Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: V5JejHVf4U7R3tO72wY1C1YbgZXjSWekQcafe6mLOyA=
Subject key identifier: E7:8B:7C:28:3B:D7:59:8A:88:F1:8F:C3:C1:D1:AD:F1:2A:AB:1D:B5
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0196C15E2E9AF001FC486B1DCEFD71EFA3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 22:01:37 +0000
Manifest this update: Sun 11 May 2025 22:01:37 +0000
Manifest next update: Mon 12 May 2025 22:01:37 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: ZPSRVGPZHxEnPCFLDa6RWMp9Ib2liXnLXiDwjN77Np8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5e:2e:9a:f0:01:fc:48:6b:1d:ce:fd:71:ef:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: May 11 22:01:37 2025 GMT
Not After : May 12 22:01:37 2025 GMT
Subject: CN=e78b7c283bd7598a88f18fc3c1d1adf12aab1db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:2d:6d:c7:67:08:bb:e7:72:b2:70:73:8d:
7e:6c:cb:95:ca:b4:59:16:3e:ba:fb:23:73:19:bd:
78:e1:bf:b9:30:1e:13:2c:6f:d8:b2:ce:ef:54:68:
db:8f:aa:4e:f7:b6:2a:9f:77:e5:af:64:3e:18:91:
7b:1e:cf:4a:44:d1:9c:7a:70:7a:17:a1:02:91:62:
35:82:a4:da:83:53:1a:71:2d:ae:51:76:29:f8:1f:
72:3a:c2:e1:2a:e8:14:68:00:42:76:11:e5:bd:35:
7a:dc:be:48:1d:17:9b:34:f4:78:77:0e:40:04:e1:
12:f3:13:37:3e:68:82:21:9e:46:51:e9:4a:20:e0:
0a:65:aa:9d:24:1d:cd:57:42:ce:13:7b:dc:43:c8:
62:de:4b:49:3f:39:f9:2a:62:a4:75:ec:f8:99:a3:
99:a9:f5:87:7d:6f:c8:31:1a:6c:e2:0c:42:fc:c9:
3e:d6:0e:c8:d1:fa:08:4f:31:b6:32:06:d6:d0:d1:
da:1c:34:e5:9b:dd:af:cf:1f:e3:30:a0:33:fb:21:
55:fe:7e:a5:af:9b:bd:b7:50:4a:28:0c:6f:63:7e:
77:ed:78:19:4e:f4:eb:ea:6b:9c:d4:85:d8:59:4e:
00:b5:7d:87:3b:c7:8d:45:03:f6:6f:56:05:44:eb:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:7C:28:3B:D7:59:8A:88:F1:8F:C3:C1:D1:AD:F1:2A:AB:1D:B5
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:18:2d:82:a7:d4:36:8b:f0:9f:4c:7d:ae:35:6d:f1:76:85:
bb:fe:08:8d:c8:d6:df:93:46:c0:eb:2d:2f:9b:bb:8c:28:61:
49:af:89:53:2f:17:c2:f2:69:67:76:df:5e:0c:34:64:06:12:
fa:84:4c:ee:96:9f:cc:0a:7d:fd:ce:2b:b2:ef:32:c5:3f:c7:
85:7f:9d:a7:af:26:24:bb:b1:c5:42:f7:50:58:b0:29:08:4a:
a7:ca:86:2a:17:a6:c0:ab:d0:89:d6:82:ee:e3:80:7c:f0:79:
c0:ca:1a:ba:76:bd:79:7f:06:58:9c:7e:a3:77:34:10:92:54:
15:b6:e5:d0:c6:b6:87:e7:dc:a0:fe:38:51:3c:b1:1b:76:e1:
00:c4:23:bc:28:08:df:94:54:e9:7e:c1:f5:d5:f4:cc:44:0d:
ee:f6:92:70:74:7a:08:86:f5:86:c5:da:ce:36:d3:58:bc:07:
2f:50:64:75:9b:82:2a:31:bb:92:43:bf:e0:f5:e6:e2:4d:7d:
b0:ed:f6:6a:ec:ff:4d:f5:b6:e9:98:57:97:aa:a6:02:5b:7d:
9d:a6:6a:d6:c2:5d:9f:c2:21:a0:05:67:87:13:04:f3:07:af:
67:97:7f:09:76:6c:94:6e:30:f4:71:8b:a8:ed:87:96:f3:7b:
cc:29:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:26:58 2025 by rpki-client