Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: HS5t9uaSr1ZgZH3NgDGGqRVB0KjvzAq6SG9zvZ9b9to=
Subject key identifier: 6D:C0:0C:7C:AC:A4:E3:E5:A2:88:72:61:E4:EC:14:06:9D:F4:09:20
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 0198D84F283519CB3EF397C03A348647B0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 19:02:02 +0000
Manifest this update: Sat 23 Aug 2025 19:02:02 +0000
Manifest next update: Sun 24 Aug 2025 19:02:02 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: qfF1VdeXg4TrGPs/ZWZ1ijiZCPqR+U9XS65skV5Q3ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:28:35:19:cb:3e:f3:97:c0:3a:34:86:47:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Aug 23 19:02:02 2025 GMT
Not After : Aug 24 19:02:02 2025 GMT
Subject: CN=6dc00c7caca4e3e5a2887261e4ec14069df40920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:64:15:aa:d2:3a:9a:cc:28:cc:f5:9c:c4:
31:c9:52:d2:26:f8:3d:b0:29:a4:32:37:bd:57:7c:
67:cd:ec:ff:c6:ae:af:6d:3d:84:87:2c:66:15:8c:
0d:18:30:66:9d:16:d3:50:bb:4e:3b:87:a5:c1:5d:
d2:eb:d3:6d:68:19:16:c5:83:19:e4:8e:41:83:33:
ec:26:e2:34:88:dd:79:e3:07:e6:0b:29:d6:17:ee:
1a:0d:7c:cb:8b:53:6a:63:54:98:78:70:b9:03:a1:
38:a3:70:1c:8c:3e:a8:f7:ef:e0:ce:e7:2d:1c:a1:
b6:5c:94:7e:6d:4e:4a:86:f3:fd:4e:73:ab:94:b7:
69:ac:65:30:3f:59:28:aa:1a:00:9c:99:a9:3a:b2:
5b:1c:83:25:e8:9c:cb:e5:c4:f7:f0:ee:a7:21:8a:
35:99:bf:13:09:11:85:f5:1a:33:62:42:f8:ce:91:
75:3d:17:c4:09:15:96:54:7b:40:9a:03:48:a6:13:
16:bb:e2:a4:91:2c:85:18:66:c6:f5:f4:cd:89:57:
67:7d:2f:bd:a3:29:57:0a:21:cf:95:0b:43:fd:ce:
89:22:28:66:23:ac:e5:75:83:e2:a0:17:8a:a1:01:
31:8c:e0:c4:53:63:76:d5:c2:34:10:4c:4e:ca:3d:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:0C:7C:AC:A4:E3:E5:A2:88:72:61:E4:EC:14:06:9D:F4:09:20
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8c:d7:13:5a:63:0b:3a:b9:fc:fb:08:95:55:41:6b:89:fa:
5d:c0:c1:52:b6:45:4b:e4:3b:60:65:3b:7c:fe:e2:d6:2c:39:
57:81:1d:84:12:93:3a:1a:49:6b:ab:23:23:28:f8:72:20:39:
26:2d:55:8a:84:34:44:c3:7e:5a:1d:ba:33:27:57:c7:4e:97:
83:43:a0:2d:a1:07:49:58:7e:6f:f3:b8:4e:03:5b:2e:93:d2:
dc:6f:57:5c:a6:f0:de:ca:4e:4f:13:ed:cb:76:8b:a6:db:ca:
a3:56:e7:e1:4a:9b:87:f7:36:62:64:cf:af:55:e3:43:66:ae:
47:77:3d:f9:98:3d:89:39:ea:05:b0:3b:36:bd:84:e4:6b:f5:
a1:3a:f6:f2:a8:43:88:d7:3d:f7:e6:05:df:55:26:af:8b:fb:
37:5c:a1:b4:a3:f1:b9:14:27:c9:5c:23:c6:01:11:1d:ce:ed:
ce:06:56:22:54:d1:8d:68:7c:cd:e3:e8:c4:f5:92:19:93:b1:
8b:c0:40:bd:99:49:ae:f3:6f:25:8a:0c:2e:ab:79:88:e5:6b:
f0:77:c8:df:cf:15:e1:ec:e0:af:14:4e:4a:aa:05:19:47:79:
f7:24:ce:bc:f1:52:55:e8:2a:1d:d2:32:bd:1f:9c:1b:84:bd:
ea:d1:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:38 2025 by rpki-client