Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: xexbO2ZZxSxaaEcotR6ExEdQPpGBLpAQQ52RjZdkd34=
Subject key identifier: 3F:EF:43:9B:24:55:D8:C2:62:B5:AD:25:53:9E:C4:83:B6:B7:0F:CE
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 019A4EF44F887FF87C64B0619FE9AD104FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: 0IAf1TqjMyzjD2e0NU6Tc9aPe0SZdjjc9S1qCtFqNVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4f:88:7f:f8:7c:64:b0:61:9f:e9:ad:10:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=3fef439b2455d8c262b5ad25539ec483b6b70fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:67:82:2b:59:7f:16:3e:70:5d:5c:5e:f5:
f3:99:ac:40:05:7e:e9:6b:d3:7a:4e:00:1a:10:a0:
3b:b2:97:a7:68:55:5e:44:4a:76:20:52:48:aa:8d:
fd:23:95:a7:37:4b:0f:ce:c0:0f:dc:15:9e:27:10:
16:47:35:e3:f4:87:2d:9b:af:7d:70:ff:8d:75:6d:
08:56:3a:20:43:e4:c3:82:f7:91:46:be:02:2f:1e:
db:59:e3:7b:c7:e8:05:db:01:d9:d4:28:6e:8d:12:
88:c3:1e:f8:2c:29:e8:47:a2:57:cd:de:45:cc:07:
91:9f:f2:9c:27:34:7a:3e:d6:65:6f:d6:ca:ad:66:
ea:72:45:53:cf:1a:14:4c:86:1f:1d:fb:05:23:a4:
3e:af:56:27:fb:b7:dd:20:41:30:78:12:fc:4e:b1:
cd:bc:80:cf:1b:a2:c2:c2:db:54:84:f9:96:53:ea:
fa:fb:d8:51:f2:fb:76:79:d3:b9:be:00:55:8f:a1:
31:44:d1:cf:bc:e6:ab:c4:61:46:67:55:3e:93:13:
11:e2:38:96:a5:86:93:3f:85:d7:c5:e0:2c:85:6e:
97:8e:fa:dd:22:f0:74:f5:98:4d:8a:f0:6f:d1:fe:
a9:30:1a:96:b0:87:12:26:a3:5c:fe:90:62:a1:e7:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:43:9B:24:55:D8:C2:62:B5:AD:25:53:9E:C4:83:B6:B7:0F:CE
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:93:93:30:28:0a:e3:60:e3:02:de:7f:ed:54:b9:5b:3f:
9a:bf:37:95:40:d9:6d:29:b8:34:3e:83:1e:20:75:e6:1f:6a:
d3:18:2b:b9:32:51:86:84:3e:45:e4:a4:b4:ba:43:9d:b0:e1:
eb:c5:bf:b0:55:95:92:ed:79:5f:6c:7a:a0:2f:7a:ed:69:d0:
35:ad:42:06:29:d7:e0:9a:7d:95:23:b5:f3:fe:cb:cc:c3:ba:
96:45:8a:fb:fc:fa:34:db:14:ec:22:da:f9:ec:5b:0b:a7:57:
a1:2b:e3:41:bb:25:75:91:8a:88:f7:e5:cd:22:b9:f9:ae:b7:
d5:d9:9f:32:34:99:15:bd:ae:36:91:9b:70:e7:37:d8:a6:d0:
eb:34:fd:28:99:f1:b1:6f:bc:ec:3f:4b:bc:ad:8b:32:3d:93:
12:23:f1:ce:14:5a:9a:71:6f:a2:e0:54:95:85:bf:2d:0a:53:
2f:e1:37:ee:d6:52:b1:48:b4:c8:14:81:b8:13:51:94:89:63:
9c:c3:ce:79:c7:c0:f9:5f:43:10:7d:26:8d:aa:93:49:2d:ae:
1d:21:9e:9d:5c:8e:c1:d8:06:60:0f:8e:18:a6:55:9d:38:f0:
9c:01:ec:7e:8a:b3:8b:db:41:ca:1b:fe:96:2a:85:a1:1c:41:
7c:a1:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:17 2025 by rpki-client