Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: cm5HauBM9FtzLMYXSEhL0aTvlBr7+3Trr93w8rRFGYI=
Subject key identifier: 88:F4:92:0C:0D:C3:91:FB:23:3A:F7:AB:D5:15:53:CA:4A:E4:50:47
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 019A71B8DD7F9BD0BE130CDA311BA6A59ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: yfcoZ9KaG/DOqgxEO2g4ntTbwnXZZZZAO1ESpVCtfco=)
2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dd:7f:9b:d0:be:13:0c:da:31:1b:a6:a5:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=88f4920c0dc391fb233af7abd51553ca4ae45047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:f7:4e:dd:fc:77:e8:53:29:84:01:3b:ca:
37:4a:53:02:d7:b2:1f:1e:8e:4e:75:de:78:c7:f2:
22:50:e7:7e:a1:45:a2:7a:49:df:10:fc:35:ed:e2:
c8:9d:f7:5e:05:99:07:a8:23:55:ce:23:bc:b0:4c:
7c:e4:19:26:c0:bd:69:c1:67:5e:44:81:bd:5d:42:
a4:c0:a5:4e:1b:10:8a:9c:d8:5a:1c:99:40:4f:bb:
46:75:ea:ec:69:10:7f:83:be:37:56:b1:48:d7:23:
b1:83:d7:cc:92:22:22:3c:62:6e:a2:f3:85:87:eb:
04:d8:3f:94:1a:6b:9f:2a:d8:ad:7d:c6:c1:0f:55:
2c:e8:8c:4d:55:ab:62:30:8a:5d:86:dd:a9:c4:e0:
c1:79:71:8c:25:a0:dc:b2:92:ce:f2:b2:ae:26:cc:
c9:99:2b:2d:73:63:80:52:b9:05:68:23:2b:65:9a:
e7:dc:3f:1c:2e:e5:a8:32:a8:f4:17:42:84:62:5c:
f5:f4:5f:b5:58:08:e8:47:e8:d0:ae:7d:9d:f9:26:
9e:b4:f6:2f:64:25:1d:1d:01:9f:24:4f:38:5d:c1:
a4:5a:cc:07:a6:59:ca:76:e4:ed:dc:71:df:14:e3:
36:ea:e4:b2:63:9a:04:88:bb:48:2a:84:20:74:03:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:92:0C:0D:C3:91:FB:23:3A:F7:AB:D5:15:53:CA:4A:E4:50:47
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f0:d2:14:dc:29:7d:99:72:22:7c:e3:34:ef:0d:d6:89:3d:
05:2f:89:eb:a6:fd:1f:aa:70:b0:fb:c9:ce:6e:3f:e9:0a:ec:
0d:8a:1c:d5:bf:5b:63:73:e1:c4:31:40:9b:d8:78:19:c5:41:
48:3d:50:88:63:e8:a0:b9:98:0c:2c:39:d1:4c:d4:30:11:67:
1c:a3:b7:80:f6:6c:57:a1:3c:46:1b:85:73:1c:d4:eb:b5:ff:
cf:51:fc:52:3f:d1:b5:8a:ca:34:59:d7:cb:d1:c7:b9:7b:78:
15:05:5b:1f:4f:c7:c0:0c:db:92:35:7e:ea:b8:aa:73:60:d1:
5b:02:29:7b:6a:32:9e:26:f0:a0:ee:ff:bb:2d:fd:c2:2c:42:
50:a3:14:58:66:72:1e:80:c8:66:eb:9a:e7:34:cc:77:ca:e4:
9a:57:7f:5b:a4:84:7f:3e:88:c8:92:92:16:45:dd:dd:0a:9c:
28:95:6c:69:7c:65:e7:61:03:10:3a:0f:d3:37:14:67:7f:1f:
91:8d:87:ec:1a:ae:e9:27:aa:54:14:42:07:47:c7:1b:f3:67:
86:a6:cd:d9:e7:1a:af:bb:81:6f:15:74:7b:f9:a1:fa:6a:c2:
3c:47:9b:ae:1d:1a:46:17:58:10:38:1f:f4:c1:75:63:7c:02:
7a:2f:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:19 2025 by rpki-client