Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: aeH9B5E4JxwQa0wZtAsnwF5elTVMYYF0T00sBTZzKGU=
Subject key identifier: 29:A3:EF:88:52:DE:5D:A4:79:1C:06:CA:6F:AE:31:0A:60:F5:A2:16
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 019921B0E6D3DD9A3E0CCEB696BB2B2E1742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0E66
Signing time: Sun 07 Sep 2025 01:01:05 +0000
Manifest this update: Sun 07 Sep 2025 01:01:05 +0000
Manifest next update: Mon 08 Sep 2025 01:01:05 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: zsuRt6oaZd2i1InFqZEOrjOIBdLEh8trUNPibiEFyzk=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e6:d3:dd:9a:3e:0c:ce:b6:96:bb:2b:2e:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Sep 7 01:01:05 2025 GMT
Not After : Sep 8 01:01:05 2025 GMT
Subject: CN=29a3ef8852de5da4791c06ca6fae310a60f5a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:1f:57:7f:a8:13:08:cd:57:59:ce:06:36:
81:4a:4d:ca:96:bb:75:37:5a:a9:a2:48:92:f3:8b:
52:e0:c2:b9:c9:72:0f:87:fe:b4:22:8d:2c:18:ae:
be:f8:1b:72:28:7b:14:4b:99:ec:2d:c2:17:bc:d5:
9b:02:a3:cb:1d:d1:9f:44:44:a2:f5:99:65:d8:61:
60:67:cb:51:65:a5:43:e4:b5:d3:73:df:1e:62:4f:
22:e3:d3:78:98:b3:9e:33:85:c2:48:37:be:af:34:
e0:2b:aa:fb:7d:4a:0b:66:2a:f4:e3:47:d6:25:aa:
6b:00:52:6e:f8:bf:0d:fd:68:98:51:33:45:6d:46:
fe:cd:0c:6d:ef:ed:c4:dd:26:71:ca:48:3e:88:80:
56:87:27:9c:cd:51:0d:9a:24:d5:ce:e4:5f:3d:bf:
ca:19:93:2e:8f:99:7e:e2:f8:d1:5a:f7:27:74:67:
9e:06:6d:24:e3:ff:35:71:c0:34:42:75:19:24:48:
98:24:67:82:bc:34:17:af:44:f7:52:5d:67:98:4a:
3d:6b:d4:83:25:09:9d:35:d4:bc:a0:d7:ca:5d:9b:
f3:d4:94:f2:06:56:f9:3e:bc:01:a5:73:c2:10:e9:
c9:97:4f:c4:bd:a9:d5:41:5e:37:10:c8:31:3d:9b:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:EF:88:52:DE:5D:A4:79:1C:06:CA:6F:AE:31:0A:60:F5:A2:16
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fe:a4:f0:34:7b:0b:92:72:07:88:6a:0d:c9:97:9c:80:fd:
fb:c8:ed:32:6f:d4:f8:7d:22:f7:d4:ee:17:da:b9:8e:a4:34:
35:7c:06:29:a0:3c:c6:4c:3f:95:05:db:4b:bc:3a:88:6b:8a:
98:d8:97:dd:b8:6c:81:69:bb:83:4b:ef:20:94:32:f5:60:bc:
40:99:f3:45:b9:40:8d:08:0a:8a:c2:7a:cd:80:3b:64:fe:2a:
1c:ac:4b:dc:44:65:f8:2f:78:33:76:c3:59:80:48:8a:cd:9a:
7d:7b:8c:7b:dc:17:f1:f2:b2:d0:b1:d6:95:b9:2a:22:a8:76:
e1:39:2d:a8:00:7a:34:08:5d:3b:d2:c4:27:00:fc:84:84:44:
44:57:fa:95:a8:dd:99:fd:b8:5b:c3:e5:f2:bf:13:f3:7b:4c:
0a:d9:20:e7:91:ec:8d:5f:98:a5:b2:d5:87:64:ec:c4:48:0b:
01:f4:41:1d:a7:ef:70:ae:0b:c1:fc:64:7d:8c:63:ea:46:f6:
65:38:a6:dc:7c:d2:52:b3:a7:a8:11:04:48:56:e4:16:9f:84:
5a:73:3f:11:9e:6b:0e:66:29:a0:01:bd:22:8a:61:72:b0:0e:
d7:25:4b:4a:ea:0d:aa:a7:de:b8:b9:fc:94:8b:3c:06:8e:b1:
15:c9:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:13 2025 by rpki-client