Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: ddAtRJ45glI8XCUuRceIJ86G56XdGYDf4QEx40EfnTI=
Subject key identifier: EE:00:96:AE:48:5B:0E:F7:9D:4E:53:FF:A2:0D:9A:89:1C:CA:AA:02
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 0197B82142E8545AEE594371756F37994D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: daWfcdwlu1qK8OS8VfRxF0AUzlO+Jp3gfc7Dqpapd9E=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:42:e8:54:5a:ee:59:43:71:75:6f:37:99:4d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=ee0096ae485b0ef79d4e53ffa20d9a891ccaaa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:0b:d9:55:71:00:15:17:53:0a:d8:d8:70:
89:76:09:3b:c6:5b:2e:ad:29:82:c8:fd:d0:e1:d0:
46:97:ba:4f:49:de:11:9c:87:4d:60:ad:aa:9f:68:
12:9a:39:d2:3f:15:3d:b8:ea:5e:9a:d7:a5:62:39:
6c:e6:f1:e4:96:47:45:6d:5a:ef:93:ed:4f:57:7d:
c9:0d:ef:07:2f:3b:1f:5e:34:ce:66:c6:26:ec:f6:
8b:0e:62:20:6f:8e:28:e5:c2:99:45:b8:7b:a1:86:
71:7c:e1:7e:ab:2d:4a:a9:2c:41:fb:6a:63:48:50:
0e:d4:24:24:80:65:a9:a8:45:be:f8:83:31:11:0b:
da:54:f5:4c:56:c3:a1:59:0a:26:cf:7c:88:e9:78:
02:e1:d2:76:9d:36:e5:22:ef:37:5a:8a:74:e2:b6:
a1:c3:ad:3d:11:9f:de:53:32:99:7e:ed:ba:63:18:
d7:7a:b1:5d:43:df:06:ae:e3:e6:9d:db:94:45:2c:
46:fa:eb:44:d3:e2:f7:a7:b5:46:ac:05:e7:af:f8:
77:fc:4a:97:81:6c:28:57:5b:3d:ed:32:8f:c4:7d:
54:d0:d6:85:f6:02:4e:0b:64:81:fb:d0:da:ad:4f:
ce:6a:16:89:4b:48:95:70:59:29:b0:88:6d:fc:86:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:96:AE:48:5B:0E:F7:9D:4E:53:FF:A2:0D:9A:89:1C:CA:AA:02
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:e8:1d:eb:b1:80:f8:3e:91:7c:43:25:a4:b8:d0:7f:62:
eb:c0:c7:aa:b7:87:4e:81:7a:32:88:01:a1:d6:88:39:1b:70:
1f:90:83:48:bb:5e:83:0c:27:fb:b1:f1:9c:75:a7:db:bd:6b:
b5:0a:62:7c:7b:d5:26:8a:b1:05:b4:31:eb:ca:c0:d9:8a:dc:
82:07:10:ba:34:dc:ad:3e:67:da:f1:51:79:16:7a:84:df:81:
48:ab:68:c5:69:95:07:49:37:2a:83:7e:e0:81:14:31:b7:c7:
79:75:fe:26:53:95:2c:77:71:3d:cf:a0:c1:38:f2:b5:11:40:
0c:d0:01:74:c1:6e:3e:f9:99:91:81:90:c5:46:a4:3e:75:54:
fc:64:77:62:9b:bf:bc:d5:ba:4a:04:78:06:9f:3d:51:f4:d0:
a6:63:9c:09:03:e9:90:2a:7a:42:b1:ea:76:f9:9a:91:8e:02:
c6:0b:1e:ae:a2:f9:54:e8:f5:89:12:a4:e2:cf:11:a8:69:df:
b0:c9:f4:47:4e:8f:f1:38:ff:05:24:ec:61:3d:1e:e4:69:3d:
83:87:80:22:31:a7:3d:f2:f6:fc:49:bb:28:73:c2:da:12:5f:
2d:2f:c9:91:82:ac:2c:08:93:1f:5d:46:54:b2:ac:22:8a:5a:
cf:66:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client