Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: Wkl3nfyIEzjP5i3GPaFq0FOTQf2riuAUXEDWEH4D+Rs=
Subject key identifier: 64:76:03:E2:45:C2:37:10:53:80:15:5C:A8:A7:7E:F5:A2:54:0A:44
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 0196C2A6E8DF8FE37E52207C39C7E1702B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 04:00:40 +0000
Manifest this update: Mon 12 May 2025 04:00:40 +0000
Manifest next update: Tue 13 May 2025 04:00:40 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: M0mMsbUmi4GN5CU19im6mWrgx7p3FEN38/2gEwfmjYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e8:df:8f:e3:7e:52:20:7c:39:c7:e1:70:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: May 12 04:00:40 2025 GMT
Not After : May 13 04:00:40 2025 GMT
Subject: CN=647603e245c237105380155ca8a77ef5a2540a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:a1:60:b3:03:9f:0f:8c:7b:3f:b3:f1:fe:
3e:9c:3c:75:78:8f:04:75:9c:61:0b:bc:10:00:db:
a0:a2:e0:dd:9d:28:66:23:d2:42:50:3f:c5:02:b4:
2d:f9:ae:bf:f1:a9:f4:cc:5a:6e:5e:85:3d:b3:0d:
64:02:1c:a5:6c:63:30:7f:e0:72:ea:02:f7:fa:86:
24:9e:c3:bd:79:0f:da:70:f9:c7:21:83:b4:72:9d:
08:84:6f:e0:ee:a3:65:82:4b:41:6e:ff:ea:48:69:
9d:3e:52:ad:be:2e:e2:83:20:c6:e0:03:dc:5c:83:
a9:49:a4:91:96:13:b9:57:b6:32:a1:1e:51:06:d9:
0e:f5:0c:58:4d:fc:94:d3:ad:d7:41:05:07:d7:a8:
3c:b4:15:a8:cc:07:6b:e3:71:92:cb:a9:34:4c:43:
2a:94:90:7e:e8:35:08:ad:07:95:72:71:a3:45:37:
1b:49:75:e6:9e:e4:48:09:07:dc:24:ba:b3:22:04:
47:77:80:1a:c6:e3:dd:c4:5e:b2:cb:23:fc:18:ec:
8b:0f:ce:4d:6d:00:02:f4:95:0d:df:aa:b6:e4:1e:
4f:6e:1e:5e:6c:9a:22:e0:51:36:c0:44:8a:f0:18:
41:69:ea:83:65:af:45:a1:8c:dd:4a:e4:4c:2e:c8:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:03:E2:45:C2:37:10:53:80:15:5C:A8:A7:7E:F5:A2:54:0A:44
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:2d:0b:d1:5b:a2:43:7c:78:2b:52:dd:50:3f:68:78:41:
eb:1e:d2:2e:ad:e3:c1:27:50:f5:18:6b:bf:92:ae:11:2c:5d:
55:c2:17:63:50:8c:fb:75:00:33:57:f0:eb:9f:f8:8b:97:c2:
ca:63:69:1e:e1:64:96:a4:db:d0:ba:54:19:29:63:21:2b:b6:
0c:30:04:c1:a0:e5:6d:ad:19:b0:7e:d9:89:de:38:1d:5d:6a:
a9:77:33:f1:1b:a6:36:17:20:63:ed:8b:84:61:56:60:f9:de:
b1:4a:76:aa:a0:22:b5:f2:85:77:d1:a7:9f:56:10:bb:eb:51:
a9:8a:d9:26:87:b2:a8:32:ab:cf:ee:64:ca:ed:ba:65:b6:32:
76:3f:ba:6d:61:5a:92:3b:af:1e:a8:4a:91:3a:0f:da:52:4f:
c1:57:cd:20:c7:e7:61:16:c0:1d:43:c3:83:e0:b5:1f:1a:9c:
c4:80:5d:0e:b8:65:17:3f:01:eb:30:c2:60:b5:14:9b:8f:f7:
c3:1f:c4:01:a6:26:0a:2b:34:44:32:af:7b:09:df:89:0a:06:
d3:68:82:94:1d:48:c9:04:25:bd:36:be:aa:d6:3f:fc:12:e0:
95:41:ad:78:af:9d:d9:be:b7:f1:68:25:32:ac:6e:93:34:36:
34:77:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:45:40 2025 by rpki-client