Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: QYr5iQJFRyGUxEVrGEBZPYWIVVQulyrjEOlCqEixTsg=
Subject key identifier: 3B:35:FF:B0:86:52:94:27:60:E8:B9:E4:FB:DE:94:15:DF:F5:3A:48
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0196BC6DB5CA7537AED0E7D8570B7E439D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 03D2
Signing time: Sat 10 May 2025 23:00:28 +0000
Manifest this update: Sat 10 May 2025 23:00:28 +0000
Manifest next update: Sun 11 May 2025 23:00:28 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: xIlnH87hw81AH7DPAn/be1WwDQvlMNqp65Uzf73XmVY=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:b5:ca:75:37:ae:d0:e7:d8:57:0b:7e:43:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: May 10 23:00:28 2025 GMT
Not After : May 11 23:00:28 2025 GMT
Subject: CN=3b35ffb08652942760e8b9e4fbde9415dff53a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:1a:fc:56:46:2f:4a:c1:2f:30:17:2f:c9:
56:27:05:56:18:66:98:43:e3:24:40:c7:ca:a4:55:
5f:41:14:35:f1:70:99:9c:64:21:f4:54:ba:ae:de:
71:1a:62:b0:31:d0:88:1b:d8:f5:19:8a:91:e8:42:
76:1a:f5:c0:65:86:2b:36:d0:c6:83:ee:71:b9:f9:
2d:4b:dd:6a:2e:32:fd:de:a3:5a:a5:63:3e:f1:da:
f3:b3:10:57:83:a7:33:27:eb:36:db:83:10:5d:0f:
ac:8a:b5:01:c1:84:ae:b2:cd:24:dc:7c:08:73:32:
56:34:f2:f7:a5:ea:1c:6f:24:95:6d:bf:86:ec:a7:
61:5e:9f:fe:00:15:17:a2:67:36:03:14:5e:1c:1d:
e1:d7:c5:f1:cc:47:cb:d8:a4:81:d3:1a:f1:1e:48:
06:80:9d:fe:d1:00:aa:d6:be:43:da:f1:68:97:22:
29:21:81:98:8c:eb:11:87:1e:4c:69:47:a9:9a:31:
12:4e:c5:f9:85:3e:2d:be:54:7e:90:9c:ba:7e:a8:
12:e2:6c:ef:c0:07:14:0e:6a:d7:28:a3:fc:76:91:
a5:9d:a2:b1:e5:2c:b7:2a:a1:2e:70:42:f0:85:8e:
e1:5a:f1:45:a0:39:18:a0:84:bc:f0:ae:7e:71:45:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:FF:B0:86:52:94:27:60:E8:B9:E4:FB:DE:94:15:DF:F5:3A:48
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4f:5c:18:ef:95:3e:97:91:24:e9:91:d8:f9:8e:66:37:36:
22:8a:70:1b:42:1c:85:2c:43:45:aa:bb:e3:ca:b4:2d:08:d2:
c8:ac:c1:2d:51:19:5b:01:ab:74:df:48:e3:89:c5:d6:39:04:
08:4c:fc:90:e9:2d:b5:bd:30:2c:2c:ee:e3:9c:92:82:fb:0d:
7b:03:a5:62:b6:34:4b:fa:3c:2b:de:97:c9:53:74:02:b2:bb:
c1:68:a6:40:0d:9f:0b:96:cd:e4:59:fb:32:ff:f1:d4:95:06:
6d:9a:e6:27:9f:88:5b:21:2c:32:e1:4b:cc:d2:2b:f0:17:41:
e0:e7:35:6c:ab:c4:23:01:c1:ef:ad:9e:ea:39:e1:b2:0d:1d:
6b:f6:ed:9c:e7:cf:f9:e8:91:42:fa:99:0e:56:1d:90:12:da:
a9:1c:af:47:d8:d1:6b:d0:06:48:a5:72:1e:11:25:f5:a6:a6:
a8:25:d4:3a:aa:b3:2f:44:37:02:74:a2:ee:6b:aa:86:99:31:
88:7e:45:10:e4:f9:0a:82:e8:9f:b9:a7:3d:e0:32:98:68:e7:
0a:3f:44:24:58:c6:91:58:94:77:d0:cd:25:8f:7d:ba:66:a1:
e2:c5:e3:a0:8e:e2:7a:ef:85:7f:cf:76:90:38:4a:6f:13:a8:
e3:be:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:13:18 2025 by rpki-client