Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: HY8N9a2sx9unkBMUAhOOCcEIoMxEpMgF1UKjWKmIr28=
Subject key identifier: 9A:CE:43:EA:59:CA:D1:55:E2:90:CB:36:CD:7E:05:2A:B5:2D:A7:DA
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 019A2289486E64E809E644F3FE52E3F5067C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 11D1
Signing time: Sun 26 Oct 2025 22:00:13 +0000
Manifest this update: Sun 26 Oct 2025 22:00:13 +0000
Manifest next update: Mon 27 Oct 2025 22:00:13 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: yYFn/BRPr/DB5QcYx5u3PD7EPM+12cT7Mfh3/ts0yn8=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:48:6e:64:e8:09:e6:44:f3:fe:52:e3:f5:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Oct 26 22:00:13 2025 GMT
Not After : Oct 27 22:00:13 2025 GMT
Subject: CN=9ace43ea59cad155e290cb36cd7e052ab52da7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:6e:48:b4:58:51:83:8c:94:1c:7a:76:85:
15:80:d1:1c:4f:17:1f:e3:e9:4a:95:e3:a9:64:1d:
0d:1e:d2:27:37:0b:2a:5d:8f:40:1d:07:bb:a7:6d:
2b:f7:98:8b:05:2d:fd:68:4e:aa:0e:f3:68:11:88:
99:2d:39:26:a6:9a:23:3f:85:6b:43:2c:a9:0f:27:
4f:05:08:1a:bc:57:49:8d:48:10:01:55:be:5a:38:
6c:f6:54:f0:95:03:d6:b9:be:cf:ec:64:17:21:51:
e0:45:e8:20:46:b9:8e:51:44:9e:d1:89:b0:82:39:
9b:3d:e8:3b:3a:b1:78:87:a2:cf:04:54:5e:e8:b8:
c5:85:1e:ac:2a:98:9b:d3:f7:ae:bc:2c:1e:74:78:
f1:ea:bb:06:e5:44:39:30:c4:f5:19:ca:e5:b6:29:
93:55:94:a5:01:a1:d6:84:6c:59:7d:7a:99:1e:f5:
9c:8c:48:24:22:71:02:59:b1:7b:1d:2b:db:e1:06:
a2:73:a6:f7:03:a5:0e:ab:a5:33:8a:df:d4:bd:16:
19:34:e6:fb:c1:c9:4d:ef:f1:ad:ca:e3:2c:d8:c8:
3f:9e:67:c1:73:5a:8f:20:22:e0:0d:0e:7b:08:0c:
83:9f:8c:17:65:08:77:11:f7:a2:e4:1c:34:f8:f8:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:43:EA:59:CA:D1:55:E2:90:CB:36:CD:7E:05:2A:B5:2D:A7:DA
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:81:c6:8d:0d:c2:e6:e7:a6:af:35:d9:73:9e:01:28:c9:
64:a1:da:c8:11:ae:55:bc:ae:54:9c:8a:58:70:34:b3:a4:de:
09:f2:a2:8b:6e:07:4f:a3:5f:5d:0c:52:d2:f9:3d:3a:2e:c1:
be:45:ea:30:f6:75:04:73:12:98:f5:bd:fe:61:38:5b:8c:2f:
fe:06:59:ed:0e:30:e3:f6:20:9c:78:c2:08:e3:48:44:ed:42:
a1:0c:e1:3e:84:c3:56:69:33:eb:05:eb:b1:f3:66:17:e5:09:
93:ae:a8:c7:ef:1c:9c:31:ca:b7:67:29:a8:b7:e1:78:e2:dc:
3c:5f:30:31:c3:ba:1c:49:ba:6c:d8:21:5f:72:0a:80:4a:f6:
fb:ce:08:c8:14:dd:4d:bb:30:49:65:45:0a:91:e1:f7:ef:e2:
bc:20:12:ed:5f:5b:f1:b8:01:25:de:0d:0c:3c:ae:99:fb:07:
b9:db:57:26:99:83:a9:df:3e:2a:aa:b3:e3:fc:a5:27:40:26:
8e:47:b1:00:d9:03:28:bb:ee:45:74:4c:c4:7a:e5:c1:c5:05:
f2:4b:24:6c:86:c7:8c:21:ca:d9:69:c6:32:e7:44:09:e5:7a:
12:25:60:64:f6:4e:7d:af:1c:8d:b5:41:94:e4:e9:b6:e9:88:
f4:4f:0c:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiUhuZOgJ5kTz/lLj9QZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2YwM2JmMTQ1MWVlZTYyZWE3MjQwNWZhOGI2NGFiZmFl
M2M0ZTkwHhcNMjUxMDI2MjIwMDEzWhcNMjUxMDI3MjIwMDEzWjAzMTEwLwYDVQQD
Eyg5YWNlNDNlYTU5Y2FkMTU1ZTI5MGNiMzZjZDdlMDUyYWI1MmRhN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx89uSLRYUYOMlBx6doUVgNEcTxcf
4+lKleOpZB0NHtInNwsqXY9AHQe7p20r95iLBS39aE6qDvNoEYiZLTkmppojP4Vr
QyypDydPBQgavFdJjUgQAVW+Wjhs9lTwlQPWub7P7GQXIVHgReggRrmOUUSe0Ymw
gjmbPeg7OrF4h6LPBFRe6LjFhR6sKpib0/euvCwedHjx6rsG5UQ5MMT1GcrltimT
VZSlAaHWhGxZfXqZHvWcjEgkInECWbF7HSvb4Qaic6b3A6UOq6Uzit/UvRYZNOb7
wclN7/GtyuMs2Mg/nmfBc1qPICLgDQ57CAyDn4wXZQh3Efei5Bw0+PiTjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrOQ+pZytFV4pDLNs1+BSq1LafaMB8GA1UdIwQY
MBaAFBE/A78UUe7mLqckBfqLZKv648TpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQt
ZGViZTU3NDdiMjkzLzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMmJlMTQtYWVjOS00YWRhLTg3ODQtZGViZTU3NDdiMjkz
LzEvRVQ4RHZ4UlI3dVl1cHlRRi1vdGtxX3JqeE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI26Bxo0N
wubnpq812XOeASjJZKHayBGuVbyuVJyKWHA0s6TeCfKii24HT6NfXQxS0vk9Oi7B
vkXqMPZ1BHMSmPW9/mE4W4wv/gZZ7Q4w4/YgnHjCCONIRO1CoQzhPoTDVmkz6wXr
sfNmF+UJk66ox+8cnDHKt2cpqLfheOLcPF8wMcO6HEm6bNghX3IKgEr2+84IyBTd
TbswSWVFCpHh9+/ivCAS7V9b8bgBJd4NDDyumfsHudtXJpmDqd8+Kqqz4/ylJ0Am
jkexANkDKLvuRXRMxHrlwcUF8kskbIbHjCHK2WnGMudECeV6EiVgZPZOfa8cjbVB
lOTptumI9E8Mqg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:22:06 2025 by rpki-client