Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: Udv/7N+dFwwqL2L+h/QA/PhCgk+FF8vRj+2u7LSRJAs=
Subject key identifier: DE:BC:12:43:3B:63:1C:CF:8B:F8:E1:29:CC:45:20:34:AA:D6:7A:11
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0198D4735355385D585A13D78891C06EE947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:04 +0000
Manifest this update: Sat 23 Aug 2025 01:03:04 +0000
Manifest next update: Sun 24 Aug 2025 01:03:04 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: JsNe3YUb6HMQIz14o3nKMZi3wvVYBnewTFXMBX0mfeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:53:55:38:5d:58:5a:13:d7:88:91:c0:6e:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Aug 23 01:03:04 2025 GMT
Not After : Aug 24 01:03:04 2025 GMT
Subject: CN=debc12433b631ccf8bf8e129cc452034aad67a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:c0:8f:81:79:c1:c8:c1:3d:0d:46:91:ec:
0e:a7:7b:a4:b8:04:76:0c:a9:30:53:4c:55:04:49:
95:e2:ad:39:e5:7f:3d:df:a5:97:59:af:d0:9c:42:
8a:ef:b9:6d:58:c5:81:c3:11:ae:b0:5a:ff:eb:32:
92:4c:32:a5:ab:73:27:68:9a:a8:5d:6e:b3:74:ef:
98:c7:cc:2b:7f:9e:d1:5f:6d:45:4a:68:c4:01:88:
34:07:77:6b:de:6c:f0:ab:68:9a:c8:fd:ab:47:5e:
5d:0d:fc:9c:4f:c9:d6:aa:19:4e:30:1e:87:0b:30:
b3:07:37:1c:17:51:17:e1:89:1f:3f:69:cb:47:8e:
d4:55:c2:8e:f1:74:ff:a6:91:62:5c:64:b2:73:6e:
ec:6a:49:3a:98:58:6f:28:20:49:e4:92:50:98:a7:
4d:29:a1:5d:49:e3:c0:75:b2:8d:7b:a6:3e:dd:c8:
58:e6:c1:4d:8e:26:36:77:25:6c:91:1e:71:01:62:
24:54:0d:dc:d6:52:cb:9a:e7:67:08:5a:9c:99:e8:
4d:0a:ae:d5:da:f8:e2:48:6f:25:67:85:67:86:ec:
b1:11:12:75:d3:5a:7a:0f:c1:0e:d8:ed:33:09:de:
aa:58:3c:50:ef:0f:a0:7d:6e:c0:2a:2b:bb:fd:72:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:12:43:3B:63:1C:CF:8B:F8:E1:29:CC:45:20:34:AA:D6:7A:11
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7b:0b:65:24:81:f6:b4:5a:7a:ad:5b:65:a8:ad:e6:db:9a:
73:c3:46:4e:99:33:6b:06:f3:f6:62:06:a3:9d:cf:b9:fc:ee:
5c:19:a6:71:f7:fa:1c:4a:f2:34:3c:e8:99:e1:f6:1d:60:2a:
72:9c:c2:e8:b4:b4:4a:e7:39:1b:47:e9:46:48:8d:63:13:6e:
00:30:77:76:79:a6:f7:a7:5d:64:5f:d8:c6:3f:02:69:30:a4:
52:90:f4:3b:03:b6:77:a3:8a:25:4a:f9:b8:e0:03:72:52:d1:
0f:00:02:bd:9b:f1:b8:b0:31:cf:cb:10:a4:9e:fe:47:97:8f:
42:53:06:59:fd:96:19:52:6b:32:b2:5f:64:38:4b:f9:31:2b:
53:19:90:a2:f5:5b:19:2a:cc:23:db:a6:fa:97:8e:20:a2:ce:
99:2d:16:69:1d:02:71:53:d3:27:74:fa:25:ca:59:c4:65:ab:
be:14:a8:0e:7a:64:20:e0:d9:ea:45:8d:f4:ef:36:2a:a4:d0:
1e:d9:3e:55:63:00:7e:79:92:57:0a:ba:38:a9:3e:18:9a:19:
54:a1:d8:24:e4:cf:f8:56:fc:bc:cf:3b:9b:f8:23:c2:bc:64:
9b:c0:51:0b:2b:6f:7a:83:d7:14:40:ca:df:62:04:33:ed:c0:
32:39:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:21 2025 by rpki-client