Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: oVC1snoWi9MZ/BKko/5Z2XN9gW1qmMgCoFEJiaKGSo0=
Subject key identifier: 12:11:4A:1F:40:D2:F8:CC:DE:32:A6:B3:94:2A:53:05:49:22:5D:47
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 019922FACB9D43330A8A1EC22C47FDB263BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:25 +0000
Manifest this update: Sun 07 Sep 2025 07:01:25 +0000
Manifest next update: Mon 08 Sep 2025 07:01:25 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: quQzC061vCtfCLDrekOsbLajCyREpRqaPq8dkBlL4mQ=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:cb:9d:43:33:0a:8a:1e:c2:2c:47:fd:b2:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: Sep 7 07:01:25 2025 GMT
Not After : Sep 8 07:01:25 2025 GMT
Subject: CN=12114a1f40d2f8ccde32a6b3942a530549225d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:ec:c6:34:17:fc:8f:74:cb:26:f0:59:c8:
94:ea:cf:b8:20:5c:19:a8:6f:88:77:5e:44:c1:ee:
71:02:84:bf:07:af:dd:fc:aa:28:7c:a8:6f:e0:0f:
e3:e1:07:13:8e:f8:d5:0c:58:46:0e:da:72:d8:97:
98:ce:aa:74:18:f8:60:0a:c4:99:8d:e7:21:57:ea:
51:36:d5:90:81:1d:61:96:a5:94:0c:64:44:d3:b2:
63:68:14:b2:cc:b5:3f:11:55:a9:04:39:ec:64:88:
72:29:d5:2d:ec:9a:9b:44:bf:34:44:ea:d2:2e:92:
f8:67:b0:e5:4e:58:c9:f9:f2:22:a9:5a:08:4f:bb:
43:b6:f8:ea:51:89:43:bc:1c:35:63:4d:16:21:28:
42:a2:5a:ab:7e:71:69:df:e9:8b:23:90:06:9b:2c:
a0:40:1a:6a:e5:f9:1e:2e:07:e7:d6:f2:18:39:77:
d3:50:d3:c6:97:49:a1:a4:df:86:b2:ac:34:7f:0e:
83:d6:50:73:3e:37:da:17:f9:6b:50:27:c7:de:2b:
79:66:b9:98:28:90:2c:b8:01:52:9f:93:a2:73:63:
3b:50:c3:a8:dd:05:13:04:0a:2a:52:4a:df:39:0b:
10:1e:72:89:15:1d:8a:61:79:e5:98:5e:a1:23:4e:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:4A:1F:40:D2:F8:CC:DE:32:A6:B3:94:2A:53:05:49:22:5D:47
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f2:ee:c8:91:03:c2:df:21:64:33:d9:3d:68:8f:a2:33:a0:
aa:a6:b1:c1:5a:21:1e:87:93:68:db:9c:b9:c8:3f:e6:c5:a5:
7a:09:b3:1b:13:68:b5:95:37:96:64:b8:03:e8:7c:71:f1:b0:
88:99:d9:73:a4:24:7f:d5:0f:99:05:e6:b0:fe:d5:74:89:3a:
2c:ab:f8:27:35:ed:a1:b8:4a:a0:0f:33:d6:19:cc:60:43:a1:
1e:a5:2e:53:0a:f8:28:a8:d6:b0:d5:a6:94:8d:18:0c:8f:f7:
f9:48:89:00:90:21:e5:cc:37:ae:59:13:71:8a:39:9e:ca:2f:
54:2f:11:d4:df:2c:ab:87:16:d6:1e:a5:71:03:63:ec:3b:e8:
2f:fb:c4:67:f4:a3:ed:d2:2f:f3:02:e2:eb:ac:fa:cd:91:ec:
59:51:db:71:3f:33:4a:2d:74:1d:19:d3:0d:3e:d1:d2:d2:e3:
78:e8:a4:fc:63:bb:64:fa:70:1b:de:57:ce:46:4b:75:1b:ef:
82:aa:84:17:b1:9c:73:44:e7:17:a7:e1:c0:fc:81:90:b6:a9:
b4:96:c1:f8:1f:65:9c:c0:b3:b2:34:8a:e6:7f:6f:34:e3:8f:
8b:e1:3b:95:01:87:32:25:13:4d:8d:49:35:0d:5b:db:93:b9:
97:92:67:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+sudQzMKih7CLEf9smO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjUwOTA3MDcwMTI1WhcNMjUwOTA4MDcwMTI1WjAzMTEwLwYDVQQD
EygxMjExNGExZjQwZDJmOGNjZGUzMmE2YjM5NDJhNTMwNTQ5MjI1ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNnsxjQX/I90yybwWciU6s+4IFwZ
qG+Id15Ewe5xAoS/B6/d/KoofKhv4A/j4QcTjvjVDFhGDtpy2JeYzqp0GPhgCsSZ
jechV+pRNtWQgR1hlqWUDGRE07JjaBSyzLU/EVWpBDnsZIhyKdUt7JqbRL80ROrS
LpL4Z7DlTljJ+fIiqVoIT7tDtvjqUYlDvBw1Y00WIShColqrfnFp3+mLI5AGmyyg
QBpq5fkeLgfn1vIYOXfTUNPGl0mhpN+Gsqw0fw6D1lBzPjfaF/lrUCfH3it5ZrmY
KJAsuAFSn5Oic2M7UMOo3QUTBAoqUkrfOQsQHnKJFR2KYXnlmF6hI06CnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIRSh9A0vjM3jKms5QqUwVJIl1HMB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPLuyJED
wt8hZDPZPWiPojOgqqaxwVohHoeTaNucucg/5sWlegmzGxNotZU3lmS4A+h8cfGw
iJnZc6Qkf9UPmQXmsP7VdIk6LKv4JzXtobhKoA8z1hnMYEOhHqUuUwr4KKjWsNWm
lI0YDI/3+UiJAJAh5cw3rlkTcYo5nsovVC8R1N8sq4cW1h6lcQNj7DvoL/vEZ/Sj
7dIv8wLi66z6zZHsWVHbcT8zSi10HRnTDT7R0tLjeOik/GO7ZPpwG95XzkZLdRvv
gqqEF7Gcc0TnF6fhwPyBkLaptJbB+B9lnMCzsjSK5n9vNOOPi+E7lQGHMiUTTY1J
NQ1b25O5l5Jnmw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:05 2025 by rpki-client