Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: m/uL1rqawGengfo3j6YA01At3HwZU3q3KO6BQ2CDRSo=
Subject key identifier: 85:0A:48:96:B1:5E:A4:7D:50:D8:16:CE:E8:44:F9:F6:E5:15:CA:34
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0197B745295DFD9DBF63EAE434A2F74186C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: 1T3FZoaVmLUCL/Uqi+VOU+DobcRVSA7xPAB0LR6tfE8=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:29:5d:fd:9d:bf:63:ea:e4:34:a2:f7:41:86:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=850a4896b15ea47d50d816cee844f9f6e515ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:da:5e:71:f1:0e:0c:e1:fe:d0:a4:e5:9a:
b5:05:bf:d2:a1:03:0a:ec:e5:6c:04:b0:5a:99:f1:
8d:21:d2:d7:87:5a:ea:81:b6:a4:b2:cb:24:3b:0a:
90:64:51:4e:b8:63:a7:2d:c3:86:59:d2:71:e6:30:
35:c7:d8:b1:71:52:3a:19:50:50:cb:a0:de:27:87:
5e:bd:72:e6:7c:03:2f:d7:99:4d:bb:aa:dd:b6:b3:
91:7b:cb:cf:a8:9f:e6:e0:ae:51:59:b3:28:c0:a0:
22:8c:e1:cc:cd:95:ec:c6:3d:8d:1e:07:bc:04:4f:
83:54:91:f1:ae:ad:93:63:7a:5d:3b:8f:7e:14:e2:
a7:6c:8c:46:f1:9d:69:60:31:25:34:2e:7f:a3:94:
01:52:24:13:33:f3:35:bf:5e:ad:42:66:35:a6:d4:
c5:c4:82:04:20:8a:37:77:8d:22:2b:c4:ea:70:45:
78:f3:f9:b9:78:17:7d:af:4d:6f:c4:35:4b:cf:31:
b0:50:c3:1e:98:ca:51:6a:41:bf:78:08:a8:fc:35:
30:9e:4a:72:a8:1b:e1:14:cb:91:6d:61:92:1c:8e:
26:ee:e9:ec:d1:5c:f6:81:2d:7e:f5:68:ff:d1:76:
58:b2:f1:84:17:d3:15:04:f7:4b:62:6d:6b:76:31:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:48:96:B1:5E:A4:7D:50:D8:16:CE:E8:44:F9:F6:E5:15:CA:34
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:20:ee:f7:e1:26:41:54:14:e5:e5:b4:b8:f0:62:ab:ae:
0d:66:9b:53:42:03:d2:d1:55:c8:07:f0:6e:ab:9e:76:5e:aa:
81:dc:66:1b:34:d3:ef:f7:e9:02:15:7a:a7:d7:a8:9e:99:52:
65:d0:b9:f5:58:70:2a:5d:f8:87:5f:c8:8d:7a:76:c1:66:cb:
7c:f4:33:6b:77:f1:5c:42:91:5c:17:6c:fd:a5:12:6e:8e:42:
95:cd:d9:78:84:21:5b:1e:82:8e:28:4c:11:ee:0e:9c:7c:6e:
20:8e:0c:48:2e:a6:86:a1:3b:d4:b8:8a:61:46:af:e9:c6:9b:
6e:49:21:8d:a5:46:3e:ca:c9:0f:4a:ce:d0:c2:ec:e8:ac:34:
0e:aa:ce:ac:5d:bd:5a:ae:f7:61:62:0f:78:76:ba:76:42:6c:
c8:59:63:6d:e4:0f:e6:6e:86:af:57:0a:f8:59:00:8d:d8:13:
1b:a1:57:ba:4d:ba:de:3f:ab:85:00:ce:03:71:f7:37:63:d8:
9d:97:ea:10:97:f5:b3:49:76:e1:4c:64:7d:27:a9:f0:77:bc:
83:89:66:3b:e7:7b:4d:40:b2:dd:f2:32:69:66:69:32:1f:22:
e5:b0:cb:cf:cb:e7:da:82:bc:45:09:9a:59:8d:db:44:2f:9d:
f7:6d:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:59 2025 by rpki-client