
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: 67YY5FuEqtKM5kWRTN7370zAlASUHso/P/BqimICLjs=
Subject key identifier: 3C:AE:EA:A2:59:E5:9A:49:78:62:F7:E6:AA:5D:68:46:09:0A:E1:BE
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 01975BA50EBBE55DADF59CA18465D704551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 21:00:33 +0000
Manifest this update: Tue 10 Jun 2025 21:00:33 +0000
Manifest next update: Wed 11 Jun 2025 21:00:33 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: JM6ZDwf/YvtqH3LBmykPeUvSlXH0RPJ7o/XLWpIDmg8=)
2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:0e:bb:e5:5d:ad:f5:9c:a1:84:65:d7:04:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Jun 10 21:00:33 2025 GMT
Not After : Jun 11 21:00:33 2025 GMT
Subject: CN=3caeeaa259e59a497862f7e6aa5d6846090ae1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:78:aa:85:21:73:c5:fd:0c:5c:ff:35:34:
aa:43:5c:e5:c5:c0:08:73:0c:10:1d:71:71:bf:52:
f2:5b:f2:5b:f6:4f:b8:48:16:29:7c:9d:39:b4:d8:
23:de:eb:2f:2a:d9:b8:d8:94:77:1c:e5:42:07:53:
3f:af:8c:49:59:d9:d8:92:08:78:a9:74:72:b3:ad:
e4:bc:ac:95:c3:64:61:4e:04:98:2a:f1:a6:49:b6:
64:73:ed:2a:d7:65:81:0f:23:4b:3f:4c:5e:6a:50:
b8:bc:fa:e6:b0:f0:29:1f:15:2b:1d:f8:e6:98:94:
4b:2f:40:b4:07:00:a4:db:20:1c:8f:ea:bf:fd:c1:
5a:bf:9c:55:1b:92:da:e9:ab:3a:29:ca:37:11:77:
89:c0:d1:21:66:5a:79:8c:13:ba:ad:da:2e:69:55:
14:38:9b:71:ef:06:ac:45:7b:15:f5:d9:fe:4e:af:
14:98:9d:77:92:93:c4:e2:64:05:29:9c:20:7f:31:
d9:61:25:22:ae:36:84:b6:51:09:16:b1:47:53:44:
c9:a7:70:ea:ad:e1:da:ec:56:b6:4d:2b:1f:00:42:
8e:0a:65:d6:d5:9e:f3:d3:65:f7:49:e7:2e:ea:9c:
4c:19:f0:ff:2b:ad:a0:87:fa:e0:f7:2b:82:8f:14:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:EA:A2:59:E5:9A:49:78:62:F7:E6:AA:5D:68:46:09:0A:E1:BE
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b2:9d:1a:d7:0c:eb:40:9e:8b:af:84:7f:94:bf:9c:fa:15:
bb:42:c6:24:c2:38:b2:ad:f1:c6:3a:89:d2:b2:97:05:3e:48:
6e:db:5f:38:f1:a8:5d:97:d4:35:bd:d8:d5:e6:dc:f4:7d:e4:
19:77:6b:5f:30:28:07:c6:28:cb:df:d1:ff:5c:6e:c3:60:e0:
01:51:27:31:68:3d:1b:b5:98:99:b5:1e:ee:b7:06:a2:83:cc:
d1:04:ec:60:e2:26:c0:43:ad:06:0c:d8:d7:3e:29:35:77:86:
f9:ad:a5:97:d8:13:50:35:c4:55:2a:56:7e:74:ea:66:d6:6a:
53:57:56:ab:96:e0:b1:85:a7:42:8f:60:bb:1f:95:a8:dc:aa:
23:a3:a5:85:1d:84:0d:e5:0c:15:62:c9:f3:4f:89:76:ff:00:
7d:5e:c3:a5:3b:56:41:5f:ec:bc:f2:03:03:bd:d2:37:89:29:
7d:ec:f6:a6:80:fe:20:9d:d3:f7:56:0e:74:5c:ec:04:3a:e7:
84:d8:94:d2:57:92:87:a6:d7:fc:e8:87:9a:79:bb:64:d9:49:
ad:29:0a:82:91:8a:9f:41:05:8c:32:5e:a0:cd:1f:46:1e:e4:
9c:89:5d:3c:34:3a:db:4e:6d:4d:93:96:47:98:62:9e:6c:c9:
9b:7f:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:53:57 2025 by rpki-client