Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: LERzwYIP5KuMaxHWjO1URZWUk/9q9HwFxOVHTUt1mDg=
Subject key identifier: 2D:48:96:BD:8C:08:6B:07:4D:DD:0B:2F:81:2A:07:CB:67:B4:1D:9A
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0198D9609D6B6E29F59A475512C946C92EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 08E9
Signing time: Sun 24 Aug 2025 00:00:44 +0000
Manifest this update: Sun 24 Aug 2025 00:00:44 +0000
Manifest next update: Mon 25 Aug 2025 00:00:44 +0000
Files and hashes: 1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: 3oggyd97cGazXqcGZJMCuypIN8LPHtt9h1B/p2ew+vA=)
3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:9d:6b:6e:29:f5:9a:47:55:12:c9:46:c9:2e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Aug 24 00:00:44 2025 GMT
Not After : Aug 25 00:00:44 2025 GMT
Subject: CN=2d4896bd8c086b074ddd0b2f812a07cb67b41d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:26:bd:28:b8:cf:69:e2:7f:5a:1e:14:35:
d1:5b:33:e7:d9:08:c4:32:a7:d9:eb:54:e6:ab:9d:
7f:1a:5c:c6:32:dc:8f:8a:44:9b:24:a0:0b:f0:a0:
09:2e:c9:ab:61:8e:06:7d:ce:02:b2:91:f5:f5:0c:
5a:ec:f5:bd:9f:c0:cb:75:ea:0b:0c:09:2e:4f:14:
92:3c:2a:d7:e2:db:25:7c:cf:a3:e9:92:1d:2d:b6:
7f:ee:3f:f3:b7:8a:25:ee:f9:a6:3d:20:0d:2c:c1:
38:7c:f1:0d:69:7b:73:d4:c5:2d:67:bc:6e:bb:66:
0c:30:62:af:68:57:b1:1d:1c:7d:a6:bb:e5:57:10:
7f:81:16:89:9e:9f:76:67:75:85:cb:94:a3:36:d7:
1b:fc:ef:9f:39:6e:e1:ec:01:03:be:98:27:8f:a7:
a4:4f:23:f8:e5:4d:0f:d2:46:f0:38:ba:27:5f:57:
3b:73:85:fd:0b:ec:67:29:7c:bc:1f:80:b5:e0:d7:
c7:3c:a9:07:5b:05:51:2d:80:56:35:4f:53:7e:ae:
a9:bb:3a:4c:94:8f:61:cd:22:af:27:84:c0:b5:57:
eb:0c:6c:44:2a:1e:2f:9a:66:88:9f:70:55:45:13:
92:4d:05:51:42:41:3f:73:1a:1a:21:6e:84:95:c9:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:96:BD:8C:08:6B:07:4D:DD:0B:2F:81:2A:07:CB:67:B4:1D:9A
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:0b:54:3d:7d:23:a1:16:a4:89:5f:00:cf:f3:cd:bb:42:
60:8e:dd:68:84:e3:9e:22:bb:e0:b7:6a:21:7e:cd:e2:d8:53:
ec:85:de:6e:d2:c3:1f:5d:a9:30:e2:0b:d5:e0:e7:d9:f0:f3:
d9:a5:44:e7:91:96:9a:b7:5d:2e:8e:a5:71:37:fa:22:d4:bc:
5f:3f:7f:c5:6b:9c:a9:7d:5e:56:e2:25:a1:76:1f:c5:3e:a9:
c5:bf:64:c0:e3:59:12:77:34:ca:91:d6:09:6e:39:49:cb:15:
93:4f:ef:9e:4c:41:27:fa:32:8c:50:eb:33:90:17:be:0e:b2:
22:ba:10:21:c3:45:1e:87:33:0b:e3:d1:1b:d2:4c:45:8b:ca:
aa:d6:1e:52:d2:6b:5e:45:12:09:41:ec:c1:6d:d1:cc:e5:ae:
d5:5e:b7:1c:92:9a:92:ee:7f:9c:f3:e8:70:30:4e:6e:f0:c9:
aa:bb:eb:57:36:10:2e:c0:0d:f5:84:e6:b0:ce:84:e6:e2:80:
5d:be:4a:24:dd:ca:ed:2e:89:fd:af:be:cd:bd:9e:21:47:ff:
93:60:89:e8:ee:f5:8f:15:07:c3:4f:c1:b3:b3:4a:6b:65:ba:
1b:a6:4c:0c:92:37:fb:52:9b:af:12:55:ac:36:dd:09:b1:ff:
67:af:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:42:50 2025 by rpki-client