Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: fApB4d9RAW23E5mkhMsv3vyVlvmTqHVXKPFMXgVp+D8=
Subject key identifier: 48:2A:93:FF:29:85:E6:0E:FC:2D:6A:E7:DC:60:6D:60:30:6F:04:24
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 0196515ACCB0556BB69DE25C3BAFE5C8F369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 148B
Signing time: Sun 20 Apr 2025 04:00:26 +0000
Manifest this update: Sun 20 Apr 2025 04:00:26 +0000
Manifest next update: Mon 21 Apr 2025 04:00:26 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: P2CSXShyuDtwYdsntysM6woJy5TW55k4bBoIlXbaR1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:cc:b0:55:6b:b6:9d:e2:5c:3b:af:e5:c8:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Apr 20 04:00:26 2025 GMT
Not After : Apr 21 04:00:26 2025 GMT
Subject: CN=482a93ff2985e60efc2d6ae7dc606d60306f0424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:b4:9d:fa:7c:8a:f4:e8:d0:7c:4d:01:a4:
61:ba:82:34:32:fe:22:bf:35:e7:83:d6:bd:ba:b5:
20:ab:4d:1c:bc:00:1e:20:49:87:f3:7b:33:8f:8b:
8f:1c:56:a5:9b:78:96:bb:06:32:50:4a:32:26:74:
4e:85:c6:1d:c2:97:eb:12:57:d6:f7:54:f4:d9:2f:
24:9c:11:1d:86:2e:b3:85:bf:d2:93:d3:79:5d:29:
53:2b:b3:1b:de:91:57:dd:47:80:4e:97:06:76:ea:
18:fe:3b:5e:0f:c9:ae:05:87:46:cc:7d:b0:d4:92:
16:f1:6d:a5:fb:78:0d:b8:40:30:25:dd:96:8f:99:
82:8b:1e:9f:36:91:60:f9:e0:9b:ee:5d:d9:18:d4:
73:23:9f:8d:a4:02:77:b2:81:25:eb:fd:e5:81:c9:
5d:df:81:85:b5:12:92:48:5c:b9:7c:8a:ae:d7:1b:
a6:b4:de:e0:f3:da:3c:34:18:29:b3:e0:a0:0c:4c:
72:ca:15:1e:9f:05:8b:a1:19:5b:61:48:c1:7e:bd:
ef:40:45:61:05:10:01:fa:37:85:3e:be:a5:ba:0e:
09:9b:19:a5:40:ee:56:1f:16:27:d6:bb:87:b2:ef:
dc:80:3e:a4:a8:19:d6:70:3d:47:29:9c:54:7e:c0:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:93:FF:29:85:E6:0E:FC:2D:6A:E7:DC:60:6D:60:30:6F:04:24
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f0:cf:09:49:e4:71:e0:99:55:4d:07:87:55:b2:f3:08:c4:
13:d5:eb:d0:26:f0:76:7d:a2:f8:f0:f0:4d:f7:4f:68:0f:92:
cd:5d:34:77:1c:d0:ef:42:84:92:fe:7c:88:50:73:57:fa:ee:
c5:d6:77:48:4f:69:f3:89:44:ef:7e:0c:82:08:26:ea:49:b0:
9b:47:e0:4d:f4:a9:f7:1f:19:ad:ae:b4:c0:2f:d5:f7:33:29:
00:55:cc:40:6e:47:ca:c0:61:9e:5f:05:dc:fe:46:63:4e:80:
99:db:c8:ad:57:63:b1:1c:76:56:cb:79:cb:e6:22:61:09:7f:
0e:8e:82:6d:0d:d1:bd:36:0a:51:4d:05:09:3c:dd:97:79:9c:
c8:ef:c0:8b:9b:01:5b:07:fc:df:bf:91:7b:bf:b4:ba:6d:30:
ca:53:c0:b9:24:1e:b5:73:e5:b9:bf:62:ca:f9:c2:31:13:84:
63:29:a4:1c:25:b3:ee:8a:ba:49:9e:96:72:12:fb:4b:ac:4b:
27:fa:2a:dd:d8:de:50:83:c4:36:45:83:fe:2a:26:d3:bc:b8:
34:32:86:ca:6d:67:ea:2f:3d:1d:cb:08:00:84:3e:2b:40:46:
1e:af:42:c0:46:e4:1a:05:b7:ec:2b:e2:c4:3b:56:d7:5f:3d:
90:44:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:41 2025 by rpki-client