Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: oVLfSdVoUKHpi5+bOo7x+H9IZWLebyVw5vW/Ro+XvW4=
Subject key identifier: B8:F4:2F:4D:FA:04:09:32:28:B8:35:59:08:29:79:2A:A1:2C:5D:6B
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 019873E30621C46CBDAF70C1A823027DDE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 15A6
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: uBs3VX6z+edJVngoInQi78W+ZYC/GV2depsKv4KrWUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:06:21:c4:6c:bd:af:70:c1:a8:23:02:7d:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=b8f42f4dfa04093228b835590829792aa12c5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:25:5d:77:9f:78:73:5b:75:c2:fd:98:3e:
4a:6c:e7:3f:3f:97:4a:04:d8:27:61:bf:cb:fc:d2:
27:49:5f:b8:c7:e1:ee:b8:3e:ef:69:35:8b:5b:6b:
47:bb:83:11:6a:66:7b:54:15:d7:37:de:4f:71:7e:
fb:b7:58:7e:d8:ae:ed:49:de:30:c8:e5:f7:a2:7b:
3b:6d:de:2c:03:6a:98:bf:be:37:1f:c2:df:96:d1:
86:cd:fd:9b:b5:92:cf:bb:63:2f:66:aa:67:87:43:
d1:af:0c:44:4d:31:d5:92:21:e6:dd:94:b9:3e:c0:
2c:10:4a:c7:52:8d:82:1e:d1:30:c7:43:01:6e:b4:
0d:c9:6a:fc:7b:02:ef:9c:90:18:65:8b:e5:f4:c0:
84:57:72:50:eb:5d:ad:c1:35:9d:84:b7:80:31:d7:
fa:82:08:8a:3c:d8:53:8a:b2:06:bf:ef:45:a0:0b:
03:79:f6:71:67:0a:6f:fa:41:ea:01:c4:a4:94:b7:
31:29:96:2e:2d:37:6b:36:63:21:b5:ab:91:91:14:
3f:58:21:4f:58:f2:3e:7d:17:b9:81:61:3f:f2:06:
61:e2:5f:12:1b:d0:98:1e:05:55:98:43:6b:ff:3f:
f3:2b:3b:87:1e:71:ca:b7:43:30:e0:ee:28:1c:54:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:2F:4D:FA:04:09:32:28:B8:35:59:08:29:79:2A:A1:2C:5D:6B
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8e:f6:ce:a0:37:97:62:a7:4c:21:8d:ca:06:c7:42:71:ad:
ad:68:84:52:94:56:7c:db:65:64:ac:85:d2:50:12:76:c0:a8:
a6:84:45:ff:f4:57:b9:e7:c3:f2:34:33:98:b9:81:c9:e4:eb:
82:10:d9:36:b1:f2:46:cc:6a:bc:c0:a9:44:9f:12:61:f9:a6:
e1:fa:5c:d5:8c:43:94:10:c0:26:85:35:9d:d9:4b:d6:2f:bb:
54:12:7a:50:d0:7d:3c:48:c4:82:38:f2:c2:48:82:38:ea:8e:
b7:f3:25:26:98:6d:82:99:b0:d8:c6:c9:bb:3b:d8:a5:f6:7e:
bd:63:ae:05:99:18:fe:55:6a:cc:c4:f2:21:f4:fd:84:5e:93:
50:5b:cc:3d:25:48:af:e7:04:c0:e1:65:8e:6f:97:86:2e:60:
1b:ec:8f:5f:53:42:d7:4f:12:99:f4:e9:e9:2f:52:8f:a3:95:
f5:2b:2c:ec:06:a4:80:7d:56:df:a9:17:08:ca:03:79:d2:9f:
dd:93:85:69:12:83:9f:9a:df:af:b2:58:1d:78:4b:b1:7d:3d:
5b:7a:05:10:73:71:bd:b6:c4:25:49:f4:61:8b:7f:3f:bf:a2:
72:16:4c:21:68:ec:31:6b:db:39:27:e8:d1:22:24:6f:0e:5b:
1b:c5:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:01 2025 by rpki-client