Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: 3ibJES013iPlzjcJz7ZYGAedy3CRSBma2KpbYUQTUuk=
Subject key identifier: ED:BD:1D:64:B9:71:40:29:4D:44:5D:9C:A2:5B:B9:B5:6A:CD:47:6F
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 01974A0CB3C20C1C874FBCF832173BFAFCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0CE0
Signing time: Sat 07 Jun 2025 11:00:35 +0000
Manifest this update: Sat 07 Jun 2025 11:00:35 +0000
Manifest next update: Sun 08 Jun 2025 11:00:35 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: HeKdfjyfF3MMmw+1mlCRyTd4TekNmkgu8DDBF9zKD58=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b3:c2:0c:1c:87:4f:bc:f8:32:17:3b:fa:fc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jun 7 11:00:35 2025 GMT
Not After : Jun 8 11:00:35 2025 GMT
Subject: CN=edbd1d64b97140294d445d9ca25bb9b56acd476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:bd:55:e7:5c:c2:8f:d2:01:58:97:6b:9a:
a8:36:20:5b:89:19:2b:2d:4c:34:14:52:0b:59:e4:
38:2b:6a:36:38:68:8a:c0:7b:71:07:fc:90:94:d6:
01:1a:2f:0c:53:ad:6c:42:0d:9e:02:78:dd:2e:90:
f1:43:81:49:e2:e1:4c:27:e2:61:bb:00:f6:28:92:
35:f4:9d:e2:27:55:70:b4:dc:88:51:ee:a9:83:54:
0f:04:d8:d3:42:51:dd:d1:d1:5e:5b:00:12:1b:ab:
ca:e0:cb:14:19:e0:b5:f6:b0:9e:42:10:69:58:09:
05:a9:79:0a:c4:54:ea:a5:05:48:da:12:22:30:2e:
a6:91:d0:bf:bb:0c:cd:45:d1:c4:37:10:c1:da:23:
9a:6b:25:c7:e8:27:56:a7:17:1e:5d:2a:b3:59:8f:
86:a9:35:38:8e:33:26:02:91:04:5e:de:ce:1d:24:
1d:3f:f2:19:34:6a:f5:2c:03:64:e7:c8:01:19:ea:
c3:26:37:dd:6b:cc:6a:a8:cf:69:c2:31:c0:4c:39:
1c:f4:3e:8b:a1:ea:26:a3:0e:5c:c1:52:a7:65:f1:
5b:d8:17:b3:15:d0:6a:be:9c:ca:16:2c:2d:e6:47:
74:8f:f8:c9:c8:2a:d1:48:bb:3f:30:47:43:7d:7f:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:1D:64:B9:71:40:29:4D:44:5D:9C:A2:5B:B9:B5:6A:CD:47:6F
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:2e:27:f7:e4:0c:d2:82:9d:99:e9:1f:fa:6d:58:22:07:
72:e8:28:df:56:c3:61:26:b8:60:4c:1e:45:60:9b:25:dc:f6:
09:d8:5a:40:a4:96:0d:b4:91:c3:b3:e5:04:80:df:cf:aa:e1:
2d:09:44:fe:b2:bb:7d:8d:75:b3:f3:7f:a5:63:b7:3a:2c:f1:
27:1a:71:e3:be:70:79:7a:8d:f5:86:e6:06:6f:2c:a9:78:d0:
e0:4e:33:df:59:12:79:8d:3b:77:e0:3a:92:e8:5f:ed:c4:72:
3c:9d:0e:52:97:70:c2:f3:e0:a6:fe:22:fd:cd:f9:a0:a0:65:
74:ac:55:39:3e:b0:13:4c:d7:26:63:49:a1:24:c3:5c:19:94:
77:59:31:4c:02:f5:aa:f8:47:b4:98:97:27:0b:62:02:37:c7:
cc:a2:76:1f:2a:ef:29:a7:d5:a0:21:5f:f3:ed:1c:a6:62:50:
ed:04:32:f2:be:fa:1d:26:6e:cb:99:94:98:73:24:9a:c7:17:
f8:99:6e:3f:74:1c:97:ce:72:86:33:e7:71:e4:38:0b:e6:92:
07:64:9b:17:08:52:ce:74:22:f0:3f:f4:c4:18:7e:d5:4d:a5:
97:4a:fc:06:3c:89:82:0b:17:33:83:84:c5:ef:91:85:9d:3b:
ba:63:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:30:22 2025 by rpki-client