Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: Mr0Z0CNn9ZJpg+QxdXFLhqRHOTdHI6ubstxO0GOQgs0=
Subject key identifier: A6:A1:F2:9E:90:09:A6:FF:0A:03:DD:C2:05:9D:61:1D:DC:D5:0E:05
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 0197B6A038FCE897E6A7F50A4F4AC23BA560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: 93SF9Cv3UIFKFi09JyweSSwJTKthFthSYMSbDodg7+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:38:fc:e8:97:e6:a7:f5:0a:4f:4a:c2:3b:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=a6a1f29e9009a6ff0a03ddc2059d611ddcd50e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:c9:94:00:df:f4:85:a9:c8:72:86:d3:15:
c0:8f:a3:55:59:a7:7e:74:4d:ee:5e:6a:8c:92:9e:
9d:6a:48:d7:1f:99:fb:50:68:94:7e:57:51:29:d4:
cb:ea:eb:fe:7c:09:0b:51:b4:a6:f7:81:cb:94:34:
db:18:24:4e:23:8d:3f:46:8a:f2:be:ca:6f:85:9d:
d6:f3:86:83:82:f4:e0:60:1d:ce:3b:d4:c2:e8:d0:
43:8e:69:c3:1f:c0:0f:c4:66:7d:4e:e3:ef:7d:a0:
45:ea:ea:7a:f8:ef:e5:d0:ae:6d:b1:47:e2:76:9b:
ec:42:dd:fe:14:94:de:d5:99:c6:ae:a8:52:66:46:
bc:65:c5:90:13:67:82:1c:29:09:de:ed:b5:45:51:
6b:17:5f:90:12:3a:67:02:7c:1d:63:35:4e:87:65:
a1:0a:a5:25:d0:08:46:90:a3:c1:bc:56:94:9d:2d:
d6:99:5a:9a:cb:70:61:49:b3:9b:a6:20:af:46:9f:
f9:6d:31:5b:cb:cb:13:6e:5b:71:b0:7f:ef:4e:4a:
7f:9e:3d:1a:3b:aa:6e:56:4a:5e:e8:59:b1:61:22:
55:5c:39:d8:50:6a:19:e6:00:a4:b0:ba:16:a1:7e:
7e:04:80:05:c7:ac:36:5e:b0:c0:bc:83:62:9c:7c:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:F2:9E:90:09:A6:FF:0A:03:DD:C2:05:9D:61:1D:DC:D5:0E:05
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:09:06:95:2f:a9:04:3a:95:1c:52:10:ae:f7:0a:13:1e:cd:
49:24:45:bc:00:7e:ea:ff:1f:fb:de:6b:89:70:71:57:32:53:
fb:23:e9:5f:15:57:39:b6:9b:50:ac:6a:0e:1e:e0:7d:80:9d:
7f:ef:51:cb:92:bd:68:a8:73:b2:d1:a4:1d:a2:8e:a3:44:55:
a5:cb:d7:81:c9:fa:64:ab:b8:4d:3f:46:a7:b4:cb:59:93:5d:
aa:14:d4:52:bb:55:a2:45:23:65:c0:b2:9f:8e:b7:27:e1:75:
64:af:43:21:22:45:56:07:ad:6e:f4:c5:7a:91:e2:73:74:8c:
9c:8d:b2:19:26:ef:d1:aa:20:41:7c:a7:d4:99:d7:8e:ef:2e:
54:f3:ac:28:d1:f0:f3:a3:22:cf:7f:dc:73:60:2a:e6:fb:47:
6b:9b:ff:7e:97:99:47:15:23:00:b3:c2:9f:ae:43:96:dc:5c:
3b:33:a7:c7:a3:b3:c6:7b:fd:e7:67:96:22:df:9d:c2:9a:7a:
82:73:e2:9d:34:89:c6:fd:1e:20:06:f3:0f:96:3f:47:fc:6d:
86:6f:d8:9b:07:c6:be:af:88:43:48:fb:16:3f:31:85:4c:06:
8a:57:2f:31:c0:9b:4c:99:7f:42:fd:4e:f6:62:2c:34:1b:8f:
89:0a:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:40 2025 by rpki-client