Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 8rpu+FGu9hC2cbLr++8kn305Z4k3gC/jLEbsYDtwncw=
Subject key identifier: CD:2E:74:AD:5F:60:B8:13:D0:7C:A1:4C:7C:90:A2:F9:18:6E:82:8C
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 0198D5BBF796394205C4A6E02EB1EBEFE8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 10F5
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: dJnKHbVGSApkApXOSZuNd7p+8q6CoQXoIEKeKZVsF4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f7:96:39:42:05:c4:a6:e0:2e:b1:eb:ef:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=cd2e74ad5f60b813d07ca14c7c90a2f9186e828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:5f:b4:34:26:f8:d0:c1:2a:8d:74:b7:68:
45:c4:d8:58:cf:c6:fb:86:3c:e9:26:a0:bf:0a:43:
22:12:b2:98:96:9d:f7:03:46:3a:48:f7:09:75:c9:
cd:7a:ad:19:fe:20:81:ad:ce:5e:ef:c3:cd:12:12:
32:b8:5d:dd:0f:d3:40:b5:da:91:42:5d:3e:c7:76:
f3:99:6a:f4:da:a0:5a:b8:39:f1:c1:46:74:c2:3b:
a0:6b:d0:67:5c:88:ea:4a:9e:07:17:b8:82:be:9c:
ef:84:62:0a:a9:76:fb:3d:bc:87:94:18:28:ca:2b:
3e:c2:78:3b:2c:98:1b:21:82:1d:5a:36:53:27:f6:
d8:bc:70:87:fa:7a:e4:a6:8c:2e:24:af:4a:56:65:
6c:90:3e:6a:bd:50:1d:92:e1:ec:01:98:09:81:16:
54:89:99:6b:fd:e9:ff:8e:e9:a1:58:6d:1e:e0:7b:
c6:cc:ac:cf:2b:8c:86:e7:52:3f:0e:23:ec:55:13:
eb:d3:e0:04:b9:df:63:33:0d:4f:bd:2c:61:65:9d:
3d:14:d5:af:91:83:ff:37:74:6e:29:e2:a8:c5:a5:
27:e3:d9:c0:aa:aa:40:af:54:f4:cb:48:66:f8:fa:
ca:20:30:87:5c:17:77:2d:ab:20:19:e2:15:a8:7f:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:74:AD:5F:60:B8:13:D0:7C:A1:4C:7C:90:A2:F9:18:6E:82:8C
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:13:43:47:92:79:96:8d:ba:0f:7a:d3:58:d1:0b:fa:dd:f2:
cf:63:f5:c0:51:f5:49:fc:bb:ac:4b:91:89:7a:89:bb:c2:c9:
1f:47:fb:5d:45:a8:e5:72:54:ec:0b:c2:a2:d3:12:be:af:4b:
50:2b:ea:77:17:35:9d:c8:48:dc:aa:31:91:20:ce:44:f8:17:
02:f3:f6:67:c2:e9:26:99:c2:93:34:ed:3f:ef:10:4e:79:e8:
f8:79:94:1e:1b:7b:10:96:39:16:7d:c0:9d:09:cc:7d:23:fd:
8d:fc:80:55:3a:80:9d:52:aa:25:7c:8b:89:73:c6:47:96:10:
10:b0:4d:04:23:5f:4e:39:76:7b:36:63:4a:bf:bd:e4:55:63:
c5:c9:ce:01:d1:53:2d:a6:37:05:17:ae:36:61:89:ee:c0:ca:
a8:6f:06:a6:85:df:c1:98:9f:43:37:9e:9f:5c:64:9c:84:dd:
a1:46:67:5f:95:06:80:d0:76:29:92:31:71:87:2d:62:67:d4:
b8:b0:50:62:95:14:e2:2d:a4:db:a6:2d:bf:f4:1f:75:29:b2:
f1:4b:ee:e3:5f:54:fc:d2:25:db:19:d3:66:74:58:ff:cf:60:
c6:80:be:48:b1:f0:75:44:4f:ea:e8:01:e8:1e:cb:3a:46:11:
9a:f2:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:12 2025 by rpki-client