Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: VlWP+k38qq713T4fVmApikQCjhMdjX14stikpLeAUXg=
Subject key identifier: 0A:A4:66:D9:D3:ED:A6:27:49:B5:A1:E7:EB:0F:E9:ED:0C:D9:C0:F8
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0197B77CB01D8EF81AA2057DEFDBD0F75632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0454
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: ZiNQzNM0SJxQg09puHlHJb4XeNzdoniP0EYzRch7D4E=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b0:1d:8e:f8:1a:a2:05:7d:ef:db:d0:f7:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=0aa466d9d3eda62749b5a1e7eb0fe9ed0cd9c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:ed:7d:2f:ee:a0:c4:be:e0:77:74:98:50:
e6:f4:a7:4a:87:9e:72:c6:d9:36:5b:30:e1:2f:01:
48:a6:f1:d7:13:bc:47:91:c7:3b:62:8a:bd:43:8e:
49:96:de:b3:87:bd:8f:33:f3:54:7d:91:d5:4a:14:
0f:de:dd:3a:82:51:d0:1e:3b:7c:65:79:50:f2:39:
de:ea:50:fa:44:df:60:de:77:c1:e9:d2:83:4d:4d:
3b:86:bb:1a:12:88:b8:5a:f3:5d:b0:c8:bd:78:26:
c3:b6:b1:74:e1:e6:fd:81:aa:d3:de:0c:57:96:60:
b3:6a:10:4f:a8:98:7d:a6:5b:21:02:e8:d3:00:3d:
8d:4d:2e:62:20:b5:0d:ff:ff:02:0a:ea:f8:d0:94:
82:d3:c8:9b:d7:bd:8d:8e:52:c6:f1:2a:a7:5a:66:
46:ba:d3:63:c9:b0:40:c6:17:53:10:10:ad:00:2a:
2c:75:2e:64:db:50:ab:f3:25:d2:f0:e9:df:7b:29:
34:6b:16:16:34:5a:72:d9:c2:80:6b:41:09:83:58:
94:40:b2:31:1d:4b:62:39:d6:23:f8:3f:b3:f2:3a:
59:2b:e4:4e:a3:1a:09:45:db:ba:df:ab:fc:e5:d2:
1f:c6:80:8b:aa:fa:11:92:1d:69:52:78:f2:d9:48:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:66:D9:D3:ED:A6:27:49:B5:A1:E7:EB:0F:E9:ED:0C:D9:C0:F8
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d2:62:48:5c:57:1b:13:97:2e:d4:5c:5a:c5:01:5a:78:13:
10:41:55:d5:13:c1:20:aa:6c:bb:59:18:63:58:d9:58:d1:bb:
86:a2:a6:3d:3c:5f:b2:f0:93:40:6c:a8:3f:a3:e4:e3:b6:dc:
c2:af:b7:42:61:62:1e:83:47:52:f1:41:36:1d:2a:50:f6:2f:
08:ba:df:5f:89:a0:b9:93:45:9a:45:34:33:dc:ee:42:15:a7:
e9:f3:d6:99:28:bd:df:9a:26:b4:79:7f:b2:5d:b6:5b:e7:13:
c3:f3:a3:f1:e9:67:1b:7d:a4:74:e2:7b:9c:a7:fe:91:ec:db:
fc:36:99:35:db:31:d7:3f:0d:6e:de:e8:ba:23:48:49:c0:18:
b7:40:bf:13:34:c3:35:2b:42:af:13:76:b9:e7:52:61:b8:22:
cb:df:79:7e:6f:44:5e:a7:2d:06:a6:26:25:6c:b1:b9:7f:4c:
5a:85:5e:53:a2:3b:ff:2b:9e:66:da:01:9a:12:f2:75:b1:42:
03:45:f8:64:59:46:23:d7:8a:7c:29:96:c1:ed:67:77:c2:ab:
de:72:0d:18:1b:7c:af:43:61:22:91:2e:fb:65:5c:3f:70:bf:
6c:13:51:bf:4a:40:b8:76:ec:d7:3f:10:16:d5:76:20:f7:a5:
75:4a:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:07 2025 by rpki-client