Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: nqdXtMZdUWlVob60KtZkn5uKbphLpaGmhK8ShOxWHdc=
Subject key identifier: A2:38:73:D3:F4:AC:9E:52:E4:B5:16:DD:84:95:9A:AD:A1:B0:C0:95
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019770759BCDCCF5EB95D6BE9EB940E1C53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 22:00:45 +0000
Manifest this update: Sat 14 Jun 2025 22:00:45 +0000
Manifest next update: Sun 15 Jun 2025 22:00:45 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: UlqFBDMEcgHA6CCK6pFfizcJnkpq5nBPpKls7mqVbR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9b:cd:cc:f5:eb:95:d6:be:9e:b9:40:e1:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Jun 14 22:00:45 2025 GMT
Not After : Jun 15 22:00:45 2025 GMT
Subject: CN=a23873d3f4ac9e52e4b516dd84959aada1b0c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:38:2b:a4:09:60:57:ec:4c:7a:ee:dc:7c:
02:90:4f:20:f3:c1:7f:98:1e:fa:0f:b6:e7:fd:c1:
3e:5d:26:bc:87:72:d4:51:d9:94:bc:94:53:e3:9c:
ef:37:0b:47:e0:e5:1f:ec:15:8a:eb:25:c4:a0:70:
38:7d:31:43:38:cd:3e:c5:e8:dc:3f:82:da:dd:33:
b9:e5:f6:76:25:48:75:96:fe:96:5a:52:01:e5:ad:
bd:97:44:07:00:7b:a3:1c:2f:8a:39:78:a6:0e:3a:
91:f9:65:88:ed:97:87:d3:f0:a3:90:3c:71:cb:ab:
b8:3f:c0:20:47:35:79:2c:d5:fc:ef:1e:99:22:84:
f8:e9:21:65:5d:05:cd:65:5b:36:40:36:0b:ec:92:
3f:79:44:da:36:32:75:5c:b0:8d:5c:95:ba:39:4f:
08:21:62:09:71:35:f9:e4:1b:18:5a:fc:b9:fe:f3:
cc:b5:dc:2f:9d:cb:4d:c8:b6:1b:9d:53:cd:2d:a4:
8d:7c:39:fc:1c:d2:50:d5:93:58:ca:16:52:ca:48:
db:83:a3:73:36:1b:55:d4:3e:d7:cf:b7:bb:d8:dc:
3c:7f:e6:5c:59:df:cc:42:06:55:cf:a3:d9:5f:67:
37:51:a9:b9:d7:7e:d0:7c:cc:fd:ea:a9:2a:a0:96:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:73:D3:F4:AC:9E:52:E4:B5:16:DD:84:95:9A:AD:A1:B0:C0:95
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:61:ba:f9:70:0a:61:c8:28:de:98:a7:0e:49:e5:3f:07:79:
26:7e:58:7b:e7:21:0e:2e:e7:a5:1d:e7:60:64:79:f4:e4:04:
85:f3:c3:48:d7:22:aa:98:4d:32:3d:d4:c7:ac:22:7d:e5:9e:
76:8f:40:58:c0:aa:bb:43:81:57:9b:e1:02:55:14:9c:bd:8f:
aa:dd:f4:40:e3:00:3a:ac:f3:c1:70:66:80:83:08:d3:b1:28:
22:7e:28:65:ee:bb:9a:73:32:10:64:bc:58:f7:a6:b7:0d:9a:
78:e3:66:79:05:d6:0e:96:5d:06:92:ad:96:51:97:09:88:25:
ca:50:d4:ec:5c:a2:22:72:31:84:97:34:3c:b4:29:1d:3e:b8:
67:6c:b1:1a:9b:61:e5:3c:d5:70:87:4c:8d:c4:f0:a7:bc:3e:
ff:6c:3b:c6:e7:58:8c:e3:9d:36:71:3f:21:59:d3:22:43:84:
93:f3:7c:7d:84:dd:06:dd:2f:a2:2d:54:87:9b:31:5b:68:26:
76:25:c8:eb:da:68:35:9e:de:cc:81:b6:05:76:41:9e:2c:84:
e8:67:f1:b5:f9:33:6a:83:2a:27:7d:97:f9:ee:ba:d4:6f:94:
57:b8:5c:fd:57:3c:13:d2:5a:60:3c:92:da:7c:42:58:9d:b5:
51:56:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:41 2025 by rpki-client