Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: i5YttnBko+fGM3q8oycf7PxAyvmUH3QSuGGsBHcCeeo=
Subject key identifier: 26:24:87:7F:10:C0:E5:10:7F:F6:40:23:15:DD:FE:BD:D3:D9:6A:F6
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 0196DE55F13631685F5F20E38EA745463AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0DAB
Signing time: Sat 17 May 2025 13:01:36 +0000
Manifest this update: Sat 17 May 2025 13:01:36 +0000
Manifest next update: Sun 18 May 2025 13:01:36 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: 8B3ef7acqpbJZRtkzeGqAJ4YHsZz9X3KppdJCZwrS1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:f1:36:31:68:5f:5f:20:e3:8e:a7:45:46:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: May 17 13:01:36 2025 GMT
Not After : May 18 13:01:36 2025 GMT
Subject: CN=2624877f10c0e5107ff6402315ddfebdd3d96af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:02:01:f7:5c:38:a6:d5:50:03:41:0c:6a:
e3:5f:ad:e8:b5:27:92:2b:2a:16:53:a5:31:31:96:
e5:e7:62:6b:24:8b:b1:fd:41:42:25:a3:b0:55:08:
0b:bd:1b:09:84:a4:49:9e:6a:19:59:32:4e:de:83:
9e:46:f2:f3:42:c2:eb:5c:60:e8:89:ed:bd:89:20:
7f:23:76:22:b2:ca:13:7b:8b:ad:09:06:d3:80:96:
b9:84:bf:d5:cc:fc:ca:57:09:cb:4f:47:70:bb:47:
4d:6b:4f:f4:ab:e6:50:1b:42:f5:46:93:3b:c7:5c:
af:23:1b:6a:e9:48:08:2b:f5:0b:c5:4e:fd:11:3b:
6d:14:e4:1f:d9:2b:34:1e:20:b8:8a:18:e3:10:ae:
eb:2c:5a:a9:fc:8f:89:9f:8b:2b:dc:56:3b:83:7f:
1c:43:fc:3d:16:9d:f8:a0:a4:8c:79:87:3e:c4:6b:
14:17:3c:b3:28:47:43:93:84:32:48:6b:d0:cc:8a:
4d:ab:57:bd:f8:5d:fe:28:b5:05:97:35:2e:f1:26:
63:63:04:e7:4e:5f:95:fc:c0:56:20:4e:82:46:6f:
cd:a9:bb:0d:18:b3:a3:4c:85:df:60:9f:72:4b:55:
35:0a:0a:05:3f:d2:31:89:3a:67:08:51:44:14:cb:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:87:7F:10:C0:E5:10:7F:F6:40:23:15:DD:FE:BD:D3:D9:6A:F6
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3d:3d:a6:c1:00:c5:07:83:e9:52:ee:89:83:da:4d:05:73:
30:b5:c2:39:dd:b3:8a:02:49:61:b9:f9:de:c6:7a:05:63:04:
98:71:8e:b7:6e:cc:30:f9:e0:d0:89:1f:b7:e8:b3:b4:ef:12:
e5:d7:45:eb:9d:ba:68:4f:08:e0:e5:30:ad:85:5f:a1:09:1b:
63:76:c9:fa:53:68:2b:c5:a6:cf:29:e2:46:02:de:40:b2:b3:
43:d0:92:a8:66:e3:b0:69:4d:35:7c:83:2f:8b:a7:42:94:1c:
10:1e:0a:ae:ad:2e:91:44:8d:43:15:f4:ef:38:b0:d8:ab:b1:
ef:65:e8:7d:5c:5b:c5:84:c0:6d:2f:48:5d:48:bb:1e:f3:7f:
54:e7:e0:58:ea:8b:c1:71:3d:de:23:68:d1:e3:d6:bf:eb:43:
ac:0d:dd:86:bc:e2:d5:67:ab:cb:db:d6:7f:1e:b9:33:93:ad:
ff:3b:61:da:84:1c:a8:ff:ca:2d:46:de:91:c2:26:ae:30:c2:
f8:d7:5d:7a:f6:5b:db:46:d5:58:a4:5d:5e:0a:e4:f9:ad:cf:
16:78:e8:5c:a1:5a:82:d9:d8:be:08:de:89:3b:42:62:97:5d:
c5:75:2d:64:4c:62:3d:dd:97:e2:f9:61:97:52:c4:8a:30:d7:
cc:97:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:46:33 2025 by rpki-client