Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: /JCXDUHxUe41zf/i23Bxit8Qsz4alZnQvr/7kEnP3fI=
Subject key identifier: C1:E4:F4:30:E8:8A:A1:AC:77:AE:A8:07:2C:EA:0B:7E:2A:C1:60:1E
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 01974A438F0A8D3824C22E143CF6B57D23E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 1058
Signing time: Sat 07 Jun 2025 12:00:30 +0000
Manifest this update: Sat 07 Jun 2025 12:00:30 +0000
Manifest next update: Sun 08 Jun 2025 12:00:30 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: mXtgb8F9Z4UNKPR7wATx5cCC3VkVbj42sIEMddLj3VE=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:8f:0a:8d:38:24:c2:2e:14:3c:f6:b5:7d:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: Jun 7 12:00:30 2025 GMT
Not After : Jun 8 12:00:30 2025 GMT
Subject: CN=c1e4f430e88aa1ac77aea8072cea0b7e2ac1601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:39:c3:10:50:47:47:23:51:3b:02:b4:2e:
9e:f3:e1:04:68:2d:aa:c7:46:74:37:36:f3:d1:7f:
5d:b2:a0:ce:58:eb:3c:52:ee:05:9c:4c:50:e2:5b:
f3:22:5d:e5:f5:91:1c:43:2b:5c:68:99:11:05:61:
ec:c3:44:6c:57:7d:dc:bf:c3:da:43:1e:2a:fb:4d:
50:c9:81:65:91:b0:c0:2d:25:54:9a:44:0c:4c:6f:
bf:2e:72:4d:2c:fb:df:ac:ca:d0:4b:51:6b:07:48:
55:52:e0:eb:ee:61:18:6f:e4:a2:05:af:18:00:31:
b2:d0:5a:04:e7:7f:f9:3f:c5:a9:ef:0f:f4:56:57:
ba:e3:76:c7:a9:35:5d:aa:c1:84:45:b9:b8:02:70:
88:b6:ec:63:54:18:68:27:25:91:1e:3c:de:7e:08:
32:08:18:64:3d:37:fc:7a:de:c6:b3:63:16:6e:d0:
1e:4d:5f:36:20:03:92:1f:b7:d7:95:c4:f4:00:8b:
4b:3e:9f:83:3a:86:70:a0:82:23:92:e5:d6:df:a9:
d2:40:1e:ad:bc:ae:ad:ca:8f:ad:68:61:c3:11:41:
f4:18:a5:e8:8a:73:a7:b7:54:95:a9:d0:fb:e1:5f:
e6:f7:b2:2b:95:ca:ee:13:e8:6f:09:5d:95:9d:6b:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:F4:30:E8:8A:A1:AC:77:AE:A8:07:2C:EA:0B:7E:2A:C1:60:1E
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:55:51:74:c3:77:83:64:60:a9:67:0e:17:5c:dc:1d:96:
84:34:5f:31:3c:5e:92:aa:cf:1d:8b:16:10:02:27:d6:26:70:
d1:39:57:1e:30:a1:0a:39:da:7f:1b:86:de:c7:95:c3:32:32:
db:37:d0:4c:9d:bf:02:e8:f1:0f:a7:98:ad:b2:f3:b3:d5:15:
fb:1d:3e:bc:b4:35:19:5d:3b:b5:fe:26:4c:55:be:25:3e:9f:
cd:e3:b6:5c:13:06:54:60:04:99:cb:ec:a0:0e:71:5b:33:ae:
8e:94:15:3d:1c:e0:84:8c:f4:61:00:6f:ab:01:9d:f0:9e:e7:
60:1b:54:38:bf:f8:9b:06:3a:04:9a:42:07:19:f3:7e:cc:51:
9a:2a:91:a2:20:2c:ce:f2:61:a0:4b:9c:72:84:7f:62:92:4d:
c6:27:64:5b:9d:28:a1:3e:29:57:23:f8:c2:ae:eb:26:78:e3:
fa:65:a5:bf:fb:0c:35:f7:9a:f7:1b:85:a6:1d:1e:ff:32:5c:
66:55:c6:db:87:b9:37:41:42:fc:e9:22:a8:5f:a4:d9:68:ea:
35:a8:2f:5b:7d:34:93:33:97:75:26:35:d3:93:52:13:83:62:
19:14:5b:ee:e9:71:f0:8d:47:d2:ac:af:ec:ac:a7:29:f2:f8:
27:33:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:40 2025 by rpki-client