Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: dUihe2fURa96QGK6ROWhYZV2OY64xauFN1GRbttWrMs=
Subject key identifier: 32:28:8E:80:4C:A7:42:36:7E:5D:DE:D7:5C:71:57:E1:A4:3F:46:5A
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 0197B6A1A63540F1FE5239C55AD82E331AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 1090
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: AlAWzfRw7ydvSQmUL7bewSByyJK7RKDtalcAZSvq6MY=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:35:40:f1:fe:52:39:c5:5a:d8:2e:33:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=32288e804ca742367e5dded75c7157e1a43f465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:f9:22:f8:e3:b2:b9:72:2a:61:c4:2d:4e:
21:0c:43:d0:ef:0c:ce:ce:82:1d:0f:4b:a7:8b:2f:
a1:8c:d5:f6:ba:10:91:94:0c:0a:6e:31:0a:10:e7:
5e:78:d1:eb:c6:08:41:b1:b8:77:49:66:54:78:bd:
fd:50:7b:ec:66:3b:31:0e:03:13:fb:dc:ca:2d:d6:
33:22:0b:41:32:25:9f:84:e8:85:0e:bb:0f:cf:27:
5c:96:40:b9:95:73:db:1b:e4:c1:39:77:f7:bd:90:
15:4e:22:d8:a0:a8:eb:6d:31:f0:10:aa:96:18:27:
50:22:86:c2:ae:89:08:4d:f3:cc:60:52:50:6d:c5:
3f:6c:47:db:de:7b:38:21:af:c3:fd:9c:7e:9c:ab:
56:be:c4:7d:a9:ac:c9:b7:c1:29:27:41:a9:d8:1a:
a1:f0:77:7f:f2:8c:dc:bd:4d:bf:57:f0:7f:27:d6:
e3:f2:e7:66:84:e1:15:f2:9d:ad:98:80:a3:34:b6:
cf:92:16:79:a8:1a:7e:6c:9b:ad:46:6b:24:ec:13:
ab:54:a1:0d:bf:7a:7f:ad:43:ab:ff:4c:13:60:6a:
d1:5d:96:7b:de:ca:0f:fb:d7:7c:b7:f3:bc:f4:3b:
21:91:2d:f6:f2:5a:3f:60:6c:d9:f4:f1:62:8f:cc:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:8E:80:4C:A7:42:36:7E:5D:DE:D7:5C:71:57:E1:A4:3F:46:5A
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:43:42:1e:0b:81:e7:51:14:ee:92:a8:67:ec:cd:f4:ef:
e4:5c:b5:e8:88:4d:33:13:61:2f:b7:00:0f:29:e7:30:ba:2e:
0a:86:d8:1a:b9:cb:12:d7:4f:7f:ff:19:a1:2a:50:0d:44:7f:
61:e3:cd:f5:da:0e:44:cc:e7:1e:46:e2:27:42:1b:24:ec:4a:
fb:e9:bf:b9:a3:c2:b5:ea:f4:70:e5:51:a3:59:81:56:a3:b0:
43:21:f3:62:40:e7:b8:65:57:7b:6e:23:64:95:b6:a3:d7:ae:
3f:e4:13:93:aa:bc:fb:28:97:78:a4:8c:f0:79:16:42:f4:c1:
9a:be:38:5c:ad:c7:92:89:4c:9c:3b:59:34:2c:4e:9e:d1:6f:
4c:ed:2e:32:b7:21:8e:20:98:ce:4e:f3:1c:ff:6a:1f:ac:79:
9c:ee:cd:2d:ea:9e:1c:c1:f8:18:fc:4a:5b:84:64:e9:4e:eb:
ba:79:95:f2:bd:66:a4:ee:b5:c9:20:fc:06:a3:50:23:33:9f:
f7:af:41:60:e5:c2:63:80:89:5d:82:9a:39:b0:18:4a:76:2d:
bc:6b:1e:b8:d8:c8:a1:a3:ca:6b:51:47:df:ba:a1:35:26:e4:
02:5b:bf:75:7e:d9:b2:c3:0c:c3:d2:3f:cc:ea:6d:a5:b6:20:
ee:90:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client