Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: lqcuH2vdMKCLmkjdBletd62DRuHE0Fzlv+678dSsWo4=
Subject key identifier: AC:08:73:AD:36:F1:F4:52:16:2D:6E:27:6A:97:83:F3:D2:38:CF:E2
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 0197654CFC4CF0E03C2435CBBACE9BDC429E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 18:00:33 +0000
Manifest this update: Thu 12 Jun 2025 18:00:33 +0000
Manifest next update: Fri 13 Jun 2025 18:00:33 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: Egh4KoRB+Y2Pr8SrNmB79YzOb+fac+pHWtA07puA1pc=)
2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:fc:4c:f0:e0:3c:24:35:cb:ba:ce:9b:dc:42:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: Jun 12 18:00:33 2025 GMT
Not After : Jun 13 18:00:33 2025 GMT
Subject: CN=ac0873ad36f1f452162d6e276a9783f3d238cfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:ad:3d:49:c7:91:03:1b:f8:ae:b3:b7:8a:
f1:47:cb:8f:a0:64:5c:e5:76:39:d7:74:bb:6d:e7:
c8:0c:36:1a:68:87:88:71:ca:04:aa:c2:ee:35:b2:
00:d1:98:96:0d:e2:1a:a5:14:4d:ad:92:43:e2:0b:
33:97:da:c8:0a:b8:cf:20:77:ff:29:60:98:17:44:
04:a6:00:b3:fb:55:34:93:ca:ee:9c:a2:a8:a2:9c:
30:99:d5:8b:62:0b:b7:b5:6b:2f:7c:ec:d1:02:87:
d1:21:e4:51:66:30:e4:93:31:ee:cb:f6:2f:24:ad:
ba:e4:d7:af:4b:54:db:f1:e5:fa:a0:53:26:88:85:
11:dc:1e:8b:c8:9e:4b:29:3c:31:26:ed:03:d6:aa:
7f:0a:64:ce:57:0d:43:84:21:2c:ac:e0:e1:74:68:
c5:88:20:44:d5:4b:d1:60:77:d9:65:24:b0:3a:2e:
3d:18:63:44:a0:82:39:17:7c:a1:eb:34:04:8a:58:
50:8f:57:64:17:5f:cd:1d:f1:47:b8:a2:99:0a:3f:
ef:1b:ce:ba:08:20:3c:39:ba:bc:37:2c:cd:36:e6:
73:6b:3d:20:90:55:90:56:d7:0f:91:e6:eb:31:6d:
ae:bd:97:6a:1f:fb:0c:87:f7:b5:19:79:75:2d:0e:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:73:AD:36:F1:F4:52:16:2D:6E:27:6A:97:83:F3:D2:38:CF:E2
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:ce:55:b1:8c:71:8e:61:d1:c4:c6:ae:70:6f:0f:b2:61:
09:a7:29:88:3f:48:ec:7e:b3:02:af:a7:0d:78:2d:a4:cb:5d:
da:5d:a5:96:1f:8b:69:ca:30:24:c6:2c:70:63:80:b3:b3:55:
c0:cd:43:2e:a9:15:7e:d9:18:e7:a9:68:95:63:bc:30:0f:95:
6d:c1:3e:f1:2e:9e:97:72:51:95:4f:64:cd:83:73:92:d8:7c:
ee:55:23:a6:ff:97:ac:2f:59:cc:6e:f9:a8:7a:85:8a:29:45:
eb:83:22:87:a0:d1:53:10:c2:8f:4b:d5:21:1c:31:c3:25:af:
56:f3:5d:eb:94:af:02:91:3e:de:80:4f:a8:7e:64:2f:f3:ab:
a0:25:bb:22:1a:a4:96:30:27:02:be:b9:db:fd:fa:c3:5b:ed:
50:e7:ec:34:4d:ae:3b:e9:63:7b:6e:73:a2:5f:f9:4f:bf:61:
16:b3:61:7c:ba:c4:a5:86:e1:8c:6a:7b:e0:04:4b:55:16:11:
e3:83:83:9f:50:07:f6:2e:a2:ec:f5:ec:92:d3:b1:1d:48:06:
db:1f:c7:e5:dc:0d:db:27:91:5f:fc:25:60:ac:2a:5c:3b:6e:
d2:22:d6:4e:29:fa:a7:b8:98:d6:c7:18:dc:2b:80:c9:8f:8a:
3a:f3:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:55:38 2025 by rpki-client