Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: IFUYTYzMhQXAKkKIUtxpQjG3oZcfsn5fGA9KhdaQtKA=
Subject key identifier: 8A:9A:C3:BD:B7:51:6D:1B:2A:1D:29:F3:80:2F:1D:06:39:DD:F5:D5
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0199239ECBE9EB32B3E47AFC904CFBB88FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:00:33 +0000
Manifest this update: Sun 07 Sep 2025 10:00:33 +0000
Manifest next update: Mon 08 Sep 2025 10:00:33 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: XFaYDWT3aeM0w24PJp6C30/5u0PamBpYpPz8kXZKZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:cb:e9:eb:32:b3:e4:7a:fc:90:4c:fb:b8:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Sep 7 10:00:33 2025 GMT
Not After : Sep 8 10:00:33 2025 GMT
Subject: CN=8a9ac3bdb7516d1b2a1d29f3802f1d0639ddf5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:7e:47:e5:2e:a5:46:2c:d8:42:eb:83:9f:
eb:94:bb:9b:b3:62:b1:67:42:cc:01:fe:bf:e0:19:
ef:24:fa:9b:10:f2:7b:e6:ed:5f:9b:9a:9a:76:5a:
64:46:25:8b:b8:69:75:df:09:28:94:69:c2:0c:68:
97:4d:a3:c6:e2:53:cc:db:82:bf:dc:80:9d:ae:85:
de:f7:ae:12:5e:81:9f:ec:58:76:af:c8:76:5c:a9:
c6:9b:ea:cb:cb:07:75:5c:d3:04:4e:dc:c3:c5:53:
c5:c7:a0:30:d1:31:36:48:f8:14:e5:61:d7:55:c9:
c1:1c:d6:97:f3:97:ba:13:a2:83:9a:04:bb:cb:61:
5a:f1:e0:3e:82:56:1b:73:3a:17:af:3c:85:bd:41:
98:f6:5e:4b:8a:b7:50:c8:e8:e8:b5:b1:af:cf:44:
22:1d:24:24:0b:70:f8:fd:25:f9:ea:67:e0:ba:a1:
a5:da:56:9e:92:2c:01:b1:e8:e7:0f:48:95:a8:d1:
cc:df:d9:15:7a:e2:2c:3a:94:be:0e:83:e8:f6:66:
77:4f:5f:ac:d7:91:6f:3c:19:7a:56:0e:2f:6e:bc:
4e:62:34:b4:2d:83:51:db:c3:24:4f:88:86:03:70:
f8:57:98:78:b7:1b:a8:70:3f:3d:9a:c7:47:bf:31:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:C3:BD:B7:51:6D:1B:2A:1D:29:F3:80:2F:1D:06:39:DD:F5:D5
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:63:8f:79:49:a7:d1:79:0e:65:35:f9:b7:f9:4b:76:f6:
24:ee:78:bc:b9:b9:91:09:ba:52:8c:0d:18:c7:2a:30:9d:07:
7f:0c:9f:89:b1:ce:08:fd:e1:33:09:41:fb:22:e0:ae:ff:0a:
8a:6c:fc:68:c9:27:3c:7b:ba:78:8d:84:90:f9:28:2a:85:3b:
64:fe:de:ea:13:d5:ba:ac:26:b5:a4:db:1f:9c:e7:a4:fb:5f:
4b:02:e2:ff:16:61:95:d3:2b:1d:c6:75:4b:ed:04:75:ca:a8:
2e:76:08:ea:1f:f8:bd:39:f4:7a:61:9d:4f:eb:ad:38:42:13:
f1:8a:72:58:85:24:f9:57:7e:85:6a:b7:a0:f6:71:d1:1c:19:
b7:be:2b:e6:ca:fa:67:ef:36:5c:fd:7f:be:65:5a:65:23:14:
8b:c4:93:0e:32:61:43:98:fc:6c:08:31:e7:8b:53:cd:bb:8d:
86:d2:82:1a:ba:86:cd:95:29:b8:da:33:eb:68:d7:00:e7:70:
5e:49:ec:32:68:88:69:77:c7:69:f2:51:5a:1f:54:44:c6:c3:
27:74:42:7b:29:8c:3f:f6:f3:ce:f6:d2:e5:3c:ae:c0:85:c6:
1c:18:ee:58:d7:09:78:3a:e6:7b:ba:64:b2:5e:75:c8:3b:d0:
27:59:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:01 2025 by rpki-client