Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: IxwEj0bPO9OyQ9FCQF5Mw+uxFp+93HjwCU16bfH3MHw=
Subject key identifier: 58:E0:13:B7:E3:85:C0:73:66:A9:EB:F8:C3:39:4D:07:71:B6:95:6E
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 019A0F3A507F53F3DB00D5A25E1629AAF2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0EE1
Signing time: Thu 23 Oct 2025 04:01:11 +0000
Manifest this update: Thu 23 Oct 2025 04:01:11 +0000
Manifest next update: Fri 24 Oct 2025 04:01:11 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 7AsyB0LFsmIbaPIBcUJ8y11A7/7s/HHnFCh+Bvo4Jkk=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:50:7f:53:f3:db:00:d5:a2:5e:16:29:aa:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Oct 23 04:01:11 2025 GMT
Not After : Oct 24 04:01:11 2025 GMT
Subject: CN=58e013b7e385c07366a9ebf8c3394d0771b6956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:0e:3c:f6:b8:16:9a:a8:b8:89:6d:b6:b4:
4a:d5:26:a8:15:fd:43:69:76:e0:e2:ac:af:74:21:
84:7c:c5:4e:df:42:bf:fe:6f:ab:28:96:c7:0b:42:
3a:db:e6:15:a3:4a:57:72:75:a7:89:bb:57:1f:01:
f5:75:16:fa:c8:d1:e7:02:9d:f3:80:47:fb:43:d2:
bc:8e:e9:cc:85:cd:fc:50:f1:48:45:f3:30:96:e4:
e3:79:9b:4a:ea:07:9e:ae:d4:71:a8:f8:bd:da:b8:
ed:2c:04:80:1d:f6:64:69:0c:a7:10:8d:24:da:91:
39:5e:7f:10:ef:0e:9d:63:d9:bb:96:f4:12:29:3e:
cd:ef:37:15:0b:da:64:77:27:80:59:a2:73:f1:17:
97:10:6e:55:8c:85:89:c0:fc:3d:88:9e:79:12:4c:
2e:d0:5f:41:84:05:78:25:24:89:96:33:de:a4:ed:
f5:31:52:c5:91:8e:87:e5:6d:bd:ad:cb:5e:01:46:
b3:6e:a7:50:5f:cb:29:21:51:4b:c5:17:83:b5:01:
a1:c0:3f:66:98:fc:ff:fa:3a:7b:58:e3:e0:ef:90:
cd:7e:d3:15:26:9c:6b:bb:92:72:45:2a:07:68:00:
bf:e2:da:02:e0:34:64:2a:c4:85:64:e1:b9:6c:e2:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:13:B7:E3:85:C0:73:66:A9:EB:F8:C3:39:4D:07:71:B6:95:6E
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:23:ab:23:d8:be:dc:1f:1e:40:2d:ab:5a:b0:81:b2:37:
6f:22:51:4f:bf:0e:3f:6c:48:2d:2e:a7:b1:ca:39:83:ce:64:
42:ce:fd:83:0d:68:4a:86:a1:09:e5:0b:7b:3d:df:97:04:c2:
54:b0:2f:f5:3d:68:0d:23:c0:cd:83:b7:a2:33:7a:a7:15:05:
d8:ed:9c:4f:e0:9f:70:26:ae:ab:fc:90:f8:d2:fa:25:d1:4f:
f6:8e:c5:82:bf:86:15:d4:a4:12:b3:20:67:37:b8:92:1e:9c:
2c:55:f7:ef:44:a0:2c:57:49:2c:c8:6c:2e:77:02:64:82:90:
96:00:16:29:85:91:32:af:b5:66:b4:3b:52:9a:9f:bb:f7:93:
8a:e6:59:a9:3e:31:84:b3:41:ca:2b:7a:73:57:07:d0:c9:17:
82:2a:22:e9:ec:d1:f5:24:ec:32:84:4e:72:47:6a:c0:f1:19:
56:4a:2b:50:2d:6b:80:e3:14:0b:51:de:f8:15:02:4b:38:6b:
31:3f:13:29:01:b9:30:e6:14:16:b7:bb:cd:09:d2:9a:cd:04:
0c:c1:e4:44:89:c6:77:a2:47:e9:04:c1:dd:ae:ee:e0:25:00:
4d:43:50:aa:5b:22:8b:50:3e:03:5f:b7:17:7d:35:02:c3:19:
2b:b4:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:21:51 2025 by rpki-client