Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier: mBb2HSlZctA9Re2FJwOfnPKfB1OLkNcJVI6gIzE+Ytg=
Subject key identifier: E9:89:D4:43:34:E0:F0:E0:B1:43:C6:65:2F:DF:46:EB:67:2B:EF:52
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial: 0197488C20690FD8763006F7AF296F3C9F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number: 150B
Signing time: Sat 07 Jun 2025 04:00:32 +0000
Manifest this update: Sat 07 Jun 2025 04:00:32 +0000
Manifest next update: Sun 08 Jun 2025 04:00:32 +0000
Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: i8qC9Bd1rGTuFi2wSHpNxe10bdyMnVp0+ydO8u/Ec2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:20:69:0f:d8:76:30:06:f7:af:29:6f:3c:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Validity
Not Before: Jun 7 04:00:32 2025 GMT
Not After : Jun 8 04:00:32 2025 GMT
Subject: CN=e989d44334e0f0e0b143c6652fdf46eb672bef52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:42:c7:db:89:72:be:6c:d1:56:b9:c5:cb:
a9:82:75:63:eb:02:56:35:70:4a:f8:5f:0c:8c:51:
51:1d:0f:51:88:7f:59:0a:d8:0c:17:a1:64:c8:40:
1f:8e:71:c2:fa:26:a3:4d:54:a0:64:40:cc:9a:a7:
b1:d6:29:7b:63:54:d2:13:b5:3d:30:52:bf:a6:a8:
e2:61:e1:a3:00:35:7b:7a:6a:a8:fd:33:7a:9a:7a:
15:ca:c9:a7:f1:bf:48:43:2f:43:87:c7:85:d1:e9:
da:51:2e:81:90:94:b9:55:3f:dd:de:89:ca:ec:90:
f8:cb:44:31:5d:18:85:93:9c:df:65:d4:20:56:49:
6d:bf:f0:33:ec:41:fe:92:0f:8e:ac:c8:7f:ab:89:
a6:8b:be:7a:58:60:da:06:ca:8e:4b:b0:6e:20:a6:
de:18:b6:95:ad:9d:60:23:7a:59:0b:db:1b:89:4b:
55:1c:8a:72:ff:92:d6:ad:40:64:c4:80:91:47:33:
9c:f2:be:b2:cc:a4:99:02:12:d6:bc:0e:b3:f9:eb:
ec:de:18:b5:8e:2b:f9:f3:56:fd:92:3e:9d:a1:4d:
73:21:33:64:35:21:ca:e7:25:7d:30:51:9b:54:1a:
a4:ed:e2:9c:b2:72:73:a3:f6:c7:e0:96:45:b7:8a:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:D4:43:34:E0:F0:E0:B1:43:C6:65:2F:DF:46:EB:67:2B:EF:52
X509v3 Authority Key Identifier:
keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fd:ea:d1:7e:b0:9b:f5:98:7c:28:bc:bc:d5:8f:ed:ed:d7:
0d:35:d5:12:d5:dc:af:4c:6b:e7:55:e3:84:08:11:34:90:40:
4b:d8:37:3b:d2:c5:24:eb:00:0d:41:8f:c6:48:7e:9f:2f:67:
45:0d:b8:ce:ec:10:f5:59:f6:97:b6:ae:0f:04:75:3a:62:83:
8d:e4:e7:16:b1:49:39:ad:9b:31:21:d9:4c:34:f5:db:47:11:
49:0e:5d:ff:5f:65:97:ba:35:b7:f2:84:aa:2a:7b:e9:84:eb:
b4:c4:8f:ac:54:4b:31:9c:a3:d2:62:0e:c6:e8:8a:a4:c8:ec:
15:4d:19:1c:6c:8b:7b:72:0f:7f:5c:2a:8a:fb:d1:7d:ab:62:
04:d1:ce:21:f3:e3:7a:8b:e1:d2:c6:25:3c:cc:f7:20:ce:7e:
49:6b:51:ad:f9:3a:50:8d:f3:52:38:98:63:ee:6b:a5:36:a7:
11:5e:54:65:90:47:86:26:1d:b5:60:09:bf:5f:bf:9f:fb:b2:
80:0a:b7:7f:a5:2c:db:af:0f:04:df:0b:ca:0a:25:b9:82:fa:
e3:e2:12:ec:8d:bd:5d:8e:71:36:7c:4c:0c:3d:91:2e:eb:3f:
89:47:56:e1:4a:05:b6:b9:68:ba:47:74:37:71:09:9b:ea:c2:
7e:ff:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:51 2025 by rpki-client