Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: AFAQvdjXbOHOwG2dsl0+hGppooZs7PW68k2RyOk+6Bo=
Subject key identifier: 7E:3D:3D:3A:86:40:6F:F6:95:55:E5:3F:98:BD:D8:12:5E:75:C5:34
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 01984965272A1289A9EE7722E94FA55F0508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 10DC
Signing time: Sun 27 Jul 2025 01:00:22 +0000
Manifest this update: Sun 27 Jul 2025 01:00:22 +0000
Manifest next update: Mon 28 Jul 2025 01:00:22 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: kF8AMSAMX0LSrJ07QOOjO1nCSl8ZWflnQyfHaTD05O4=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:27:2a:12:89:a9:ee:77:22:e9:4f:a5:5f:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Jul 27 01:00:22 2025 GMT
Not After : Jul 28 01:00:22 2025 GMT
Subject: CN=7e3d3d3a86406ff69555e53f98bdd8125e75c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:bc:3d:2f:b1:7a:b0:94:d3:2e:f4:f0:13:
43:b2:3f:dc:b9:de:f7:1d:eb:99:ae:e1:49:b2:00:
6a:3f:d9:16:ad:a3:fc:20:22:6d:15:53:26:62:c6:
16:d6:11:2d:49:78:11:47:3a:1d:4b:b6:3c:39:e5:
d9:65:7b:fd:15:e0:40:b3:db:dd:a3:cb:c6:cb:94:
44:95:07:3a:55:52:91:da:66:65:ff:c0:d6:5b:28:
3b:f5:7b:9f:f7:bd:9a:09:72:6c:c7:cc:a9:6a:4e:
ec:1a:30:41:81:d5:7d:7c:bb:fe:69:8b:22:ff:c4:
a3:c3:39:a7:a9:b3:f8:e6:b6:d4:d1:3a:a8:69:71:
a1:bb:aa:ad:2b:42:fb:6b:26:7a:7b:8c:d3:a1:3c:
9b:60:c3:fa:71:2f:81:5e:9f:ac:59:c9:b1:20:2c:
24:5d:b0:f3:ad:9a:cc:76:33:42:39:8f:38:f3:7f:
7c:2c:69:ea:f8:9f:67:34:d4:2e:cd:0e:ed:83:86:
e2:7d:f0:dd:79:ca:aa:62:35:e1:ff:f7:0f:82:1e:
0b:fc:02:75:a4:c7:87:9e:d1:cd:8b:2a:fa:51:00:
4e:c5:a5:1b:7e:fc:0c:a3:bc:da:97:67:b9:7d:4a:
70:0f:ee:0c:4f:7e:4a:be:d3:cb:97:18:0a:e4:90:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:3D:3A:86:40:6F:F6:95:55:E5:3F:98:BD:D8:12:5E:75:C5:34
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:ef:53:c0:dd:da:5f:60:a9:80:f9:93:a6:83:b0:3e:09:
e5:60:c4:5c:1f:7c:3c:38:31:2e:b3:d9:f5:7d:d7:c6:9b:50:
c8:fe:78:d6:f9:e5:6d:94:2f:89:86:88:3a:05:0f:17:6a:63:
d7:1c:7e:f1:75:c1:51:12:dd:8c:af:56:51:0f:be:f7:e2:f7:
c7:8d:7f:fd:16:c7:c6:c1:85:af:d1:a4:6b:d2:c8:c1:0d:43:
9a:35:a0:95:6a:2f:eb:90:ce:0a:9c:f5:bd:ff:ca:26:33:e8:
3a:9f:6e:4a:d8:12:43:d6:29:1f:3a:74:ea:c4:73:ab:fb:b6:
b6:b4:30:2b:31:41:67:95:04:10:2b:b9:f7:33:f2:a3:43:15:
70:b8:31:61:8e:a6:38:56:4f:4d:25:69:10:61:80:6e:d2:17:
c8:a1:e3:79:74:58:1a:19:42:93:bb:02:25:ae:c2:15:29:b9:
ab:a6:8d:1f:2c:ce:0c:34:95:13:6a:e2:e0:43:92:87:44:a4:
de:6e:5b:8f:98:ae:c4:5f:88:e0:33:9c:67:f3:69:c1:5a:5d:
e4:5e:90:b6:c9:34:9d:ed:ce:27:08:1f:66:fe:1d:20:6c:7c:
92:55:ae:36:75:5a:ec:ec:72:c4:fe:bc:3d:fe:62:2f:bd:6f:
c1:b3:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:10 2025 by rpki-client