Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: +bPr2OGkV5HEUt4/UPHuUe1deMM10SoALhMhakqawpk=
Subject key identifier: 55:A3:4F:C9:4B:B2:3E:61:70:42:D8:10:28:9D:91:4D:15:87:16:08
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 01969E2C6CF85BFE207B59B8D24EA02D0872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 098A
Signing time: Mon 05 May 2025 02:00:33 +0000
Manifest this update: Mon 05 May 2025 02:00:33 +0000
Manifest next update: Tue 06 May 2025 02:00:33 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: LTtUT3WubKf2E5RD6HDdXzv0+80fNxa/MuIQyF4lma0=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:6c:f8:5b:fe:20:7b:59:b8:d2:4e:a0:2d:08:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: May 5 02:00:33 2025 GMT
Not After : May 6 02:00:33 2025 GMT
Subject: CN=55a34fc94bb23e617042d810289d914d15871608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:de:f2:56:09:28:ee:54:08:e4:a1:f3:4b:
ed:66:34:bf:cc:8e:80:a9:f7:4a:e5:7e:70:22:53:
a5:d3:77:82:bb:24:35:bc:9d:72:dc:aa:88:0d:d4:
73:a4:20:9a:21:2a:79:e6:8e:23:4f:eb:bc:8b:19:
44:ba:f5:5d:11:07:dc:aa:d7:4e:a6:7a:f7:af:3b:
b9:c1:b5:29:38:7e:97:95:69:eb:a0:db:b8:51:a8:
9f:69:98:30:9c:42:2b:15:8a:f1:c8:0e:4e:d9:42:
a7:40:3c:72:67:ce:f0:30:3a:bb:ca:fc:30:eb:e7:
e0:b0:76:16:ac:30:c0:a9:43:a7:d1:34:dc:32:70:
68:df:e6:71:6b:e0:33:c4:44:0f:a0:71:a2:ac:0a:
b2:0d:d6:38:05:9c:f0:b1:db:65:ff:89:0b:a4:b7:
9f:42:65:d6:40:18:ae:62:fb:87:e8:9a:7f:2f:a4:
4d:12:a8:c0:f5:6a:8f:dd:cd:bf:bd:fe:73:f5:a5:
69:17:1e:50:f7:21:d4:57:ab:a0:a8:c7:47:38:a1:
56:46:f8:4e:83:60:5c:d3:e3:e1:9e:80:ae:96:5e:
a7:8e:7c:91:49:b6:93:a2:60:c5:f0:3d:71:39:e6:
9b:d5:b7:41:84:89:c7:da:26:f0:f9:b0:9e:52:d2:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:4F:C9:4B:B2:3E:61:70:42:D8:10:28:9D:91:4D:15:87:16:08
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5b:27:86:1b:3b:4b:b5:d2:7d:c4:53:ac:f4:59:a1:e2:5e:
50:92:09:a0:bd:61:87:af:00:5e:d4:17:9f:d5:90:90:db:8c:
4b:dd:cc:d2:09:87:cb:32:9a:e9:12:ad:7a:3b:9f:da:e4:56:
3a:8b:fa:7a:ef:0f:65:ec:dd:e4:31:56:db:85:6b:80:d0:98:
21:79:21:a6:c6:f6:42:f3:ae:44:36:07:74:aa:2c:fb:ca:c5:
80:b4:a8:9f:ac:22:f9:ac:42:2b:0b:12:ab:64:9f:0c:53:db:
eb:f3:85:c5:9a:f5:9b:d4:29:5a:15:4d:17:06:50:c0:70:98:
11:ef:de:8e:8e:63:34:97:8d:7b:1e:c3:c5:af:f8:88:6c:5f:
53:00:c2:af:96:11:d5:d9:dd:44:18:11:dc:ca:d5:8d:8d:a3:
f3:fb:19:c3:b2:29:9a:72:b1:3b:32:d9:3d:d1:54:1c:de:fd:
2d:10:10:f9:aa:e1:88:64:d0:31:1c:90:e2:dd:d3:5f:af:00:
58:01:29:8c:f6:7b:74:75:b9:b0:6a:6c:7e:41:fa:c7:41:7e:
e6:62:f4:1b:18:82:f0:05:ac:84:19:0f:32:2c:f6:94:57:91:
c3:3d:2c:71:8a:3d:c8:ed:a4:f7:b3:d4:2b:28:41:30:13:ed:
aa:8a:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:54:16 2025 by rpki-client