Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: /qbvz2l9DnRoSkNz47giN4w1D29P0zerXyp6NgTsT4s=
Subject key identifier: 9D:44:8D:9F:F9:1D:3D:F6:03:04:01:BF:BE:43:D0:77:F8:2C:95:CB
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 01992D473DAC8E8DF3B4F19D977A982F99FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 07:01:07 +0000
Manifest this update: Tue 09 Sep 2025 07:01:07 +0000
Manifest next update: Wed 10 Sep 2025 07:01:07 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: zAmUZgGBAbKillg1epUMNRLuIly7KgJbraI6yK377jY=)
2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:3d:ac:8e:8d:f3:b4:f1:9d:97:7a:98:2f:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Sep 9 07:01:07 2025 GMT
Not After : Sep 10 07:01:07 2025 GMT
Subject: CN=9d448d9ff91d3df6030401bfbe43d077f82c95cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:3e:20:59:e1:b7:dc:84:94:34:3e:72:4f:
3b:cc:4f:69:f5:ce:10:09:97:a6:b2:42:19:b5:89:
f5:e2:4e:9a:be:19:0b:1a:26:d2:13:15:91:56:67:
3a:92:21:0d:fc:8c:df:e9:f6:de:92:f2:d5:5b:5f:
81:6d:1f:ec:03:1f:b2:f3:fe:24:2a:d2:b6:83:44:
8f:89:69:4c:57:d6:5b:2d:51:28:5a:7d:f7:a1:bb:
03:dc:0e:88:f1:90:51:73:42:c5:e8:1c:66:81:31:
71:08:33:d0:db:c0:79:22:ba:81:98:0f:53:09:57:
f8:de:f1:f4:b7:cf:19:f6:b1:6c:58:ed:30:eb:14:
d9:f1:9d:36:9e:b1:a6:5c:fb:7c:21:3c:77:03:6f:
ca:c0:c9:4f:ed:2e:3f:0c:85:13:c1:9b:18:96:cb:
2c:1f:5e:b8:3e:cc:54:bb:bb:02:6c:ba:99:58:37:
36:00:52:92:ee:69:b7:7d:2f:a1:52:8c:1a:08:f8:
0b:9f:2e:d3:e2:5e:da:03:93:1f:75:c7:6b:5d:6e:
84:8b:4c:c8:8d:ad:6b:78:90:51:1f:01:fd:c9:db:
59:1f:a2:c4:f3:1c:94:84:91:3e:06:ce:61:bc:4a:
d5:91:36:c9:48:b0:0b:f5:29:23:72:27:9d:16:9d:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:8D:9F:F9:1D:3D:F6:03:04:01:BF:BE:43:D0:77:F8:2C:95:CB
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:06:c0:75:25:b8:21:31:15:b0:07:0b:a6:d9:c5:6c:0f:d6:
a3:f2:58:29:39:42:6d:2d:9b:95:e0:8e:8c:6d:dd:f5:7e:54:
38:c4:56:16:70:6d:54:a1:ac:29:71:59:5f:a7:3a:8a:e9:ea:
42:0d:26:8d:bc:36:84:db:ba:54:f4:eb:6a:b2:67:5a:fa:1b:
f3:41:b1:0f:06:4d:66:1f:c8:4c:70:32:29:ae:6c:05:c1:4b:
4c:c8:ca:d6:ad:e2:a5:81:d5:46:e4:b2:c7:fa:47:3e:37:6a:
bd:af:f2:75:61:2d:02:6f:e6:71:72:bd:de:e0:50:aa:9d:05:
28:0d:ff:dd:28:52:6e:ad:80:92:55:bc:2c:12:c4:eb:30:f2:
ba:a2:e9:e3:11:f9:9b:37:b9:0a:6b:64:b4:d7:2c:1e:4b:8d:
84:40:3b:75:d9:65:3f:76:46:da:49:d7:ac:7c:67:62:06:a5:
21:f2:28:c8:21:31:42:c0:6b:b2:68:99:d4:25:60:c5:58:b7:
9c:73:09:82:db:c3:b3:72:bc:a8:df:f2:ff:f2:58:de:97:21:
04:99:1b:a2:bd:fe:51:7f:2d:fa:3b:dc:71:00:77:84:3a:2b:
5c:47:10:14:1c:4b:5a:6c:a4:4e:27:b7:cd:42:6c:7b:2d:08:
60:56:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:41:27 2025 by rpki-client