Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: z3Mc0zaMx3M9knL9EeQtYckxFCAisfVvGFDKXOhRMtY=
Subject key identifier: BE:15:BF:94:DB:22:9D:19:91:D2:21:E8:F8:0F:B3:C4:26:ED:13:5E
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0196760CD31C1903A9EC3559E9E39B6EB0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:14 +0000
Manifest this update: Sun 27 Apr 2025 07:01:14 +0000
Manifest next update: Mon 28 Apr 2025 07:01:14 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: LS17IXkx7DT79m8HHXJMLrahVOCL/r4R6nHRGPYOsaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d3:1c:19:03:a9:ec:35:59:e9:e3:9b:6e:b0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Apr 27 07:01:14 2025 GMT
Not After : Apr 28 07:01:14 2025 GMT
Subject: CN=be15bf94db229d1991d221e8f80fb3c426ed135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:fe:52:aa:dd:c9:73:70:a0:f6:3d:47:8e:
25:7e:98:1f:87:b5:0c:a1:2d:0c:5b:84:1c:e0:35:
cd:37:9b:cc:ea:d5:8d:17:45:1f:f6:8d:fd:68:4b:
35:81:82:21:ba:56:82:9f:b7:e5:69:74:e3:92:6f:
ba:75:61:89:d1:92:96:b8:57:91:39:02:8d:39:82:
ee:81:de:92:74:09:8f:c7:af:49:f0:21:3c:78:60:
34:c3:3b:6a:34:bc:bc:dc:59:fc:9d:8c:10:6d:4b:
fa:83:30:7b:39:0d:90:58:f5:49:0f:55:b3:55:4b:
98:b9:b7:3c:4e:36:3e:ea:8c:85:c9:fb:47:83:e4:
9b:f1:5c:67:ae:c1:f9:09:17:b5:ee:75:6d:b3:07:
1d:2d:92:37:da:9f:d0:a2:e1:d6:e6:79:ed:04:92:
5f:25:b1:af:61:d7:1c:f2:a9:ec:ea:4e:21:e7:86:
c9:11:23:89:4f:29:f6:35:c1:10:98:02:45:e7:17:
26:f0:83:a3:a5:87:ef:a0:60:7c:98:d7:44:45:85:
44:25:bc:db:2f:82:43:e1:68:37:e8:f1:6e:01:34:
75:25:cf:a1:99:ca:75:e2:03:b1:c9:2a:33:3c:21:
49:fb:dc:92:bb:45:16:14:47:b8:03:4f:00:af:c0:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:BF:94:DB:22:9D:19:91:D2:21:E8:F8:0F:B3:C4:26:ED:13:5E
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:b6:0b:bb:e9:47:96:d6:32:38:5b:42:8b:44:76:25:d4:
59:16:7e:0c:60:56:ef:e8:d6:bd:da:fc:ea:34:03:c2:88:88:
37:b6:4f:66:ea:ee:a5:be:f8:6f:cd:29:0c:f7:f7:a5:a7:9c:
08:e0:c4:16:47:e9:2a:9b:02:6e:bb:03:e5:54:f8:4a:5f:1d:
ac:2d:82:7b:0f:fd:df:25:f8:0e:21:dc:a1:54:d7:97:ba:ee:
21:e7:20:aa:f3:be:50:a0:61:d6:9c:73:03:50:bf:23:cb:d9:
55:7d:7c:85:1a:61:6e:3b:ec:fc:b8:a4:1e:18:70:3c:f8:b8:
23:68:7a:5a:33:1b:57:99:dc:d0:ca:15:69:a2:47:d2:b4:9b:
6a:e7:98:2b:ff:22:c2:11:e3:3c:84:af:cd:50:b6:c1:4c:25:
91:07:40:ed:43:4a:4b:47:09:4d:c0:2d:27:fe:c8:29:ce:cf:
a8:bd:62:92:2d:0c:cf:6d:40:a2:46:83:1e:9f:bb:e5:9b:a9:
82:2c:1a:ce:3b:25:6f:5f:43:51:b4:6c:c5:a9:33:df:f0:4c:
c4:25:57:1c:f5:ff:5e:8c:af:aa:61:3a:a2:d2:ff:0c:57:e4:
f6:d8:62:92:ee:cb:8a:d8:02:ad:86:84:58:19:d6:46:f8:57:
b3:ed:6b:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DNMcGQOp7DVZ6eObbrCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4
NThiY2IwHhcNMjUwNDI3MDcwMTE0WhcNMjUwNDI4MDcwMTE0WjAzMTEwLwYDVQQD
EyhiZTE1YmY5NGRiMjI5ZDE5OTFkMjIxZThmODBmYjNjNDI2ZWQxMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzif+UqrdyXNwoPY9R44lfpgfh7UM
oS0MW4Qc4DXNN5vM6tWNF0Uf9o39aEs1gYIhulaCn7flaXTjkm+6dWGJ0ZKWuFeR
OQKNOYLugd6SdAmPx69J8CE8eGA0wztqNLy83Fn8nYwQbUv6gzB7OQ2QWPVJD1Wz
VUuYubc8TjY+6oyFyftHg+Sb8VxnrsH5CRe17nVtswcdLZI32p/QouHW5nntBJJf
JbGvYdcc8qns6k4h54bJESOJTyn2NcEQmAJF5xcm8IOjpYfvoGB8mNdERYVEJbzb
L4JD4Wg36PFuATR1Jc+hmcp14gOxySozPCFJ+9ySu0UWFEe4A08Ar8DZUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4Vv5TbIp0ZkdIh6PgPs8Qm7RNeMB8GA1UdIwQY
MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt
Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz
LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTC2C7vp
R5bWMjhbQotEdiXUWRZ+DGBW7+jWvdr86jQDwoiIN7ZPZurupb74b80pDPf3paec
CODEFkfpKpsCbrsD5VT4Sl8drC2Cew/93yX4DiHcoVTXl7ruIecgqvO+UKBh1pxz
A1C/I8vZVX18hRphbjvs/LikHhhwPPi4I2h6WjMbV5nc0MoVaaJH0rSbaueYK/8i
whHjPISvzVC2wUwlkQdA7UNKS0cJTcAtJ/7IKc7PqL1iki0Mz21AokaDHp+75Zup
giwazjslb19DUbRsxakz3/BMxCVXHPX/XoyvqmE6otL/DFfk9thiku7LitgCrYaE
WBnWRvhXs+1rpA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:16 2025 by rpki-client