Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: Oh8wz7IvYUue6uSb/+qxbml16pumesJQPCprPjK4Oqo=
Subject key identifier: A0:48:EC:9C:EB:D8:EC:4F:C6:6C:72:24:3D:2A:16:A0:DA:05:1D:7A
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0197696186D8022F848926E2A25BEC8927C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:01:28 +0000
Manifest this update: Fri 13 Jun 2025 13:01:28 +0000
Manifest next update: Sat 14 Jun 2025 13:01:28 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: HDGYOu0qkrRhx31/LE19CHgHjG0r5krcKEqT8ocHGZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:86:d8:02:2f:84:89:26:e2:a2:5b:ec:89:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Jun 13 13:01:28 2025 GMT
Not After : Jun 14 13:01:28 2025 GMT
Subject: CN=a048ec9cebd8ec4fc66c72243d2a16a0da051d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:67:2b:5b:9d:fb:57:2e:47:3a:ca:f8:fb:
2f:87:3b:28:f1:87:19:9b:0e:6a:88:ca:2e:7a:ca:
b9:38:3b:22:a2:1f:cd:b8:a1:45:cb:c8:a7:c8:46:
6c:d5:7e:79:e3:13:97:f6:f8:cf:d1:a0:2b:1a:75:
20:33:86:53:3c:66:f7:e3:31:b7:a9:5d:66:23:0d:
f3:b5:9f:96:eb:89:85:35:0b:d0:85:b5:29:1c:35:
4b:3f:48:ac:5b:b1:78:bf:69:bf:dd:82:5f:69:10:
a9:da:41:15:a5:0e:dd:b6:15:41:27:78:aa:62:f8:
16:9a:2c:15:79:6a:69:20:d9:98:fe:97:b3:81:5d:
a9:8c:d3:e8:1a:90:31:4c:fa:66:25:a4:39:21:73:
29:ef:11:da:ca:57:ac:d3:24:d7:bf:ac:8c:b7:cd:
95:e6:ec:9a:e4:b0:b1:df:fe:11:1d:7c:b0:da:d9:
7d:50:97:ac:a7:50:49:b3:6f:f3:1f:51:47:c3:9c:
9f:fa:71:5f:6d:06:6b:ac:ed:50:31:a6:0e:c7:86:
54:3c:24:6a:bc:a1:73:39:b9:5a:3c:b6:3d:73:bd:
97:f5:23:74:f7:03:fb:2b:40:f4:ab:44:6d:a4:8d:
b5:cd:f5:b6:08:aa:72:eb:99:fe:c4:c3:da:82:9a:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:EC:9C:EB:D8:EC:4F:C6:6C:72:24:3D:2A:16:A0:DA:05:1D:7A
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:62:58:53:62:59:d2:b1:1f:eb:29:48:9c:92:72:92:49:
59:b1:da:83:b7:42:27:09:30:14:38:fc:dc:83:fb:57:75:fe:
3f:74:8e:b2:3f:fc:0e:a3:ed:b2:7e:d7:1e:5a:1f:e4:79:90:
e9:be:da:a5:b4:67:7b:83:1b:61:21:40:8a:1a:5e:3a:c1:2c:
c0:4b:42:46:46:2b:75:5e:08:e5:85:a9:3e:ad:8f:a9:4b:a5:
e3:cc:78:e8:73:1a:99:9d:9a:90:31:2e:22:e5:6c:a6:09:3c:
a0:04:c3:37:3b:e2:af:12:0f:c7:91:d9:a2:4a:58:22:fd:14:
ad:93:c2:eb:44:c6:78:75:1e:d6:3f:53:42:5b:4c:95:3a:f3:
36:4d:a0:5c:cf:31:2b:4c:09:2c:3b:e4:5e:95:11:ca:c7:3a:
e6:60:87:40:84:6a:78:4b:ca:c6:3d:7c:1a:96:dc:47:ab:49:
d6:92:51:78:2d:32:a2:a4:df:aa:c5:52:5e:63:fa:a3:15:2f:
b4:78:45:21:38:df:d6:be:d1:da:04:6b:98:1a:a9:53:9c:f5:
7b:4c:83:f3:3a:8f:31:d5:44:bc:28:e0:88:5c:d7:d5:e4:5f:
2b:5c:9a:30:01:84:04:d8:15:ef:ac:94:91:8f:c7:4a:85:1a:
67:8e:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:55 2025 by rpki-client