:b3:1b:4a:7d:
a5:f7:97:77:b6:5e:0f:94:c1:0f:36:de:6f:4f:ac:
15:96:cd:a4:16:a0:52:24:91:9c:ad:a2:08:d9:83:
f5:a7:35:cb:60:ef:5e:95:45:65:ee:6d:84:9d:c9:
ab:46:65:a1:bc:4a:6a:4f:6d:e2:27:0b:09:ba:73:
be:6d:71:f2:f0:89:c1:53:47:5d:3e:f9:d7:47:ea:
94:81:d2:f9:c4:4e:14:cb:a3:62:f3:98:77:ae:bc:
29:22:a0:3a:af:42:bc:07:12:94:eb:73:c9:b8:c0:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:9C:F2:60:89:47:4E:24:6C:C1:AF:F1:A0:DD:ED:A3:92:15:E4
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f1:76:e5:4e:60:e9:9f:4b:93:e1:29:9a:95:f4:cc:cf:8d:
74:8a:87:bc:37:52:0b:c1:20:3e:00:91:db:13:7c:19:5d:10:
84:93:aa:61:03:d4:9b:26:f1:49:f9:b7:12:eb:de:69:47:56:
72:f7:27:7e:e6:eb:17:55:34:90:00:70:ee:02:11:3f:55:21:
0f:69:a0:af:64:b0:64:14:65:60:00:5e:66:40:6a:9a:bb:b0:
5a:16:33:c4:26:41:62:e3:d8:76:a1:f5:28:e3:dc:64:33:9a:
8d:e2:d6:64:f2:42:8d:8d:34:dd:4b:0a:d0:4d:e1:4e:03:ad:
b8:65:a6:73:b4:b4:d9:f5:53:02:3f:52:ca:9d:43:73:1f:c0:
78:45:0a:15:6e:63:5f:12:b3:76:1a:1a:96:ee:b5:d2:90:96:
1a:f9:60:9c:fe:38:79:24:5e:90:06:62:be:5a:bb:fc:88:4f:
08:68:64:33:f0:03:ac:8c:c4:af:96:5d:9f:e3:d9:f5:53:f9:
3a:f4:62:47:92:a7:93:77:76:94:83:bf:b9:6a:c5:c6:fc:f6:
91:9f:cf:de:6b:d2:99:33:ea:c9:60:cd:09:c5:98:66:a8:d5:
26:2a:01:65:4d:af:22:f5:0a:25:17:2b:71:21:d6:2b:d1:06:
58:7d:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client