Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: RC1ew4u6r9zn+2ujyBMZOX46VQ3yF8EoDFoTGdVgZZY=
Subject key identifier: 32:42:6F:CE:F6:6F:84:F5:8F:7F:BE:CE:F4:6C:B2:8D:18:78:8D:2D
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 0199FBEB7AFE8EE1968477AD1C7AFCB765E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: 0BLXsSWmqQYqclvghEFTGkldODKtzgjyHhCbeI//gRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:fe:8e:e1:96:84:77:ad:1c:7a:fc:b7:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=32426fcef66f84f58f7fbecef46cb28d18788d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:1f:57:b7:24:82:5b:76:87:5b:f0:d6:ec:
2f:4e:98:69:7c:fb:74:b8:04:12:1e:e6:7b:4e:4a:
db:6f:4c:30:06:bf:79:9a:6a:6e:8f:02:4f:ff:ee:
2d:fd:ad:e1:58:75:0a:2c:ac:4c:de:95:33:b7:e1:
19:98:64:49:fe:6a:61:e4:04:b1:44:da:a9:c1:d9:
6c:5e:56:a0:03:df:f5:0f:a5:23:40:b1:60:e6:c3:
21:dd:f4:cf:a7:cb:43:0a:bc:c7:8c:ba:c1:d0:eb:
49:4a:9f:fa:be:6d:0a:1d:24:1a:c9:48:e0:42:60:
d4:2c:4d:dc:46:ff:eb:4d:e9:ef:82:88:0d:4c:67:
5e:51:a1:66:1e:f4:49:db:78:f9:24:2c:29:00:3b:
0a:02:20:e4:c2:ed:46:00:46:fb:58:2f:02:56:5f:
7f:07:bf:ef:b2:5d:6f:11:4d:f0:31:c7:e6:1c:fd:
89:fe:73:40:f4:cc:5a:19:7d:d8:3d:47:8d:6b:36:
26:c9:f7:9f:98:f3:86:6b:75:bd:1f:c8:cd:3d:ca:
64:29:90:9f:e4:bb:52:9e:fc:23:91:92:2d:c0:8a:
d4:ed:8b:fb:98:85:39:ea:39:69:45:67:e8:fa:3d:
74:58:ce:30:14:96:63:76:91:1b:2e:82:7d:b3:3d:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:6F:CE:F6:6F:84:F5:8F:7F:BE:CE:F4:6C:B2:8D:18:78:8D:2D
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:d6:8a:a5:10:c0:49:ca:05:01:62:3b:60:cc:2d:89:40:
57:45:38:8e:97:d2:0e:25:04:04:e6:b6:69:2e:ce:33:78:3c:
8e:80:01:29:97:b4:72:1a:b7:33:ec:dd:72:7a:ab:30:f2:67:
05:4a:5a:54:0d:2d:08:58:f1:a0:6c:5a:a8:89:93:c1:b3:cc:
0f:66:db:ef:6a:b3:bf:d4:e4:43:2c:a1:ed:ff:06:fb:56:f5:
4b:ac:18:14:24:43:5f:36:a7:a1:32:5a:d3:95:23:af:cd:4a:
d8:aa:4e:07:b6:34:a7:8f:96:36:6e:a7:c6:84:81:79:cf:a0:
7e:73:3d:4e:27:fd:82:3c:2d:32:7b:f4:5d:84:5a:ae:6f:4b:
65:4b:e6:9c:64:9c:d8:85:f0:75:ea:ba:17:6d:87:d6:bf:53:
38:0f:84:c3:66:67:a0:5b:d4:71:4f:2e:6d:0d:3b:3e:ce:83:
80:fa:32:ac:08:7f:64:83:cc:66:e3:63:f9:b5:db:c4:9b:d3:
4a:4e:13:a5:d1:39:b4:2e:29:0b:2b:8e:df:f6:da:a4:f3:b4:
40:6e:dd:95:4a:71:28:d1:c4:d0:28:34:84:48:1e:bb:b8:bc:
58:1b:45:78:a1:44:63:38:29:e2:33:b5:72:16:72:0a:ae:ae:
df:03:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:29 2025 by rpki-client