Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: HQa+uxSn1fgkq2FiZNJ/JVJFWQR90rucQHy8GB0KL50=
Subject key identifier: A3:6B:55:7A:AA:51:69:08:08:A5:03:40:2C:BD:D7:14:7F:C1:EB:19
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0199FEB497E10B992929E0794FE777056714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0582
Signing time: Sun 19 Oct 2025 23:01:12 +0000
Manifest this update: Sun 19 Oct 2025 23:01:12 +0000
Manifest next update: Mon 20 Oct 2025 23:01:12 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: 10MbFJHdUxPJbvRe67RdWSTxtXxQlu+AQxJH/RRZpg8=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:97:e1:0b:99:29:29:e0:79:4f:e7:77:05:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Oct 19 23:01:12 2025 GMT
Not After : Oct 20 23:01:12 2025 GMT
Subject: CN=a36b557aaa51690808a503402cbdd7147fc1eb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:d4:97:07:70:44:7d:ab:5c:08:64:89:fe:
7a:84:b7:6a:5b:4c:fa:9f:94:ea:00:7b:3a:97:47:
da:6f:2c:e8:13:5f:c0:5b:4c:90:33:24:e8:b4:9e:
91:70:f6:92:8f:ee:16:5f:57:e9:d0:43:c5:5f:2e:
71:3c:a2:8e:3d:80:ae:d7:d7:87:94:77:b3:bb:68:
20:f5:34:73:d6:a1:54:48:6f:de:aa:fb:1d:90:1d:
6d:a3:71:62:21:c0:79:7f:a9:fb:c4:ef:35:89:90:
f4:db:88:87:36:08:5b:0c:4a:7b:00:34:dc:a5:e3:
b7:64:58:24:9b:4b:73:eb:b0:d9:1d:0b:53:9e:f9:
f5:93:77:97:3c:07:29:b3:24:c0:73:1c:78:66:dc:
57:70:d1:23:c6:dc:9b:33:ca:58:ae:57:fe:0c:7e:
4a:02:72:a2:c3:c0:8c:34:87:e1:19:f6:b3:04:c2:
a1:a2:ca:ab:db:de:7b:4c:a0:60:a0:13:dc:76:2c:
3e:ae:28:f9:e4:f0:d8:03:af:58:8f:ad:32:d6:57:
84:05:65:2e:d9:e2:5d:3f:9a:46:e2:32:7c:dc:e2:
1f:25:e5:95:cf:95:83:29:53:fd:02:2e:3e:ec:18:
e6:88:38:cc:aa:ea:12:46:32:3a:d2:f1:2f:dd:fb:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:55:7A:AA:51:69:08:08:A5:03:40:2C:BD:D7:14:7F:C1:EB:19
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:de:9c:40:fe:c2:b1:f8:3a:8a:b2:34:19:9b:ba:7e:90:e5:
ab:5a:92:24:c8:0d:58:0b:f1:0e:ea:74:6a:19:ce:16:46:cc:
3d:21:30:48:c3:84:d8:2f:96:a5:bf:b5:3a:6f:0e:77:56:66:
5b:f9:f6:de:4d:00:08:91:7b:9e:0c:dd:a9:c5:81:8f:c1:7d:
c0:b1:18:85:1c:38:e5:5e:9b:27:6d:05:13:39:e0:62:85:f8:
d7:a1:0e:c1:86:f4:21:b7:b3:66:4e:35:c3:8d:43:a3:7d:12:
07:f1:c9:60:72:fa:49:5b:6a:3e:ae:b7:91:c8:bf:7b:ac:7e:
dd:ed:50:7f:37:52:61:23:85:7d:94:3f:f5:76:39:9e:0b:92:
45:30:8d:a9:74:d8:56:cd:bc:23:59:61:85:fd:cb:20:72:8c:
65:b2:b1:4d:7a:96:2f:9b:cb:f1:2b:36:61:cc:fb:ea:c2:10:
c4:7e:e3:9e:5c:83:79:2a:90:bc:16:ef:1f:8a:f9:92:03:0a:
f0:d0:9d:36:20:e3:5f:8a:68:5d:94:c4:6f:e2:42:e3:79:51:
08:46:b8:af:c5:43:5a:e9:23:e6:2e:6f:5d:82:36:30:3b:af:
31:d7:69:92:4e:c7:27:cd:fb:2b:1b:24:4b:26:01:a7:1e:86:
d8:87:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:26 2025 by rpki-client