Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: pD7hiiAs05dZbEfHxjE4xPMV3IZ/jcIDLqO3AvqmV4w=
Subject key identifier: F1:EF:70:3D:5C:65:32:A0:87:D3:61:E0:F8:91:97:B2:0A:6D:E3:9A
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019A7112AE0F76307C2000CBA35D4A14C64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: Hxw2cjCYLxrSgqBSZsjIrmRi3UbIR7l9x9Slt2lDSlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ae:0f:76:30:7c:20:00:cb:a3:5d:4a:14:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=f1ef703d5c6532a087d361e0f89197b20a6de39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:5b:68:92:85:f3:5c:9e:74:c7:b8:82:e3:
86:80:11:cd:4f:c9:dc:b5:7d:1a:8e:1a:7f:38:a3:
de:2f:c3:d6:ac:1b:85:69:8f:d4:44:b4:3e:76:fd:
94:ac:a2:be:be:45:9d:3e:6b:7f:de:a2:78:57:9c:
2f:f7:47:6f:ef:06:dd:d5:48:84:04:d5:dc:1d:02:
d5:2e:1d:47:96:36:2c:42:e1:73:45:2b:2d:c9:27:
ba:bb:be:0c:95:6b:e6:42:6f:74:e0:80:0a:69:70:
ed:f3:39:18:94:77:88:9a:77:14:c6:da:ef:d2:9d:
d8:26:b2:2a:78:fa:4e:4d:f8:65:ca:70:30:4a:68:
32:4c:ee:fe:bb:f2:7a:9c:a9:46:ed:26:cb:17:f1:
35:e0:81:5f:1d:6f:71:1f:49:7d:57:6c:46:04:78:
31:91:ae:24:be:ba:9d:86:9f:ca:a6:ab:c7:fb:58:
45:ca:63:2f:4f:29:55:d4:d6:ac:2a:57:a1:36:9c:
7c:00:1b:13:6e:64:a0:2a:e4:23:ef:89:b5:59:13:
56:d4:3f:58:b7:85:5c:71:96:cb:e6:44:f8:75:5e:
7f:df:8b:07:81:72:1a:81:f0:a3:f3:cd:0f:68:d8:
b0:3d:70:4c:36:5a:c3:df:b1:06:af:18:8d:0e:7f:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EF:70:3D:5C:65:32:A0:87:D3:61:E0:F8:91:97:B2:0A:6D:E3:9A
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e4:8d:2c:24:24:e5:a6:d5:63:46:9b:83:f2:ef:fb:a4:1d:
81:b9:eb:37:82:c4:cc:53:95:6b:0f:5d:fd:c8:5e:bf:27:95:
d5:cf:dd:29:d6:f4:a5:3f:6a:6b:4d:27:11:bc:fd:04:7c:26:
d4:b8:fb:04:60:a8:13:6a:77:67:9a:36:47:6b:f0:a5:b7:65:
49:7c:bc:f6:a7:9b:b3:4c:50:53:fb:77:1f:a0:b4:50:5b:aa:
3e:30:17:99:8e:3b:b5:bb:2c:56:d4:d9:7d:8c:32:c4:58:21:
90:02:f5:03:21:fc:84:24:e5:ef:a5:5c:2c:51:30:0e:be:c9:
63:bd:52:69:f3:d9:3a:0b:77:7e:0c:02:64:8b:21:34:1b:8b:
cb:1f:d7:d7:a6:03:53:60:7f:b4:e6:5c:06:92:6b:bc:46:b7:
65:2c:11:f5:bd:59:a3:b4:a1:f2:aa:06:d5:6b:ec:36:62:59:
1e:8d:7a:ca:c7:bd:b6:70:a6:01:7b:97:ad:77:ab:cd:38:32:
17:32:14:6f:99:2e:5f:30:88:a3:c1:ce:35:1b:d8:ac:2b:5a:
bf:8f:50:85:b4:8b:36:8b:6e:79:06:3e:89:56:59:28:d1:92:
88:5e:42:22:20:16:b9:40:5a:bf:b4:6d:e3:44:ba:a0:18:5f:
cb:06:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client