Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: KzTyxhFVXDZt1vXt3fy98zeoCDjK+17yTbPw0dHP+UI=
Subject key identifier: D2:59:63:A0:6B:1E:35:1D:31:95:51:24:DF:99:B5:FA:49:23:41:BF
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0196C9BB79EAE49B0DCC7B5143B2BC7F625C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 13:00:28 +0000
Manifest this update: Tue 13 May 2025 13:00:28 +0000
Manifest next update: Wed 14 May 2025 13:00:28 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: gFDfCmBq7ApvQK5LAJoBBXagGZpAQeTVCNVKYftNGUo=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:79:ea:e4:9b:0d:cc:7b:51:43:b2:bc:7f:62:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: May 13 13:00:28 2025 GMT
Not After : May 14 13:00:28 2025 GMT
Subject: CN=d25963a06b1e351d31955124df99b5fa492341bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:a9:3e:99:10:19:e4:54:9f:ad:e2:f3:bd:
24:2d:64:fe:8b:cb:8b:8c:e9:d5:f8:ba:8c:c2:bc:
14:f1:0e:44:de:f9:3e:53:91:32:db:5a:d7:d6:cd:
6d:e5:9d:f5:32:84:ed:94:94:59:c4:26:c9:c0:5b:
ac:bb:f1:c1:f5:9b:1f:3b:c3:aa:ba:c1:b8:69:bf:
d5:e3:31:b1:cf:c1:15:64:ce:b0:fd:6c:e2:97:34:
b7:d4:e0:c7:90:65:29:37:64:bd:92:85:66:03:5f:
ba:ac:cf:e7:52:b1:5f:24:01:73:1f:5b:71:36:08:
c0:54:93:c0:f5:41:87:78:57:f8:c4:e9:95:2c:4d:
d2:ab:5b:60:43:45:c3:0b:ea:03:06:77:e4:f1:f0:
8e:fd:ed:99:b8:55:d8:8f:c9:0d:f4:29:ea:76:44:
bb:53:11:f9:cd:0b:c9:71:3f:71:e2:63:43:f7:ca:
37:84:92:b7:d1:35:e5:90:e8:5e:4b:33:dc:0a:61:
da:31:61:97:94:44:74:ab:b8:5a:29:31:4b:7e:a1:
6f:23:77:19:b8:1a:e9:b0:c5:fa:b5:b8:38:5b:ec:
7a:1c:af:bd:ff:9e:fc:e1:96:2d:c5:8d:b1:72:51:
fa:1c:75:ec:7a:ed:8d:a2:07:a0:3d:2b:a6:91:7f:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:63:A0:6B:1E:35:1D:31:95:51:24:DF:99:B5:FA:49:23:41:BF
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:d1:a9:eb:6d:c6:d4:e2:8d:6a:63:12:66:27:56:78:d8:
67:4a:45:5c:23:e6:76:dd:29:d7:08:5c:f9:92:1f:ff:de:b7:
b3:a4:9b:40:39:6a:fc:0e:91:76:3e:15:a5:1a:65:15:0f:8c:
e4:c6:e7:f1:82:09:97:fa:cd:da:c8:cb:02:33:70:06:03:03:
6b:3f:ff:d9:18:9e:ec:e0:e8:d5:9a:30:a1:6e:5e:9a:90:54:
6b:76:91:cc:1f:9d:cd:57:dd:44:32:dc:20:dd:e6:30:0d:a7:
c7:ad:32:9a:58:e3:1a:9e:1e:ce:d3:13:b9:f9:e4:e9:50:51:
b0:6d:9f:41:d7:ae:c8:59:81:aa:0f:b7:ce:91:2b:7b:26:48:
15:4c:6d:21:1a:32:84:17:a4:6e:3e:bf:e5:dc:a5:1d:36:36:
5b:ff:c4:de:65:6c:fb:d0:92:f0:db:96:f4:df:8f:25:dd:bb:
91:f0:5a:0b:47:1b:7b:57:20:41:6f:09:72:c8:8e:14:06:a7:
47:bd:ec:36:9e:a9:6f:85:15:df:bd:de:49:a0:e8:d7:67:d4:
19:e3:09:ad:f0:7a:c5:bd:92:e7:79:b4:4b:24:3f:1c:86:ef:
f6:6e:5c:d5:19:30:3d:a4:90:71:f7:5b:40:0a:e6:9a:a3:cf:
b0:fb:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:35:54 2025 by rpki-client