Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier: FsGCnf84HylfYg2Nq9iz3L5LE3i/m2hVMWvi3Rzk9Mo=
Subject key identifier: 6D:F1:70:F5:34:C3:1E:F4:CB:D8:08:E2:4D:63:68:A4:F4:7B:AE:F4
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019747E7CBFD39DF655AC363ED26C9AB7973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 01:01:02 +0000
Manifest this update: Sat 07 Jun 2025 01:01:02 +0000
Manifest next update: Sun 08 Jun 2025 01:01:02 +0000
Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: pfpAvZ0f7wOBuE91r/eHMUxG9l/COJ/QS2mMwJu2AlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:cb:fd:39:df:65:5a:c3:63:ed:26:c9:ab:79:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Jun 7 01:01:02 2025 GMT
Not After : Jun 8 01:01:02 2025 GMT
Subject: CN=6df170f534c31ef4cbd808e24d6368a4f47baef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:1f:19:df:d3:77:5f:b0:4a:af:26:d9:ef:
4d:6f:c5:b5:7b:81:14:10:1a:57:c0:7a:e6:da:04:
96:67:34:31:67:5d:c5:75:1a:b3:bc:49:e8:fd:8b:
1e:b7:7d:c8:de:ee:83:c6:b0:ab:cb:da:5c:24:91:
c7:f5:2e:a3:24:36:62:59:a2:57:88:af:38:4a:4a:
c9:e8:fb:53:9b:67:ca:5d:31:b5:92:bf:6c:c3:44:
12:a6:1f:a2:6e:f5:4b:3d:9c:70:f8:55:a9:11:d0:
19:e8:2f:51:0e:5e:62:17:29:4a:99:20:33:ec:af:
0a:ea:b9:39:e1:2e:bb:59:a8:7f:d6:82:61:8f:99:
3d:d1:00:21:e0:ca:e5:fd:ce:a2:14:8e:0a:e9:07:
f1:f2:8a:67:c3:7f:d5:91:2e:6c:b0:4c:c8:88:cd:
aa:e4:13:41:b7:04:3e:1e:da:0e:55:69:d8:09:47:
2f:1a:f7:29:bb:10:e2:90:0c:55:28:63:b7:ea:17:
d9:ae:ca:22:95:2d:82:81:e9:f8:54:15:8d:2d:22:
c2:9b:76:40:72:d6:c2:16:ef:42:78:30:8d:4d:1f:
98:96:be:02:92:d6:2b:04:2e:71:be:ab:8b:86:0f:
7f:03:24:7c:3d:7a:ff:01:1e:3e:0a:b9:a9:cc:16:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:70:F5:34:C3:1E:F4:CB:D8:08:E2:4D:63:68:A4:F4:7B:AE:F4
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:78:00:23:25:ae:0a:38:2d:23:bd:51:fa:cc:de:a8:08:d7:
15:71:a0:08:cd:71:5e:3e:63:a7:3c:77:f5:a7:cf:8d:1a:05:
2f:ab:8c:06:53:54:46:42:ef:92:96:1a:9c:40:23:a1:d1:43:
10:b3:21:2d:d2:ab:b5:96:b3:68:a0:bb:fa:6f:b2:41:79:03:
7f:12:38:64:fb:23:ae:5f:12:a5:dd:57:fc:5a:43:b8:57:93:
70:14:ea:6a:48:14:34:4d:64:7f:1c:a8:97:f6:b4:2f:32:fe:
cc:e3:24:bd:a1:da:95:03:77:d7:27:ea:c2:f6:47:0a:76:77:
d8:c9:aa:e4:b2:05:a3:8a:97:b9:60:30:79:ec:71:d9:09:b3:
4d:ea:ac:66:02:6f:7f:21:27:a4:d9:3c:04:5b:00:71:f4:5e:
a4:b2:f3:19:44:9c:36:bc:9a:c4:1f:22:90:97:62:23:66:41:
8d:48:15:8d:a7:13:88:26:a4:dc:62:2c:d1:1e:31:a2:0c:bc:
95:ef:8f:b2:a7:c6:6e:aa:a1:64:13:47:17:77:f0:38:84:f0:
73:08:25:c7:60:6e:0f:33:fe:06:17:b0:be:84:8b:eb:90:fb:
31:1f:53:8f:aa:91:1a:fb:16:e8:87:c4:26:8e:bf:b4:ed:5a:
fb:c2:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:28 2025 by rpki-client