Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: ZSMesLSRl7eA5j3rUJdT5y4cBXuPlqRUCKrFKoV5fNo=
Subject key identifier: 55:E9:D4:D8:9E:AD:1F:0C:96:24:54:EE:99:6C:06:59:40:EB:D4:DF
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 0198D65F61A49BC9CB8D49427398551B8C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0EB1
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: /sqBPmQ2ElNB4CO2N28ABhdKHob7O6EUxCEjOEfWGrE=)
2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:61:a4:9b:c9:cb:8d:49:42:73:98:55:1b:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=55e9d4d89ead1f0c962454ee996c065940ebd4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:c2:3a:5c:e9:7e:5c:41:dd:84:14:d3:1a:
4a:b4:0e:72:e4:97:f0:00:0c:f6:ce:cf:93:1c:9c:
74:0a:5c:8f:56:37:2d:dd:c5:78:3a:ff:a4:26:11:
85:61:51:08:2e:3f:85:40:4e:17:10:68:dd:87:98:
10:1f:25:a6:f4:02:f2:52:fc:1d:b3:bb:87:81:63:
c2:88:fb:88:a4:56:88:c0:02:91:0a:af:cc:1f:79:
74:37:91:c8:39:7f:0f:74:0c:5e:56:20:27:d2:ce:
2b:2e:52:b0:fe:65:df:8e:00:de:8d:aa:c4:5e:2f:
c8:58:bf:7c:b5:65:76:9a:64:23:77:b8:cb:60:c5:
0d:b0:a2:59:fb:62:8b:27:2e:db:fb:69:bd:8e:5c:
7a:12:14:2f:3d:d5:0e:65:6c:29:d6:73:77:bc:cd:
59:8f:3b:61:cf:cb:2c:80:4a:ae:70:f0:0b:90:cc:
79:6c:e2:de:d9:59:e8:62:8d:4b:62:83:59:0d:f6:
d2:f9:0e:c8:13:f0:91:d4:a3:78:06:87:c4:1c:88:
56:ef:c0:e8:97:b7:5e:b4:7e:ed:a2:c7:af:ca:df:
bc:62:de:d3:a1:d9:29:28:32:7a:95:1d:13:c4:67:
8d:ff:3e:72:b0:f0:9f:fe:c2:d0:60:21:f1:56:1f:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:D4:D8:9E:AD:1F:0C:96:24:54:EE:99:6C:06:59:40:EB:D4:DF
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:e6:79:7b:bf:46:33:9d:6c:b3:f6:77:a5:10:23:33:cf:
5a:1d:bf:d3:99:03:70:33:05:3a:7a:83:65:12:8a:e6:8a:81:
98:8c:8a:36:3e:ec:c8:d6:ac:b6:92:23:7b:cf:68:d6:b0:66:
57:a3:44:0c:38:84:d2:45:b9:e4:80:5c:94:e6:61:eb:74:e0:
68:dc:b3:73:f5:2d:8d:90:18:78:b5:4d:c7:86:6c:7f:83:ea:
f8:9a:4f:bd:65:47:6d:da:a6:f5:82:75:f1:2b:41:ac:45:d7:
a2:87:0a:c7:57:3d:f8:6b:37:73:8e:4e:8e:d4:b5:8f:1e:c9:
62:79:a9:e6:63:14:c0:df:d6:67:6b:68:3b:f4:3a:54:92:56:
f6:e6:6b:26:79:61:7a:f4:c7:2d:fe:84:24:b9:c4:a5:96:2c:
5c:42:84:f7:5d:e6:fc:73:31:8a:d1:71:b9:0e:46:ca:2d:65:
a7:75:a6:04:40:ae:8a:c0:c7:f9:e0:86:3a:d0:d8:1e:f2:e9:
64:a8:33:9e:13:ea:b1:7d:d2:81:b3:e4:47:38:52:f6:64:fe:
06:a8:6c:43:28:fb:eb:e7:1e:e4:a3:a8:78:39:be:2c:cf:2c:
dd:4f:2c:54:be:fc:61:89:4b:47:00:8d:c6:7e:32:73:d5:58:
b7:db:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:18 2025 by rpki-client