Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier: CpnI4f5afYaAI58rGgaoL0LdyKZxVtrYXD2IszSHT18=
Subject key identifier: 44:66:1B:C4:45:95:4A:AF:D7:91:A5:61:39:CD:6D:B8:BA:88:C1:59
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial: 0197488CA3E0C4481910929CD8A41AEF7314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:05 +0000
Manifest this update: Sat 07 Jun 2025 04:01:05 +0000
Manifest next update: Sun 08 Jun 2025 04:01:05 +0000
Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: phpJNr10b7Q8IYVbT6vjXv6MHtQuRA8t9l/8Mc8fCLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a3:e0:c4:48:19:10:92:9c:d8:a4:1a:ef:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Validity
Not Before: Jun 7 04:01:05 2025 GMT
Not After : Jun 8 04:01:05 2025 GMT
Subject: CN=44661bc445954aafd791a56139cd6db8ba88c159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:fb:2d:c7:ef:37:a5:a6:95:46:4d:27:b1:
e5:6a:00:84:a9:8d:a5:86:3b:6d:7c:14:6c:da:3a:
b3:24:d6:d9:1a:59:02:54:a2:64:c7:0a:d5:12:f9:
a4:64:2a:45:df:43:35:ce:a5:b9:38:85:fb:93:4f:
8c:f2:b9:50:95:6e:54:a9:3d:23:61:01:5f:d6:47:
b9:c2:12:6f:d8:1c:6a:b1:26:7b:9e:ca:71:9c:32:
ba:e1:71:4c:35:05:58:c7:8d:4a:d0:46:2c:59:7f:
b5:3d:91:bf:80:1e:e9:75:7f:8e:99:72:85:c0:8d:
bd:f7:ef:73:83:df:cd:1f:f3:22:b3:8c:89:92:32:
45:76:d7:27:6f:5f:a5:e5:c7:23:2c:37:43:f7:ac:
b3:5d:35:a6:07:e0:99:e0:6f:30:01:ca:cb:e1:0a:
3f:51:80:51:58:c4:f9:86:b6:58:ed:c7:6a:84:2d:
5f:ce:4f:2f:b4:2c:e6:3a:e4:21:a9:d1:49:3d:19:
23:8b:48:4f:c8:dd:20:1f:30:26:92:bb:a4:84:8d:
b9:db:b4:eb:13:ce:bc:69:b1:0e:81:ea:6f:a5:16:
b7:16:b5:96:23:40:25:14:5e:65:18:04:b8:ec:23:
63:37:33:a1:d7:98:ec:3b:1c:64:00:aa:96:14:b9:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:1B:C4:45:95:4A:AF:D7:91:A5:61:39:CD:6D:B8:BA:88:C1:59
X509v3 Authority Key Identifier:
keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:a7:75:c2:55:2b:2d:1c:9c:af:1a:56:21:ab:80:4a:7d:
56:8d:fe:9e:f1:e1:73:7a:c3:e7:d9:16:fb:1c:d2:81:11:1b:
f0:e0:bc:95:31:70:ad:01:6d:0a:8e:7c:23:b2:1e:e9:7e:7b:
07:9a:cb:b8:e5:0a:c5:00:27:17:b3:9e:9c:81:98:a7:d8:5c:
b9:11:8a:84:73:2b:b4:d7:98:b5:97:0f:54:3a:70:0e:9d:a7:
11:1b:79:29:1e:28:cb:eb:4e:f8:7f:94:3e:88:29:af:18:4e:
fd:6d:e4:9a:79:27:4e:a2:62:6d:fd:ad:59:12:ac:0f:f8:04:
66:ad:f4:4f:81:fc:89:28:35:ed:1f:cd:76:37:12:6b:a0:a4:
c4:3f:2e:ca:ab:b9:69:af:ea:e4:fd:3a:e8:ff:99:da:68:18:
f8:76:ed:2f:a2:84:ee:59:9c:58:47:57:b3:d0:4e:49:f1:ac:
d4:14:24:52:31:62:9a:90:b1:87:99:91:c4:9e:8b:5e:85:00:
6a:91:bd:ec:d0:6f:df:b1:5d:9c:45:45:e2:e9:ad:a9:e7:79:
24:83:d7:dc:53:f7:a0:04:60:1a:e5:cf:05:bf:24:08:91:61:
f6:c7:73:1c:8a:d2:42:3c:b8:f3:9b:d6:78:1f:87:ac:c8:79:
28:24:f8:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjKPgxEgZEJKc2KQa73MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4
NThiY2IwHhcNMjUwNjA3MDQwMTA1WhcNMjUwNjA4MDQwMTA1WjAzMTEwLwYDVQQD
Eyg0NDY2MWJjNDQ1OTU0YWFmZDc5MWE1NjEzOWNkNmRiOGJhODhjMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sj7LcfvN6WmlUZNJ7HlagCEqY2l
hjttfBRs2jqzJNbZGlkCVKJkxwrVEvmkZCpF30M1zqW5OIX7k0+M8rlQlW5UqT0j
YQFf1ke5whJv2BxqsSZ7nspxnDK64XFMNQVYx41K0EYsWX+1PZG/gB7pdX+OmXKF
wI299+9zg9/NH/Mis4yJkjJFdtcnb1+l5ccjLDdD96yzXTWmB+CZ4G8wAcrL4Qo/
UYBRWMT5hrZY7cdqhC1fzk8vtCzmOuQhqdFJPRkji0hPyN0gHzAmkrukhI2527Tr
E868abEOgepvpRa3FrWWI0AlFF5lGAS47CNjNzOh15jsOxxkAKqWFLkKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERmG8RFlUqv15GlYTnNbbi6iMFZMB8GA1UdIwQY
MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt
Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz
LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmqndcJV
Ky0cnK8aViGrgEp9Vo3+nvHhc3rD59kW+xzSgREb8OC8lTFwrQFtCo58I7Ie6X57
B5rLuOUKxQAnF7OenIGYp9hcuRGKhHMrtNeYtZcPVDpwDp2nERt5KR4oy+tO+H+U
PogprxhO/W3kmnknTqJibf2tWRKsD/gEZq30T4H8iSg17R/NdjcSa6CkxD8uyqu5
aa/q5P066P+Z2mgY+HbtL6KE7lmcWEdXs9BOSfGs1BQkUjFimpCxh5mRxJ6LXoUA
apG97NBv37FdnEVF4umtqed5JIPX3FP3oARgGuXPBb8kCJFh9sdzHIrSQjy485vW
eB+HrMh5KCT4dw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:24 2025 by rpki-client