Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: 7aR0zVWja1oDe1YQjZVwr738eU3i2qD8dkDwirdlZv4=
Subject key identifier: 0C:24:63:2D:86:8D:44:9A:55:BB:3B:F2:13:7A:15:2D:AF:00:0D:5B
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 0197B632EB2B804BE9D5B5E27FD4E71EF696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0A1B
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: GZyE1PDCvlJKCrVPKvThTwiBLjqIu4QLeCCg40kg41c=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:eb:2b:80:4b:e9:d5:b5:e2:7f:d4:e7:1e:f6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=0c24632d868d449a55bb3bf2137a152daf000d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:50:cf:e5:98:90:65:37:d8:2a:fa:52:cb:
0c:83:ff:2c:8e:9f:f9:18:87:4f:00:7e:93:9a:65:
67:8e:a8:48:e1:84:97:3a:d5:29:52:cd:f8:d3:17:
7e:c4:5a:28:c5:f7:4a:76:8d:49:86:63:2e:0f:c3:
cc:7a:d6:d1:1d:07:a3:3f:99:c2:74:fb:d6:77:e7:
b1:a0:84:9a:6b:fd:04:e1:54:b4:db:68:6b:46:54:
67:3e:4f:04:4e:0e:c6:d7:5c:59:b1:19:95:cc:19:
e3:53:c7:12:36:1e:e1:02:d8:36:87:a3:22:1f:ee:
0f:a2:4e:8a:f2:ab:1b:00:d7:30:44:3d:c4:4f:a9:
31:81:a8:40:c8:b7:0a:c5:f1:69:9b:d9:54:15:76:
72:5e:e1:22:70:84:96:cc:84:dd:3a:55:92:3d:34:
4e:df:71:0e:a6:90:2f:ef:1a:40:74:1d:2f:cf:8f:
fa:fd:fc:0f:15:6a:41:94:95:a7:e6:7b:d3:64:ce:
c6:81:d3:4b:e6:b1:93:b6:e6:40:0f:d0:20:ce:3b:
00:3e:b3:e7:44:d4:c0:42:97:bf:6f:4e:21:f5:88:
83:5a:59:49:69:26:dc:f4:1a:c9:10:4d:2d:0c:0a:
98:ac:18:5b:bb:be:0e:c6:53:f0:c6:3b:66:9f:24:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:24:63:2D:86:8D:44:9A:55:BB:3B:F2:13:7A:15:2D:AF:00:0D:5B
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c5:c5:af:90:90:c7:88:52:bd:d7:21:35:fc:17:37:8c:af:
c0:fb:e4:b9:69:65:95:b0:68:76:1b:5e:fd:42:87:04:32:c2:
64:7c:89:a1:01:a2:84:0e:20:28:b8:92:ed:fc:b4:dc:fa:d8:
f7:1d:39:69:83:5c:09:57:41:79:dc:27:f1:a5:d9:e4:42:0f:
14:4a:df:fa:28:ee:5c:4b:51:ca:34:2f:2d:da:f6:96:0b:f0:
35:d2:ff:6c:e9:bd:c9:97:99:8c:1c:f6:9c:9d:2a:1f:7e:b0:
79:2d:94:41:15:67:5e:ac:8c:93:46:da:b6:79:bb:0b:2f:d0:
21:c6:4a:e2:15:61:9f:e9:20:1c:2e:ed:a5:08:2e:b6:1d:d4:
7b:cc:39:11:46:6a:c2:48:a1:38:ab:72:8d:c1:d1:ae:a8:bf:
8d:35:53:96:61:07:59:f9:5e:90:a8:83:7f:21:46:fa:be:38:
38:0d:0f:14:db:4f:91:34:2f:0c:80:af:73:5e:a1:12:6f:fd:
16:42:0d:5c:10:3a:cd:71:53:fa:1f:06:55:26:97:07:84:98:
13:2d:1c:b1:3b:59:1f:25:01:aa:a7:4e:3a:6b:7f:5b:69:6f:
01:65:5c:4f:84:4c:bb:44:07:0c:f8:7c:60:ac:2a:e2:aa:5b:
41:05:9f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MusrgEvp1bXif9TnHvaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTkzZjhlODk4ZWI2ZmJkMTJjNTNkZjdkYWQwMjE1NDNl
ZWZjNmUwHhcNMjUwNjI4MTEwMTE5WhcNMjUwNjI5MTEwMTE5WjAzMTEwLwYDVQQD
EygwYzI0NjMyZDg2OGQ0NDlhNTViYjNiZjIxMzdhMTUyZGFmMDAwZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3lQz+WYkGU32Cr6UssMg/8sjp/5
GIdPAH6TmmVnjqhI4YSXOtUpUs340xd+xFooxfdKdo1JhmMuD8PMetbRHQejP5nC
dPvWd+exoISaa/0E4VS022hrRlRnPk8ETg7G11xZsRmVzBnjU8cSNh7hAtg2h6Mi
H+4Pok6K8qsbANcwRD3ET6kxgahAyLcKxfFpm9lUFXZyXuEicISWzITdOlWSPTRO
33EOppAv7xpAdB0vz4/6/fwPFWpBlJWn5nvTZM7GgdNL5rGTtuZAD9AgzjsAPrPn
RNTAQpe/b04h9YiDWllJaSbc9BrJEE0tDAqYrBhbu74OxlPwxjtmnySUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwkYy2GjUSaVbs78hN6FS2vAA1bMB8GA1UdIwQY
MBaAFBEZP46Jjrb70SxT332tAhVD7vxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEt
MDQyZjdkYWMyNGQ1LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEtMDQyZjdkYWMyNGQ1
LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcXFr5CQ
x4hSvdchNfwXN4yvwPvkuWlllbBodhte/UKHBDLCZHyJoQGihA4gKLiS7fy03PrY
9x05aYNcCVdBedwn8aXZ5EIPFErf+ijuXEtRyjQvLdr2lgvwNdL/bOm9yZeZjBz2
nJ0qH36weS2UQRVnXqyMk0batnm7Cy/QIcZK4hVhn+kgHC7tpQguth3Ue8w5EUZq
wkihOKtyjcHRrqi/jTVTlmEHWflekKiDfyFG+r44OA0PFNtPkTQvDICvc16hEm/9
FkINXBA6zXFT+h8GVSaXB4SYEy0csTtZHyUBqqdOOmt/W2lvAWVcT4RMu0QHDPh8
YKwq4qpbQQWfCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:53 2025 by rpki-client