Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File: ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier: S80OrX7OCttINGYzr9OVrHeGhOhoJMuIQXmHMlVu8WU=
Subject key identifier: 43:EE:A7:AA:5A:35:C6:E5:D1:F3:F9:B3:DF:A4:47:5D:94:63:96:D6
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 0199179A9432DAC22B59E454E8D2F5426A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number: 0DCF
Signing time: Fri 05 Sep 2025 02:00:30 +0000
Manifest this update: Fri 05 Sep 2025 02:00:30 +0000
Manifest next update: Sat 06 Sep 2025 02:00:30 +0000
Files and hashes: 1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: 6UA5QiB+bF11MA8sa6lYABr4DBwouKMJqOfv8wgieCk=)
3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:94:32:da:c2:2b:59:e4:54:e8:d2:f5:42:6a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Sep 5 02:00:30 2025 GMT
Not After : Sep 6 02:00:30 2025 GMT
Subject: CN=43eea7aa5a35c6e5d1f3f9b3dfa4475d946396d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:31:b9:8d:15:13:cd:50:4d:81:85:d4:ee:
29:52:30:cc:f9:f3:f0:80:a5:4c:8a:11:4b:25:ac:
8a:ac:c4:6c:d7:93:f8:b4:4d:bf:fa:98:77:e3:a0:
ba:77:cd:b1:65:2a:03:16:94:37:70:35:c5:f4:20:
9d:e3:62:b0:97:43:ff:9d:7f:6a:41:ef:7a:6a:ab:
87:55:c7:b1:0a:0c:de:b8:b7:08:66:f8:a8:26:8d:
2a:8d:45:f9:1f:b6:4c:f8:63:72:43:33:22:59:c6:
cd:2f:ee:78:09:02:9b:5d:34:11:9c:1d:f8:09:ca:
f3:4c:a9:11:92:2e:df:f6:cb:34:1f:92:b3:e9:01:
ac:94:12:5d:b2:88:d1:71:d0:08:4b:f3:da:83:9d:
97:cc:3e:23:70:7b:01:c2:8e:e9:c4:73:2e:71:9d:
0f:eb:44:f6:58:f4:2d:d8:2a:99:06:da:40:44:d2:
41:1d:ea:92:76:27:62:2e:57:52:87:b0:15:ee:a6:
d9:e4:84:4b:a5:a1:73:a6:50:53:c9:0e:68:14:a6:
bc:5a:16:f9:1d:7f:36:5a:a7:5b:8d:62:bf:f0:e9:
89:94:82:93:6d:91:26:35:81:08:86:33:cd:c7:21:
05:71:67:8c:77:fc:11:33:69:2d:d5:bf:25:70:ec:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:A7:AA:5A:35:C6:E5:D1:F3:F9:B3:DF:A4:47:5D:94:63:96:D6
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:33:77:5c:73:a8:72:7b:5b:00:a6:aa:70:7d:9c:26:cc:
e9:70:0e:21:22:83:16:17:16:e4:a7:e6:21:89:74:f9:b5:1a:
12:d3:21:bd:60:9b:06:11:e4:e4:e3:a4:13:42:29:19:19:4e:
95:48:a4:db:0d:94:93:c9:92:0e:9f:21:1e:c0:43:45:cc:1c:
e1:90:bf:a5:21:1d:a6:a6:90:8d:f7:5f:df:dc:f7:1d:f9:33:
b0:4f:8d:22:08:e1:38:f9:98:a3:60:2e:1d:eb:28:ea:08:1d:
26:e2:45:d9:2d:1e:dd:68:a7:35:92:a5:a8:0f:2b:29:32:42:
d9:3d:99:d5:96:6b:1f:0d:c1:d5:e4:8e:2e:5f:4a:6e:38:2e:
e5:ef:8a:fb:96:0e:37:ed:2e:59:cb:d6:11:bc:83:40:20:78:
55:21:e2:35:bb:fe:be:65:16:10:59:c5:c5:35:01:9a:64:46:
97:40:cc:07:0c:d4:eb:80:ab:1b:15:a2:0a:0f:5e:1b:ae:ca:
de:14:5b:43:a0:2f:dd:40:7f:3f:ad:2a:9c:49:b5:ef:a8:43:
00:00:a5:74:c2:1a:54:fd:dd:c7:55:0d:af:b1:e5:3c:27:9e:
ae:f4:b1:7a:0b:98:f3:09:c2:d7:10:dc:be:d0:19:d8:60:2e:
61:53:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:34 2025 by rpki-client