Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: ohzbnZTICjVAUT33E5k+6LpnHMs08ebbVYwU/9dAiEM=
Subject key identifier: AE:C6:17:F0:F1:55:0D:51:C1:CF:0D:5D:4F:34:B3:E2:82:6B:1C:D2
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0199FBEB912043B2F2F7FB50652C8150E160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: 28mTFv+UzXPBd6jF2tEcTedp0zdK4IoGQij3ZS/pJ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:91:20:43:b2:f2:f7:fb:50:65:2c:81:50:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=aec617f0f1550d51c1cf0d5d4f34b3e2826b1cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:5f:7b:01:05:c4:f0:ab:14:f4:6c:b0:21:
09:20:50:58:3b:4d:a4:20:e8:6b:8f:09:22:b1:9a:
f6:f1:15:44:7a:05:85:00:97:49:d1:91:03:05:8f:
df:a1:5a:8d:92:62:5c:ed:55:5f:4f:1f:1c:4c:86:
34:a0:1f:27:ad:b8:d3:f4:7a:a8:dc:a8:62:35:77:
16:af:08:b4:55:76:40:19:19:92:75:2b:8d:7c:d0:
63:e9:5c:8b:12:09:ff:a0:8a:de:92:2a:70:75:f6:
97:2d:e8:21:eb:cf:05:8d:3f:f3:24:79:03:b6:f6:
ce:86:03:80:18:75:cd:05:1b:ca:0f:5e:18:5b:d8:
00:31:d2:90:b4:d3:9e:57:4e:0b:4c:6c:e8:a7:1e:
f6:f1:7a:0e:dc:f7:b1:cc:62:16:d3:ba:c5:81:e6:
b0:83:91:d2:a8:bb:e9:46:65:55:f7:96:8d:80:a7:
f8:48:c1:4b:72:ec:78:78:32:2f:17:43:67:f8:9d:
d1:ab:7f:10:9d:05:5a:15:93:a3:a6:30:a6:99:57:
93:15:fe:ba:91:6e:da:47:ab:1d:c5:b2:1f:d7:2a:
12:56:9c:34:83:cd:9a:52:b1:fc:fc:4e:98:7d:87:
00:9a:ca:2a:38:c9:00:69:ba:9c:d8:de:6f:a2:32:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:17:F0:F1:55:0D:51:C1:CF:0D:5D:4F:34:B3:E2:82:6B:1C:D2
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1d:5f:33:f9:d7:ac:87:62:1c:20:ef:e7:ad:ef:52:4f:02:
87:8f:83:c6:de:c8:9c:a3:db:2c:f9:21:42:62:83:50:79:be:
b3:17:65:0e:be:69:13:c2:dc:99:7a:6c:82:a0:90:ef:b7:bf:
1d:57:49:62:96:0b:7a:06:70:5d:24:a0:ba:73:a7:45:c4:d5:
fa:fe:16:84:39:70:04:bc:ec:5f:56:d2:bc:f2:3e:e0:ea:8c:
c4:8b:ff:0e:c3:81:1a:eb:04:69:fd:30:b2:00:63:d3:f9:0c:
f3:3a:a2:84:a1:25:a6:bb:ae:28:fc:7c:5f:bf:48:b6:6f:a8:
7c:4a:28:2f:5c:bf:ee:3f:b5:63:dc:e4:c8:d7:74:1b:59:fd:
60:80:ec:e7:20:8b:2e:7e:25:95:fc:91:a6:30:34:ab:54:40:
dd:67:59:08:9b:fc:94:c0:61:e8:91:42:88:0f:d1:26:1d:0a:
d2:9f:a9:12:62:cc:79:d1:06:84:a6:a7:2e:42:a4:34:f4:c3:
14:71:d3:0b:10:e3:8f:5c:7b:cf:51:4a:71:bb:77:70:bf:8e:
c8:1a:c1:26:06:da:a9:b4:ef:17:98:30:04:81:8f:a1:d0:df:
83:18:b4:97:54:7d:b5:22:d7:24:ce:94:7a:5f:e1:2a:4b:29:
6b:e3:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:25 2025 by rpki-client