Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: aGvhxf5/ysN4bAr8WawJvbi/O6QMErJrvJJP6UzvDAI=
Subject key identifier: D8:B5:33:B6:D2:3F:21:77:F2:29:FA:85:35:65:2C:80:DF:40:FC:10
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 0196C4CC28D825E07940FC90F8DA620AD5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:36 +0000
Manifest this update: Mon 12 May 2025 14:00:36 +0000
Manifest next update: Tue 13 May 2025 14:00:36 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: jYxCOG+md6ZjpOA9KJx115X27smF2EsgIDL+5eTJjfY=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:28:d8:25:e0:79:40:fc:90:f8:da:62:0a:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: May 12 14:00:36 2025 GMT
Not After : May 13 14:00:36 2025 GMT
Subject: CN=d8b533b6d23f2177f229fa8535652c80df40fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:79:e0:01:92:1d:82:da:0d:0b:c4:56:f2:
b0:76:c2:19:53:99:50:30:a9:7c:5a:d4:a4:a9:f5:
2c:d3:90:7c:19:60:d9:fe:b7:7c:66:23:7b:54:8b:
40:29:e7:5e:4d:0e:ee:49:e8:2b:ca:59:3a:8a:8f:
25:0e:9a:94:38:4d:db:85:cd:5c:01:ac:f4:91:fd:
f3:e2:93:e9:3c:dd:50:35:67:1a:c1:de:ea:74:ef:
77:4e:28:1e:90:18:42:9e:b5:53:17:e7:3d:99:9b:
56:41:72:75:35:d0:7e:e1:b7:5f:ca:1e:a7:9a:1c:
15:77:e5:b7:6f:c7:9c:d5:3f:d3:d8:14:6a:ee:dc:
e3:83:e0:0d:77:7b:fa:92:dd:02:b7:cd:f5:d6:df:
f5:c0:82:88:ed:f3:b6:e6:a5:d2:aa:b9:2c:1c:4e:
6b:40:6d:1f:70:34:f2:f8:f1:0c:49:e3:be:3e:32:
26:ab:fc:f3:c2:ef:c2:b5:e2:0a:13:20:f7:aa:43:
1b:2c:94:b8:86:de:a5:3a:b7:db:21:34:4c:35:ab:
e1:b2:a4:16:9e:3e:95:1b:66:29:32:28:c1:21:88:
15:ad:42:a0:00:bb:b9:86:ab:52:77:b9:52:5f:ae:
3d:36:c6:42:0b:07:e7:86:8d:4d:a0:3c:02:d4:4a:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:33:B6:D2:3F:21:77:F2:29:FA:85:35:65:2C:80:DF:40:FC:10
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e7:de:c0:35:0c:35:04:f3:d0:dd:00:c0:16:8f:f7:f4:93:
76:03:8e:d9:d8:b9:37:56:3f:66:46:80:ad:75:41:15:e4:15:
af:65:e4:53:f3:21:d2:2f:35:6a:be:c8:90:1b:bd:21:db:b4:
f6:d7:16:a6:8b:48:99:c6:8e:06:cb:1e:bd:43:9b:0f:7b:74:
18:92:84:06:2a:17:ae:0e:d4:a7:f5:90:cf:8e:4b:7f:19:dc:
bb:d6:9f:38:0f:6b:7d:f3:62:b2:a9:01:01:18:d3:d1:77:a6:
5f:03:91:2e:10:f6:46:05:ed:2a:01:c4:b5:95:74:72:b4:64:
13:a6:7f:3b:81:2f:1a:9b:2d:28:f8:ef:10:f0:c8:6c:13:a2:
bb:ca:90:3a:13:3f:60:ca:70:67:42:72:4b:97:93:4b:6f:2e:
e2:61:17:cf:37:a4:22:8b:73:83:b0:6c:2d:a3:f7:30:ca:a2:
c3:16:a3:a8:4b:d9:62:79:e7:47:36:f1:05:b8:30:2c:2d:a6:
c9:cf:77:74:ff:e7:67:c9:e0:46:34:e1:e0:8d:a7:1c:08:8c:
46:57:38:85:1f:48:1b:e0:1d:3c:75:bb:d0:e4:30:88:6c:fd:
61:b6:4a:fa:f5:dd:82:5d:7e:3d:ab:e1:c5:79:56:90:2d:41:
e7:db:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:03:51 2025 by rpki-client