Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: U65C19ExhojT6qydwv/hl27foWhnw389wuxNYPkamNM=
Subject key identifier: CE:83:26:F4:7B:DA:8D:5A:AE:CD:A6:F8:BE:1D:E0:74:30:E9:C7:9E
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 0197B6A11E85009CB001F5EBDD4D3DD7F2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: JnG5UInTQ7CoIGoHcmtxEIkIln9J10+aqb15av86O3s=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:85:00:9c:b0:01:f5:eb:dd:4d:3d:d7:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=ce8326f47bda8d5aaecda6f8be1de07430e9c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:d7:78:73:01:55:98:67:09:dd:23:79:f8:
c7:0d:a6:02:a0:a5:5d:ba:35:5f:f9:ba:b2:e0:75:
62:69:e8:a7:0a:fd:b4:12:7a:b4:30:65:13:5b:48:
c2:07:b6:29:0b:e2:2c:6a:90:44:af:46:c7:16:34:
d4:64:83:16:45:7e:ec:91:39:60:73:8e:14:2c:ff:
c8:64:2a:b3:e8:89:ee:55:63:e7:ba:3c:bc:fd:90:
2d:8a:3f:95:b8:aa:da:1f:5b:58:50:16:9c:a7:1f:
5e:4d:a4:6c:2f:09:fc:f0:c6:a4:09:2e:b1:58:49:
73:dc:77:fe:c8:3b:db:9a:a7:94:5f:2f:bc:83:70:
a2:18:55:d1:4e:1d:60:3c:cb:82:7d:d3:4a:e1:14:
59:91:69:f8:61:9a:1a:f6:c2:3d:5d:ae:27:11:87:
b1:f0:5b:a8:60:e5:21:0f:b0:26:ae:b4:4d:6c:5b:
5a:59:4b:f4:04:c7:fb:6f:16:69:11:8b:44:cb:42:
22:ab:d8:11:bd:18:8a:81:8f:70:80:8e:9f:19:7f:
0c:5f:61:12:aa:c3:bb:d3:46:22:8c:88:4e:8e:e5:
67:27:07:51:12:c3:77:55:a8:d9:4a:d0:d0:ba:39:
83:e3:f2:de:bd:f8:31:aa:e0:e2:76:67:66:f3:1c:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:26:F4:7B:DA:8D:5A:AE:CD:A6:F8:BE:1D:E0:74:30:E9:C7:9E
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:35:01:db:49:81:63:24:6f:16:3a:d8:bf:d8:71:21:af:0e:
1f:ee:78:ce:f1:bd:6d:4e:4c:cf:56:72:af:82:49:f7:0f:e1:
64:75:11:f0:86:da:f8:d8:41:65:37:6a:57:a5:65:e0:7b:62:
82:47:cb:13:cd:cc:c8:41:4f:4a:2e:15:9a:dc:de:fa:d9:cc:
1d:28:02:75:bf:73:99:07:94:95:f4:42:1f:99:0a:c7:20:b1:
92:e9:8a:e9:7a:79:05:a4:f4:a6:80:48:7d:e5:14:82:c6:1f:
e1:a1:8d:0b:5e:80:87:46:ac:15:e2:80:6f:05:f8:99:a9:56:
a5:cb:07:d0:a6:7d:34:c0:58:9e:33:6b:41:f9:92:ee:00:bb:
48:76:fc:86:0d:ad:cd:82:ed:42:5b:d0:56:0e:73:c1:52:34:
f4:02:5c:d4:3f:f7:c0:dd:c3:34:65:2e:4b:4a:11:40:3f:a3:
11:0d:13:82:d4:e9:c3:9b:02:1f:f8:be:31:2c:21:7f:ec:79:
cb:48:ee:82:76:d5:c7:fc:08:34:cf:7c:10:f1:3e:0a:68:69:
6d:ec:cf:94:97:5b:e2:ae:77:02:6f:d5:1f:6f:cc:82:1d:a2:
c6:96:49:4a:1c:5b:85:d6:f7:f8:35:1b:17:47:8f:06:b6:c8:
92:16:58:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oR6FAJywAfXr3U091/KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjExMTNiZmM4OTJkMWRmNDlhMTY2MDQ3Y2I4YzJhYWVj
YTc2OGUwHhcNMjUwNjI4MTMwMTQxWhcNMjUwNjI5MTMwMTQxWjAzMTEwLwYDVQQD
EyhjZTgzMjZmNDdiZGE4ZDVhYWVjZGE2ZjhiZTFkZTA3NDMwZTljNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGbXeHMBVZhnCd0jefjHDaYCoKVd
ujVf+bqy4HViaeinCv20Enq0MGUTW0jCB7YpC+IsapBEr0bHFjTUZIMWRX7skTlg
c44ULP/IZCqz6InuVWPnujy8/ZAtij+VuKraH1tYUBacpx9eTaRsLwn88MakCS6x
WElz3Hf+yDvbmqeUXy+8g3CiGFXRTh1gPMuCfdNK4RRZkWn4YZoa9sI9Xa4nEYex
8FuoYOUhD7AmrrRNbFtaWUv0BMf7bxZpEYtEy0Iiq9gRvRiKgY9wgI6fGX8MX2ES
qsO700YijIhOjuVnJwdREsN3VajZStDQujmD4/LevfgxquDidmdm8xyhQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6DJvR72o1ars2m+L4d4HQw6ceeMB8GA1UdIwQY
MBaAFN/xETv8iS0d9JoWYEfLjCquynaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjdiOGYtMzc0My00NDcwLWE5YjUt
NWE1NDE2OWMxYjVlLzEvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYjdiOGYtMzc0My00NDcwLWE5YjUtNWE1NDE2OWMxYjVl
LzEvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTUB20mB
YyRvFjrYv9hxIa8OH+54zvG9bU5Mz1Zyr4JJ9w/hZHUR8Iba+NhBZTdqV6Vl4Hti
gkfLE83MyEFPSi4Vmtze+tnMHSgCdb9zmQeUlfRCH5kKxyCxkumK6Xp5BaT0poBI
feUUgsYf4aGNC16Ah0asFeKAbwX4malWpcsH0KZ9NMBYnjNrQfmS7gC7SHb8hg2t
zYLtQlvQVg5zwVI09AJc1D/3wN3DNGUuS0oRQD+jEQ0TgtTpw5sCH/i+MSwhf+x5
y0jugnbVx/wINM98EPE+CmhpbezPlJdb4q53Am/VH2/Mgh2ixpZJShxbhdb3+DUb
F0ePBrbIkhZY+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:52 2025 by rpki-client