Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: K6xFBDIdsxe2h0AY8jHQyNoaWMhzq0Vj7zAkNM69glo=
Subject key identifier: 41:5A:3D:24:1A:3C:EC:D2:49:CC:55:5A:47:79:5A:54:CB:E5:73:52
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 0197CBE05F79A711E0AC35EF648B26F194CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0E27
Signing time: Wed 02 Jul 2025 16:02:48 +0000
Manifest this update: Wed 02 Jul 2025 16:02:48 +0000
Manifest next update: Thu 03 Jul 2025 16:02:48 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: lYbnry+7sBRan8LwCU8dGfbVdNlRGNGms/2rctYpmKc=)
2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:5f:79:a7:11:e0:ac:35:ef:64:8b:26:f1:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Jul 2 16:02:48 2025 GMT
Not After : Jul 3 16:02:48 2025 GMT
Subject: CN=415a3d241a3cecd249cc555a47795a54cbe57352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:1f:d6:dc:51:a2:db:97:39:9b:a8:04:17:
24:38:69:77:54:bb:8b:39:0a:9e:6c:0a:9b:17:c6:
bb:29:65:26:e4:30:2e:10:a0:9b:1a:6e:ab:e5:7d:
a9:67:ff:3b:32:a3:d8:59:27:e6:eb:aa:8c:37:3f:
61:32:66:b1:83:fb:b4:f6:86:55:28:b8:12:a1:7d:
ee:77:16:00:0f:73:9a:9e:55:3f:2d:cd:bb:13:06:
b6:bc:da:53:aa:34:90:16:41:e2:8d:b5:ee:90:00:
10:23:47:c1:8d:0d:26:62:05:be:f3:31:ac:41:55:
44:88:e0:93:f7:8f:dd:7c:ff:81:e2:97:40:3c:34:
c8:06:04:29:39:c7:11:8c:d4:ed:25:f5:5c:6c:87:
e2:f0:f5:04:3d:76:15:8a:74:a6:b3:e2:b8:58:bc:
f2:62:01:bf:04:d4:49:e8:fc:4b:05:57:dd:67:8f:
b9:94:c8:57:21:9d:fd:c8:f8:c3:75:69:ce:5a:7b:
96:c7:5f:cb:d7:04:04:b2:3a:04:73:74:ae:cd:6f:
20:72:8c:98:de:aa:47:03:7f:1b:5d:95:06:d0:58:
80:ab:0a:61:2f:83:9c:61:24:d7:51:76:cf:21:cf:
77:a0:87:60:30:f9:3c:77:6c:7d:17:b4:89:3c:71:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:3D:24:1A:3C:EC:D2:49:CC:55:5A:47:79:5A:54:CB:E5:73:52
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:1a:1b:77:5d:56:08:b8:bc:60:6e:f4:9d:51:9e:3f:ed:
a6:ef:39:36:c0:31:4d:cd:83:63:5f:eb:ed:f2:d3:c8:d1:7e:
14:ca:97:ce:c0:1a:d1:1f:a4:04:6d:ce:c5:69:c0:c9:4d:1a:
d1:7a:d0:d3:59:03:aa:e1:20:76:66:3a:37:be:da:58:77:e6:
40:f1:d3:e2:6b:81:71:a1:87:6d:ad:d9:77:b4:79:d7:e3:af:
c2:bc:c2:6d:d9:49:04:fc:73:74:9f:0b:5f:a8:10:6b:e4:c1:
28:aa:a9:5b:cc:b8:92:45:76:c1:23:39:04:8f:04:a7:b7:0e:
b2:0e:d1:d4:f0:32:b6:62:8c:5e:1d:90:49:5d:ee:01:77:9f:
ce:c9:fb:45:be:f6:f4:d8:74:6a:7f:af:c9:99:83:d5:df:3c:
d9:e7:db:2a:d8:a8:0a:1f:c5:75:ce:1a:37:4b:de:98:d7:d7:
1c:b7:44:2e:2c:5d:fc:2e:aa:68:0b:d7:0e:e0:4d:3d:e4:a7:
ea:04:16:7d:19:ea:ec:21:47:96:cf:d8:e5:be:cc:00:ce:a9:
94:7b:f2:17:86:2d:9c:51:ad:f7:09:52:1b:1d:ac:95:7e:cf:
1d:e9:77:1f:6d:37:12:31:6d:f2:77:fd:2b:1a:32:eb:8a:aa:
67:30:45:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL4F95pxHgrDXvZIsm8ZTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTQ1ZmRlMDFhZjgxMDc2MGVlNjFiY2YzNTRjZjk2MmFj
NDYwZDkwHhcNMjUwNzAyMTYwMjQ4WhcNMjUwNzAzMTYwMjQ4WjAzMTEwLwYDVQQD
Eyg0MTVhM2QyNDFhM2NlY2QyNDljYzU1NWE0Nzc5NWE1NGNiZTU3MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDMf1txRotuXOZuoBBckOGl3VLuL
OQqebAqbF8a7KWUm5DAuEKCbGm6r5X2pZ/87MqPYWSfm66qMNz9hMmaxg/u09oZV
KLgSoX3udxYAD3OanlU/Lc27Ewa2vNpTqjSQFkHijbXukAAQI0fBjQ0mYgW+8zGs
QVVEiOCT94/dfP+B4pdAPDTIBgQpOccRjNTtJfVcbIfi8PUEPXYVinSms+K4WLzy
YgG/BNRJ6PxLBVfdZ4+5lMhXIZ39yPjDdWnOWnuWx1/L1wQEsjoEc3SuzW8gcoyY
3qpHA38bXZUG0FiAqwphL4OcYSTXUXbPIc93oIdgMPk8d2x9F7SJPHG1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFaPSQaPOzSScxVWkd5WlTL5XNSMB8GA1UdIwQY
MBaAFBEUX94Br4EHYO5hvPNUz5YqxGDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUt
YzMwNWM4ZDlhMzE5LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUtYzMwNWM4ZDlhMzE5
LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdisaG3dd
Vgi4vGBu9J1Rnj/tpu85NsAxTc2DY1/r7fLTyNF+FMqXzsAa0R+kBG3OxWnAyU0a
0XrQ01kDquEgdmY6N77aWHfmQPHT4muBcaGHba3Zd7R51+OvwrzCbdlJBPxzdJ8L
X6gQa+TBKKqpW8y4kkV2wSM5BI8Ep7cOsg7R1PAytmKMXh2QSV3uAXefzsn7Rb72
9Nh0an+vyZmD1d882efbKtioCh/Fdc4aN0vemNfXHLdELixd/C6qaAvXDuBNPeSn
6gQWfRnq7CFHls/Y5b7MAM6plHvyF4YtnFGt9wlSGx2slX7PHel3H203EjFt8nf9
Kxoy64qqZzBF6w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:14 2025 by rpki-client