Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: Dl6fE/3kUwuyBsE0nFHqghAZwYqzD3iQVfQGhBhVdkU=
Subject key identifier: 0F:EB:42:B5:E1:FA:DE:5E:CC:75:F2:2B:D8:1F:62:B8:4A:72:5E:6D
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019A4E4F63CAA2A057EF61003E7FBA2A67B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: I8WZCQRUhNguhVjPAsHYkJFG/wyot80iubUtnc1wYIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:63:ca:a2:a0:57:ef:61:00:3e:7f:ba:2a:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=0feb42b5e1fade5ecc75f22bd81f62b84a725e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:e1:a4:4d:7c:65:f3:ca:51:85:b4:2c:c2:
a0:1d:b2:c2:f3:00:5d:e8:3c:df:e1:23:f6:ad:44:
ac:3c:27:76:e0:cf:4d:e3:94:94:22:08:83:b4:c7:
c5:57:ad:72:85:1b:70:25:b1:08:04:02:d7:19:ed:
80:8b:71:9d:5d:b2:e0:e0:df:20:f7:ed:2e:64:12:
15:ae:c1:12:77:34:77:9c:b4:56:72:57:2a:e3:82:
5c:2a:61:31:64:1a:c4:05:1f:6e:9a:22:0f:3d:67:
71:f4:7d:66:3b:77:db:b0:d9:92:4f:74:93:f8:53:
8e:1c:46:e4:d3:11:e6:83:09:de:a5:4e:ab:0c:44:
1d:21:38:cd:52:1e:dc:26:c7:93:bf:ff:50:f9:88:
16:7a:9e:6c:59:37:1f:21:0c:78:81:3d:0b:68:e2:
44:8f:cf:9f:ae:d7:24:ce:23:23:27:42:8c:ed:a5:
ac:f4:cd:ec:6a:52:2b:ca:e2:fa:56:2e:9f:4a:68:
d7:3d:6c:14:d7:55:e6:34:0f:37:99:5b:07:a7:f6:
7a:32:b7:24:7e:40:24:64:05:85:92:6f:a4:1a:d3:
d7:83:c3:65:c3:41:3a:fd:f0:e9:f8:05:71:07:7c:
50:de:74:99:3d:60:0f:24:64:49:e7:d8:ed:8d:b7:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:42:B5:E1:FA:DE:5E:CC:75:F2:2B:D8:1F:62:B8:4A:72:5E:6D
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:09:a6:3e:63:95:51:b9:3f:94:90:54:23:7e:a3:78:08:
00:f1:a5:d7:a2:50:89:8f:12:ef:ca:5d:f7:37:7d:82:4f:5b:
5a:8e:20:4d:8c:bb:8f:6e:44:d6:84:15:80:c4:d7:bd:bc:b7:
3c:e0:75:fb:13:c9:1f:f7:5f:f3:4c:c6:2a:5d:6a:7c:3a:ff:
2d:97:56:fc:d7:74:7c:a8:fe:4d:32:d9:a1:71:4b:67:00:a1:
22:b1:0a:da:ba:01:cd:51:37:9d:b6:60:36:3f:9d:cc:56:14:
8b:91:7a:bc:56:19:fb:fc:7f:b3:65:23:05:b1:8f:59:9f:cd:
92:6a:97:3d:7a:f9:ac:4a:60:8f:b5:b6:99:2f:19:7b:6d:30:
c7:39:80:63:23:1f:fc:8b:86:9c:42:17:22:8e:0f:b1:3a:1a:
14:52:2d:05:e2:db:5e:fa:ff:34:bc:a0:77:18:b6:b0:81:de:
29:aa:fb:5e:64:f9:ba:0e:d0:c8:79:24:90:c5:2e:fc:7e:0e:
60:fa:15:47:63:c2:c1:63:1d:49:d7:51:ad:8d:98:57:05:a4:
ea:0f:1c:44:02:c9:88:ad:6a:0e:02:66:08:d5:cb:3b:42:f2:
e8:8d:ce:6e:ca:af:76:1f:7c:31:18:3a:6a:19:78:23:e0:8a:
28:14:79:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2PKoqBX72EAPn+6KmeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzQwZGM3ZThiOGE3ZThkN2ZlYWYxZTA4MjAzZDg3OTE2
Y2IyOWQwHhcNMjUxMTA0MTAwMDE2WhcNMjUxMTA1MTAwMDE2WjAzMTEwLwYDVQQD
EygwZmViNDJiNWUxZmFkZTVlY2M3NWYyMmJkODFmNjJiODRhNzI1ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+zhpE18ZfPKUYW0LMKgHbLC8wBd
6Dzf4SP2rUSsPCd24M9N45SUIgiDtMfFV61yhRtwJbEIBALXGe2Ai3GdXbLg4N8g
9+0uZBIVrsESdzR3nLRWclcq44JcKmExZBrEBR9umiIPPWdx9H1mO3fbsNmST3ST
+FOOHEbk0xHmgwnepU6rDEQdITjNUh7cJseTv/9Q+YgWep5sWTcfIQx4gT0LaOJE
j8+frtckziMjJ0KM7aWs9M3salIryuL6Vi6fSmjXPWwU11XmNA83mVsHp/Z6Mrck
fkAkZAWFkm+kGtPXg8Nlw0E6/fDp+AVxB3xQ3nSZPWAPJGRJ59jtjbc8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/rQrXh+t5ezHXyK9gfYrhKcl5tMB8GA1UdIwQY
MBaAFBE0DcfouKfo1/6vHgggPYeRbLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2Ut
ZjA4NDI3MjA4MTU1LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2UtZjA4NDI3MjA4MTU1
LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPsJpj5j
lVG5P5SQVCN+o3gIAPGl16JQiY8S78pd9zd9gk9bWo4gTYy7j25E1oQVgMTXvby3
POB1+xPJH/df80zGKl1qfDr/LZdW/Nd0fKj+TTLZoXFLZwChIrEK2roBzVE3nbZg
Nj+dzFYUi5F6vFYZ+/x/s2UjBbGPWZ/NkmqXPXr5rEpgj7W2mS8Ze20wxzmAYyMf
/IuGnEIXIo4PsToaFFItBeLbXvr/NLygdxi2sIHeKar7XmT5ug7QyHkkkMUu/H4O
YPoVR2PCwWMdSddRrY2YVwWk6g8cRALJiK1qDgJmCNXLO0Ly6I3Obsqvdh98MRg6
ahl4I+CKKBR5tA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:48 2025 by rpki-client