Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: mvFly9iwASj+6NXh6OGdTRi+DgsbKVe4/6b0oOE1Pi8=
Subject key identifier: 1C:0A:F2:07:13:CC:33:AA:5A:FE:D6:87:14:0E:2F:17:B4:C6:6D:86
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 0199FBEBC50C46B24724C4B16E25447696BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0ED7
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 4NIZLgJEhqXNTD9RjUaCSBKHHTMsiXm2UK3ziR//yBM=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c5:0c:46:b2:47:24:c4:b1:6e:25:44:76:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=1c0af20713cc33aa5afed687140e2f17b4c66d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:7b:20:44:ec:5d:55:aa:2e:d0:d7:7e:74:
77:d4:71:7f:bb:b4:0a:85:89:3e:03:ef:fb:cc:51:
c6:6c:1b:1a:79:1b:e0:9b:d1:94:20:ee:02:87:0c:
8b:8c:7b:83:c0:a8:fa:63:1a:f4:3d:bb:e7:1f:f0:
73:2f:e6:57:95:a2:1e:12:7a:aa:30:0e:3e:7c:b1:
3f:83:f8:88:1b:36:9b:b5:58:02:2f:f8:d3:e0:67:
37:8c:14:9b:db:48:0a:3e:bf:8b:70:76:80:af:ac:
0c:1e:b1:81:ba:c8:ad:63:fc:aa:8c:cb:54:e6:4c:
d1:05:a8:4e:5e:00:54:73:9f:9e:3d:54:f5:40:ac:
b2:dd:d1:78:af:b2:a6:2a:2d:0b:02:3e:36:6f:f1:
b9:e7:a8:6b:6f:df:ed:5b:cb:21:5f:57:53:d4:71:
75:b3:a4:38:3f:35:67:10:36:05:8e:81:53:11:71:
8f:ba:98:54:35:6c:84:94:cd:33:fc:35:84:93:5e:
5e:9e:c9:8d:8d:f6:55:15:76:99:3f:23:03:05:93:
0f:a6:8f:fc:1b:e0:d8:81:ed:07:63:9e:2a:00:20:
15:d5:6f:5c:be:3f:67:1d:90:3a:07:58:e6:be:0f:
e6:d8:41:28:ec:18:49:c2:24:76:b4:bf:ce:36:af:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:F2:07:13:CC:33:AA:5A:FE:D6:87:14:0E:2F:17:B4:C6:6D:86
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:9f:da:21:5e:c4:1e:2a:ef:e2:e6:9c:ea:ee:19:ec:dc:
27:c6:12:f7:9e:81:ce:4a:11:d5:6c:d2:3b:35:58:a3:03:bd:
58:a9:9c:ad:3e:e5:0e:1e:be:ed:25:73:46:20:a6:ce:3e:db:
34:b1:d9:e3:10:6f:e9:d0:2a:bf:33:40:62:c9:95:17:13:b4:
c2:fe:6f:d5:e0:05:d3:5b:92:7f:eb:48:91:4b:a1:ce:04:10:
d7:08:b0:f7:e3:a9:0e:16:45:2d:c3:2e:24:f3:31:d7:15:1f:
66:89:56:5f:e6:06:c4:3f:49:da:cd:0a:03:73:e7:35:c8:d7:
ab:12:a6:ed:84:91:be:c6:12:3c:2a:4a:86:b1:93:ab:33:dd:
a6:65:9e:87:5a:66:b3:dd:c8:e8:4c:34:a4:47:0f:b3:dd:59:
1d:8d:4e:24:61:94:82:8c:0f:ea:40:6c:82:04:21:ac:21:5d:
ba:52:e7:f8:7f:26:f0:31:56:2c:91:f1:fc:a6:fb:45:f6:d6:
66:1c:46:d6:0a:3e:36:01:17:ed:44:65:6d:44:74:91:da:df:
5d:11:1d:dc:ab:37:1d:bb:09:32:8f:41:43:ea:31:df:a9:8a:
79:06:3a:7f:e8:f5:26:d5:bb:b5:6c:40:bf:27:05:60:4c:3b:
1b:f4:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:25 2025 by rpki-client