Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: jJUk1M4FrMqS/Tt+Rn98mLsz0vmkwKey2k0KojwveBk=
Subject key identifier: 97:7D:47:54:4E:3F:4B:53:C5:98:52:8E:C3:E2:10:16:36:A9:5D:B0
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0198D54DE12D309A6FEDFF90F95F26C49359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 04E8
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: uv6gjhhG+BIfsmxpIFMSKbsII7yctkK9A9VMNea4WIA=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e1:2d:30:9a:6f:ed:ff:90:f9:5f:26:c4:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=977d47544e3f4b53c598528ec3e2101636a95db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:2f:ce:22:6f:fe:f8:3d:4b:46:81:d2:47:
9c:df:12:52:fa:16:a5:02:d2:69:83:36:d1:f7:94:
a5:8f:32:69:c0:61:a1:b5:fc:1a:22:d0:e6:f9:af:
9d:1f:17:54:2f:5a:b3:fa:47:a0:30:73:44:32:5e:
b1:b7:e2:75:5f:12:b0:ec:63:c1:62:54:c9:7b:ff:
ab:db:f6:a6:88:e0:34:18:3b:40:78:49:29:99:48:
c9:37:95:29:a6:1e:32:34:b8:35:b1:bf:df:e7:2d:
a1:a3:d8:48:b0:72:fd:85:ee:98:ac:76:38:ce:9a:
a4:a2:d6:e1:29:7c:26:3c:49:92:4e:09:9d:6b:8d:
1d:09:99:74:8e:e9:2c:2c:3f:d7:22:fc:8c:b0:bd:
ed:8b:1c:df:fa:2b:32:3c:c7:ca:21:1e:72:d9:6f:
2f:5a:37:e2:2c:53:3b:2c:10:c7:12:d0:d8:d3:54:
09:77:a5:e3:45:db:28:e6:77:36:38:25:8c:b4:aa:
08:6d:9f:56:77:26:27:8e:21:e0:f6:fe:dc:fd:73:
32:5c:70:a8:64:5d:46:32:3f:c3:e4:67:1a:f0:6d:
6e:86:53:0b:32:01:fc:79:c3:b3:a1:cb:f6:8d:1b:
19:9e:dc:99:69:b6:8f:e0:9a:62:bf:35:1f:05:cb:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:47:54:4E:3F:4B:53:C5:98:52:8E:C3:E2:10:16:36:A9:5D:B0
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:e7:5a:d7:96:cb:e3:c6:ae:28:32:17:0e:2b:4d:42:61:
9e:a2:96:c0:8c:fa:4c:fc:a1:28:40:b9:a1:9b:fe:6d:9e:b6:
1c:6d:b9:3d:90:6f:07:20:a3:0c:26:23:aa:73:38:28:76:43:
d4:c0:e0:65:25:1f:bb:b2:e3:5c:87:90:96:62:c3:26:54:2d:
44:89:af:28:ea:a2:9a:b3:8d:a1:24:b1:e2:b3:ef:1b:50:28:
12:5e:30:87:cb:6a:d5:c1:0b:a3:85:c1:39:d8:5a:8e:73:4a:
70:41:9f:91:03:d2:79:6d:7e:78:12:fe:cf:3e:03:f6:28:cd:
4e:f0:1b:04:cb:57:b6:37:a2:ab:91:e1:1b:4c:d0:11:84:97:
a4:10:a2:99:45:87:71:20:5c:c8:a3:21:6f:f8:16:d4:80:ec:
4d:78:58:00:84:67:35:86:ea:00:ef:fa:d1:f7:08:e6:01:64:
cf:4a:99:5d:2e:43:58:e9:de:3a:8c:e0:2c:03:04:c2:2e:cf:
b5:83:91:f3:9e:f9:82:94:b8:bc:3d:dd:99:ed:06:7d:ee:d3:
6c:8d:9e:f2:89:a0:8f:9e:21:9b:39:f9:27:35:08:95:06:8e:
e6:42:3e:d9:70:7e:0c:4b:ca:59:7c:74:68:14:52:57:78:c6:
e5:50:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:00 2025 by rpki-client