Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: m8YsCbfc2f8ZI2T5OaxjfXD4uzv0MO8zgBpH8QO929U=
Subject key identifier: E0:17:2F:18:C8:42:B4:D3:33:5F:09:53:28:76:E7:5F:33:EC:86:BA
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 0198D4DFD6692929CA57A74075D5D30BB6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: o5oSUUqP2Q0Ys6Df2uowrAJ4ATMMtTuYcXSo9HScogk=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d6:69:29:29:ca:57:a7:40:75:d5:d3:0b:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=e0172f18c842b4d3335f09532876e75f33ec86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:ef:46:94:cb:d4:00:a2:b1:66:29:3e:39:
5b:10:d0:72:f1:28:b0:42:37:63:65:ea:7e:2c:ba:
df:36:c3:24:e7:b1:3d:3c:3b:93:6b:82:07:de:d0:
2f:e1:80:13:4b:05:cf:d6:5b:d0:4e:70:f1:db:f7:
fd:aa:07:cd:a3:31:c8:cf:09:30:5a:61:bc:55:44:
60:2d:c6:8e:01:a7:e9:1c:b1:c9:95:08:6a:ae:0c:
b8:e5:52:f9:4a:d3:98:97:42:9c:14:d8:3c:de:9d:
1d:fd:4b:4d:76:93:4d:4c:83:77:30:4d:7f:a2:ce:
89:4f:5e:95:6e:7e:e0:22:c3:1d:0d:19:59:23:a1:
ee:3c:73:e3:3f:96:a7:18:5c:4f:17:16:ff:70:35:
4b:f3:01:d7:d8:c6:57:af:08:90:c0:0b:ca:ea:9d:
0c:0a:84:03:9a:df:1f:e2:3c:0b:da:02:1c:a5:22:
3d:9b:a8:68:5d:3b:e7:c6:d3:69:b1:06:c7:81:19:
03:3b:d3:47:ca:9e:e5:0e:4b:1b:e0:ef:52:5c:91:
03:3b:eb:5e:49:51:2f:31:ea:a0:2b:79:d7:26:60:
b7:4b:86:39:12:fd:8c:36:09:18:52:fa:b7:44:b5:
9c:5d:a4:22:2d:b4:25:35:85:8d:03:d5:c5:93:5e:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:17:2F:18:C8:42:B4:D3:33:5F:09:53:28:76:E7:5F:33:EC:86:BA
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:a0:e4:91:9d:33:c0:6a:98:f1:13:d5:80:01:29:5b:dd:
ab:fa:37:91:03:64:5d:d0:26:e3:54:0d:83:87:c9:97:fd:dd:
e6:ce:0f:15:13:9d:38:49:a6:d0:0d:ab:00:31:d5:2f:31:2b:
d5:0d:1b:38:45:59:2a:f4:60:c2:82:65:05:9e:b4:d6:ce:68:
ca:73:20:34:b3:28:0e:b5:48:6b:92:3f:41:be:fa:42:6f:49:
23:ad:20:3b:28:8c:5f:66:f8:60:fb:9c:73:e7:53:7b:af:4c:
77:54:01:8c:ff:c1:d2:fa:dd:00:06:1c:2c:43:e9:a6:04:8c:
54:71:fb:d7:b8:8b:52:59:e2:3b:64:9d:4c:90:c1:59:df:da:
62:82:12:a9:66:0b:8a:ed:32:5f:db:f5:4f:6f:6b:50:f7:5f:
60:17:93:e4:ae:75:ea:96:55:d8:21:fd:86:d2:92:76:3b:13:
fb:98:ad:d3:be:19:b2:10:0b:4b:76:5f:5f:fd:cd:5b:b7:b0:
a4:c3:a9:68:0d:57:1b:5e:35:82:51:60:66:29:22:e8:13:6a:
81:80:31:de:61:c7:c7:f9:3a:86:4f:72:96:48:05:83:68:a8:
77:97:2b:31:e1:b5:b1:4e:fd:78:ff:02:78:93:90:9b:8d:76:
9a:00:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:30 2025 by rpki-client