Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: 2aaUM+jWwUm6vKmgZahNI0CjWtsIJvsrgY1K8/x45/w=
Subject key identifier: 4B:41:79:95:4A:0E:25:72:36:BE:D5:E8:D0:57:E9:D1:E4:72:B0:ED
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 0199FD34506D93FB4546A13289D8B2F7962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: AIcPZXF17ip0QaEC0PHliPE3mr78oQVBI5Kf8PJH6C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:50:6d:93:fb:45:46:a1:32:89:d8:b2:f7:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=4b4179954a0e257236bed5e8d057e9d1e472b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:23:57:1f:ad:fe:de:3b:ec:a1:99:68:75:
22:78:8f:f5:57:fd:cb:90:bb:40:f9:b1:98:55:bf:
2f:4c:e7:b3:76:a9:96:d7:42:e1:98:d0:11:db:a0:
3c:08:3c:ee:28:84:1f:c5:09:c2:c8:14:27:f8:8e:
2b:52:39:39:74:0b:c3:8a:58:8a:a3:96:ca:11:f1:
f3:b3:c0:f1:b5:5c:df:80:ac:be:27:c1:55:41:b7:
a9:e1:8d:56:20:d3:c2:23:96:26:82:80:ff:a7:36:
f5:6d:5a:4e:bf:60:27:91:c6:71:21:4d:bc:5e:7d:
0f:1b:6d:cc:10:9f:62:d3:65:14:75:5c:80:32:71:
ce:8a:c7:33:51:f8:d6:99:b1:f9:f2:82:29:b7:89:
84:fa:1e:4d:78:9a:5f:fa:e4:46:99:4a:de:c4:6c:
45:5b:6f:47:88:79:df:8b:ee:25:29:1b:96:7f:66:
c1:ff:1d:71:28:8e:b8:b2:a1:c9:14:80:a4:54:7a:
1c:47:c1:b9:f4:52:22:d0:43:81:80:3a:b6:2c:e6:
5f:4a:41:3e:fd:c2:40:61:1e:20:c7:d1:33:4b:b5:
66:e7:13:38:c6:34:7e:95:99:32:bf:d6:1b:a0:e1:
69:6f:d7:14:15:92:e6:f7:53:cc:71:a2:72:57:63:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:79:95:4A:0E:25:72:36:BE:D5:E8:D0:57:E9:D1:E4:72:B0:ED
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:81:54:4f:8a:80:0a:ec:d4:25:63:14:4c:05:a4:be:1a:8f:
f3:0d:33:19:5c:40:56:f3:31:8f:ea:90:1d:fa:b6:e6:5d:9e:
d2:4c:34:ed:76:be:c1:f9:d3:23:ba:c5:28:29:bb:84:e2:33:
91:96:59:55:76:5c:16:57:a9:f5:74:27:fc:a6:69:b6:90:44:
fc:9d:eb:c9:a6:cf:f8:a5:bb:36:1e:01:7f:88:0d:c9:6e:9f:
04:0c:b0:cb:72:e4:75:99:d6:3b:9d:77:8c:b1:22:b8:b1:5d:
1c:3f:a0:e7:d1:63:2d:96:5b:cd:22:8e:db:4e:54:9d:27:98:
83:8e:87:f3:fe:21:e9:ff:fc:12:66:4c:27:9d:2c:0d:fa:95:
be:8b:73:26:e8:a6:e8:58:52:80:b6:35:52:e4:da:63:47:4b:
e6:42:af:53:0f:ba:c8:fe:4a:ab:a8:b9:b3:3f:b5:17:a7:b0:
a2:16:61:e5:22:61:1b:3a:2b:a2:6a:d8:65:c1:2c:cf:4e:d0:
df:19:bf:c6:cb:7d:84:01:8d:fa:12:40:50:af:ff:b4:53:49:
70:f2:64:18:5b:98:6b:79:5b:02:34:72:0c:2f:0f:ad:f3:a5:
99:bb:14:65:e7:0b:90:77:c6:f5:b4:f9:fc:35:63:ac:5f:c4:
dd:94:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:45 2025 by rpki-client