Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: ShCDY4yyXIhRjGY6vkOvcAG3XWwp1KEmN2z/7FBf0Kk=
Subject key identifier: 25:BE:22:C5:AD:C4:9D:4C:BF:D0:A6:8F:BF:87:6C:99:94:66:AE:ED
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 0198D5F1C1C47AB491B4DDBE1D861572056E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: 1N9hTAW+0CCgoNJlWXfcCQnXxv6kAXSo54RAs4BRDqk=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c1:c4:7a:b4:91:b4:dd:be:1d:86:15:72:05:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=25be22c5adc49d4cbfd0a68fbf876c999466aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:8d:5e:9b:fd:0c:6a:82:dd:2e:4c:bf:5d:
1e:aa:a0:e0:43:bf:c8:6a:78:ea:f2:a1:68:ee:c7:
88:7a:46:9b:27:e5:40:d6:8b:a3:66:8c:6a:03:77:
88:a3:11:af:b7:9d:58:43:8e:dc:58:48:05:56:1f:
11:e6:30:68:52:65:67:de:40:99:8a:38:72:36:bc:
b9:6d:03:e6:b1:ad:11:5f:1e:a0:da:0f:da:7b:8c:
a2:5d:c5:e6:30:b1:da:c1:0b:74:50:1a:b9:ed:73:
7c:f0:4f:f7:dc:df:38:ee:6a:d4:d4:81:59:ff:5c:
d5:c6:93:38:37:24:25:9f:ad:f3:44:19:0d:7b:f3:
9b:7c:2f:23:48:21:75:50:8c:54:8f:0a:a9:70:99:
fa:c3:07:a8:c4:dd:eb:68:44:1d:2a:ec:19:fa:b3:
57:91:9b:c2:5b:4e:ae:35:e0:e7:9c:aa:00:15:03:
2d:f2:82:af:66:c9:18:86:b2:f7:ab:60:14:ce:2e:
f1:49:26:4d:d9:bd:66:87:ab:7e:f8:fc:7b:ea:37:
5e:3e:4f:dc:59:3c:bc:87:d6:49:4b:db:58:e7:90:
e3:4e:c0:f3:c7:8f:c0:e3:ef:b9:32:95:56:9c:0b:
3e:ce:35:7c:07:50:37:d8:ff:a1:be:19:48:06:cf:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:22:C5:AD:C4:9D:4C:BF:D0:A6:8F:BF:87:6C:99:94:66:AE:ED
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4f:a5:2b:58:66:29:35:36:08:29:29:2d:4c:ae:39:f3:fc:
3f:5b:e5:22:24:df:34:57:32:e1:f5:61:75:01:75:d2:0d:0d:
b4:a4:47:67:c4:ad:31:46:56:fc:cb:c4:77:f0:d7:39:4f:32:
22:7c:74:95:54:cc:10:d2:58:a4:cd:99:fb:2f:bb:57:aa:67:
1b:e7:55:12:63:8d:f5:0e:f4:bd:07:c4:07:1e:c9:e0:51:37:
d1:0e:d4:4e:64:c6:2d:6d:91:ba:d3:31:78:c4:d9:73:22:51:
f1:62:19:0e:6b:e0:64:72:8d:84:96:15:23:52:33:5d:80:f2:
32:9d:f0:87:17:99:f9:8e:da:3e:14:51:69:7d:21:e4:5d:9c:
76:50:b1:6c:33:69:74:4f:a4:cc:e7:c5:1f:88:b3:d5:5d:a4:
ee:e5:9f:bd:9d:95:e1:19:38:2a:7e:3e:23:a4:cb:c6:a6:f2:
50:69:26:3c:06:10:9a:82:44:c7:03:26:08:aa:e0:c4:4b:c0:
f5:6b:56:41:50:a3:43:c1:93:dc:e7:14:70:f9:59:af:79:39:
53:92:fe:8c:10:34:b8:19:83:4c:78:12:a7:ca:4f:22:26:54:
cb:46:40:50:05:7b:a7:5f:b8:a8:72:c2:dd:58:fb:e0:2c:a1:
1e:b8:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:12 2025 by rpki-client