Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: avpA5wj2PPby8CvuvsudZWzEya7tyYPoKKYxWCFxxwU=
Subject key identifier: 8F:33:BA:92:F1:B5:40:5D:4C:97:9C:D4:24:7F:FA:A6:E0:6E:9F:DB
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 0198D5F16AD2D373C6E0EFEBC6B2CDDCF063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0AB0
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: YqDwYcLxfWew+2oTyBoro/IPiJQGUz6nwIVGP8iy6dM=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6a:d2:d3:73:c6:e0:ef:eb:c6:b2:cd:dc:f0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=8f33ba92f1b5405d4c979cd4247ffaa6e06e9fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:3a:ba:27:c4:de:c4:f1:b3:48:5c:ed:87:
33:f9:0f:2e:fe:c9:0c:fb:2f:32:2e:6d:be:71:69:
ef:e2:84:07:6e:95:be:a3:65:a0:e6:c1:dc:ee:6a:
2a:77:59:35:65:52:50:65:3e:dd:d5:4d:6d:08:e9:
61:f8:a2:c2:8e:3a:fb:c6:f6:e2:62:c6:4a:39:82:
97:6d:28:ec:eb:3d:9a:56:6d:02:00:37:7a:21:79:
32:ab:74:4d:4e:6b:4d:49:00:85:8c:c8:91:3a:47:
40:f7:ae:06:6b:da:3e:bb:c5:92:9c:24:c2:ad:18:
9f:7f:b2:d9:45:be:bd:0a:dc:66:90:21:9c:10:86:
87:3f:3d:6b:7e:5f:8c:4b:8b:87:0f:c9:8b:15:5c:
89:aa:95:99:5d:f2:03:a3:4a:b9:f6:fc:c3:ee:43:
e8:80:cc:a4:7e:ef:5a:65:79:c7:2e:b7:de:b0:41:
49:21:3a:8a:91:9e:50:f0:84:a9:9a:aa:1a:88:b7:
31:22:f2:ca:c3:db:5f:58:60:9c:bc:53:39:e5:b3:
5b:45:f2:70:63:59:7e:3f:66:44:22:44:39:71:94:
97:3a:7d:ae:21:b3:9c:3c:30:72:62:1c:da:06:9b:
08:49:79:27:e1:16:c4:42:97:fa:04:22:d8:ce:5d:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:33:BA:92:F1:B5:40:5D:4C:97:9C:D4:24:7F:FA:A6:E0:6E:9F:DB
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:43:42:78:54:5a:02:d8:f5:13:99:28:91:c2:4d:5f:75:00:
a8:b2:09:5c:56:93:3c:a6:ec:13:4d:30:89:23:42:0b:22:f3:
39:19:7d:d3:6f:f6:7e:96:9b:b4:43:52:88:99:d2:4f:41:c7:
44:49:7c:08:d0:b7:30:1e:a1:b0:9a:57:ac:ad:e9:3c:98:80:
1e:eb:05:96:d7:28:26:f3:6c:ef:cd:94:9c:95:95:eb:30:05:
1c:1c:c2:0a:c7:45:55:c2:a0:79:e9:55:68:64:a7:f4:28:68:
39:33:10:0a:52:43:41:f2:f5:57:34:b6:c9:c7:71:dc:78:d3:
d5:2a:79:bc:e8:c2:22:50:2e:33:0a:32:ed:58:4c:04:22:84:
30:72:e7:1b:43:ba:78:83:07:d5:e9:dc:6e:a5:09:c8:e1:f6:
9f:90:01:39:ce:b6:1a:c4:18:20:dd:06:3b:05:68:25:4b:09:
24:68:30:e0:1c:ef:a7:05:ae:11:12:53:0a:9b:bf:4f:ae:93:
b8:68:d7:dd:aa:85:08:56:e9:b8:af:79:0f:92:5c:b8:dd:22:
7b:6e:44:6d:15:53:c0:85:4b:3f:ce:31:2f:2b:4d:44:84:dc:
fb:f4:95:62:8b:2c:f9:e1:60:14:77:17:80:c3:b3:fc:10:04:
c7:fd:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:13 2025 by rpki-client