Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: hdWD/V7qo7TQynFMXIrRF14mb8hY5OrmvzaNPEDs3qs=
Subject key identifier: 40:78:51:1A:38:36:B5:DE:59:A4:DE:57:86:02:DC:D2:6D:89:66:90
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0197B88EE59E4ABAB23E7225918161C964DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:01 +0000
Manifest this update: Sat 28 Jun 2025 22:01:01 +0000
Manifest next update: Sun 29 Jun 2025 22:01:01 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: jEpylL9xWCLX3wPvFPrGf9KtAnZjgo/mdQXTLZn023o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e5:9e:4a:ba:b2:3e:72:25:91:81:61:c9:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Jun 28 22:01:01 2025 GMT
Not After : Jun 29 22:01:01 2025 GMT
Subject: CN=4078511a3836b5de59a4de578602dcd26d896690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:b5:64:ee:ee:7b:af:cb:d2:aa:85:83:a6:
ed:30:6f:56:61:a8:a8:82:9d:2a:ec:6b:77:bc:ce:
ca:da:91:5a:df:bd:e1:e5:12:50:86:0d:b6:30:40:
0c:19:b5:f1:00:fa:5c:09:b1:fa:d5:d1:1c:f7:78:
26:98:b1:d9:18:55:44:63:97:6a:c2:14:75:f2:11:
1f:3c:46:94:9c:e4:a4:2f:59:13:52:78:43:42:8b:
f4:dc:94:8a:f1:12:98:ca:44:fd:49:73:70:e0:19:
52:5e:0f:ed:59:90:83:0d:04:ba:f9:f0:de:df:b4:
15:9a:27:6a:52:01:fa:fb:67:a9:a7:11:e1:eb:23:
aa:4b:f2:d4:32:72:26:2a:e7:e8:49:9f:43:44:c6:
ed:82:f4:48:c2:70:06:04:9d:dd:b3:0a:5d:0f:9d:
55:e8:45:38:18:09:76:53:2b:e8:e5:f0:99:6f:a9:
93:48:92:00:72:e1:3e:bd:00:b3:ea:99:9a:c8:d6:
72:40:75:56:ec:54:d1:d1:16:7c:bf:6b:84:0b:67:
d6:a2:e7:55:9b:37:4d:8c:77:9f:11:c6:90:78:d1:
8b:f8:21:11:3e:ba:94:cf:f5:7e:f1:1b:7a:ca:d2:
cb:5c:e5:92:52:d8:2d:e1:0f:39:48:2a:3a:65:82:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:51:1A:38:36:B5:DE:59:A4:DE:57:86:02:DC:D2:6D:89:66:90
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:d3:65:86:57:07:e4:38:6d:29:40:7c:f2:f0:5d:2d:56:
c0:25:fb:2d:67:e5:ae:d2:c3:85:c0:da:e4:be:38:7d:87:01:
d1:2d:ee:9c:a1:6a:af:d2:2d:dd:b9:c2:6c:99:87:de:1f:e2:
b4:11:00:ab:c0:58:9d:5c:63:96:af:8d:19:8c:52:50:4e:b5:
76:5a:4e:3a:c6:aa:19:e5:c4:78:ef:16:9f:30:f2:af:60:b0:
fa:8b:c4:f8:68:fa:db:52:6e:90:17:b5:21:ff:d6:c8:2d:1d:
a6:b6:90:26:da:43:64:d4:d2:73:83:89:67:9c:a3:7f:ab:3c:
1a:af:68:e6:24:da:5a:21:fb:b0:87:77:29:18:48:2e:b6:25:
f0:f5:fa:86:05:c7:a7:19:a5:09:5e:70:cd:14:b5:2f:bf:ad:
76:97:8b:7c:4e:87:d8:49:57:1f:30:20:13:84:c9:b5:78:d2:
98:3f:ec:58:fe:8d:78:76:f7:0a:e7:46:02:97:9d:1b:e8:cd:
aa:21:43:4b:47:51:b8:63:65:71:89:0e:e9:4f:c9:91:32:38:
75:fc:42:87:23:12:29:38:ef:bd:42:0d:4d:d8:b2:20:1b:b9:
c5:b7:ae:49:7a:78:d9:cb:9f:06:45:1c:da:b3:5f:f2:ef:a4:
03:6e:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:31 2025 by rpki-client