Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File: Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier: wfqeoimOz6Jvq03+W7Fsj48RNQUxULXA+jkv49I0jLs=
Subject key identifier: 9C:A0:08:61:0A:CB:CA:37:55:31:89:EE:F4:75:08:DA:A2:5F:59:D1
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019A239C0DD3BFB427B98BAC3DCA6BC18660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number: 0638
Signing time: Mon 27 Oct 2025 03:00:21 +0000
Manifest this update: Mon 27 Oct 2025 03:00:21 +0000
Manifest next update: Tue 28 Oct 2025 03:00:21 +0000
Files and hashes: 1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: +WQHEAXnsXG1d9JiMAMhkDNWXwMak6akK/FJ1ZFdUQE=)
2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:0d:d3:bf:b4:27:b9:8b:ac:3d:ca:6b:c1:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Oct 27 03:00:21 2025 GMT
Not After : Oct 28 03:00:21 2025 GMT
Subject: CN=9ca008610acbca37553189eef47508daa25f59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:f6:dd:16:ce:f5:27:12:65:0a:80:a5:8e:
6c:de:bf:7d:95:78:bb:da:81:c7:0f:24:d8:bf:2e:
15:4f:9f:cf:b1:c6:8f:3d:06:a2:55:93:51:8c:a6:
f0:b7:15:84:d8:c0:09:68:18:e6:16:f4:98:c8:08:
c6:3f:23:d9:69:24:38:29:a2:bd:96:cb:bf:37:94:
9e:31:e5:33:54:87:8d:53:c0:00:a1:5b:b2:0d:37:
b2:0f:9f:58:18:3b:85:7b:71:1a:38:a0:1f:b7:fa:
68:a9:22:87:db:0d:67:c5:11:63:fe:5f:9c:78:0a:
0f:86:7e:3d:ef:9d:88:09:c4:c2:6c:bc:8d:77:90:
d3:e7:ec:6d:08:54:de:aa:36:d0:09:46:dc:1b:7e:
94:43:5a:06:6d:d4:94:e7:cd:98:dd:26:36:77:be:
d1:3b:d8:84:dc:8f:bf:c6:36:4a:c2:ba:37:4f:17:
a0:9b:f8:4e:ed:4a:09:11:3a:d9:eb:80:88:e6:2e:
2e:10:81:cc:29:00:73:a8:44:99:52:f2:43:69:1f:
8b:fe:00:91:0c:65:35:0b:8b:a1:3b:a1:e8:57:5c:
38:25:cd:8c:69:18:b2:46:e5:09:34:0b:3a:44:ee:
8d:76:3b:bd:4d:ee:ac:b2:55:c9:e7:19:5d:06:dd:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:08:61:0A:CB:CA:37:55:31:89:EE:F4:75:08:DA:A2:5F:59:D1
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:c0:f1:cd:13:21:2a:bd:bb:af:13:4a:5c:65:ba:d6:e6:
ec:af:f7:4d:50:bd:5b:8e:30:36:00:2f:a4:e9:a5:76:19:12:
c4:c6:e3:a6:60:f6:11:7a:09:40:3b:e2:c6:d2:0f:b1:d1:18:
cc:3f:22:e4:c1:b4:61:a9:23:35:42:39:06:99:8e:83:5f:b7:
97:f2:3d:43:1d:3c:16:93:7d:16:96:6f:f5:ad:06:80:db:7e:
09:36:5c:47:a8:0f:b8:c4:c5:29:c1:ae:39:4e:fe:ef:5f:b4:
da:97:3f:d8:b2:a9:54:63:0f:b8:c1:c1:d7:6c:63:9c:68:cf:
da:83:b0:53:22:9c:ff:27:08:c2:85:e6:b1:fc:1e:ae:b7:5c:
75:5e:ea:6c:0f:ee:cd:d3:b2:a8:f0:14:2e:96:5c:50:e0:d6:
9d:d1:bc:ed:68:ab:38:99:df:ff:d6:cf:2c:b0:73:49:4b:74:
80:89:b7:c6:e5:76:60:10:77:e1:5b:9d:d8:59:5f:2b:f5:3c:
3d:d1:26:50:c5:45:8f:09:0c:e0:86:f4:1e:fc:dd:d1:7a:67:
8a:fc:c9:a4:e1:25:e1:9c:5e:47:4d:17:f7:4c:ad:20:7c:86:
85:88:81:0e:e7:40:70:7a:f5:18:ec:6e:26:c8:f3:1b:ff:81:
57:dd:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:02:10 2025 by rpki-client