Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: A+MjO3BNYaNtzYZnKtc6HbI99PZf4bRfcKlbshmnsu8=
Subject key identifier: 39:8E:3E:D7:C7:D6:5C:B9:16:A7:65:51:54:8C:70:D5:68:A9:6F:14
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 0196CFBDC853BDA8221F9B41EEB72CBA02E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 011B
Signing time: Wed 14 May 2025 17:00:43 +0000
Manifest this update: Wed 14 May 2025 17:00:43 +0000
Manifest next update: Thu 15 May 2025 17:00:43 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: s1O/COfJ9miSDNiJODsLcZ8nVlHy/R/pQ/2lSBQ4ecA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:c8:53:bd:a8:22:1f:9b:41:ee:b7:2c:ba:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: May 14 17:00:43 2025 GMT
Not After : May 15 17:00:43 2025 GMT
Subject: CN=398e3ed7c7d65cb916a76551548c70d568a96f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:ea:1f:94:46:71:39:57:a5:eb:32:e9:fc:
e5:76:25:d4:23:73:56:3e:22:87:57:7c:fb:89:a2:
a4:0b:5f:92:d7:bb:d2:8e:58:a0:c0:8d:f1:4a:95:
7d:6a:17:5f:4e:e6:33:67:0c:4c:8f:c3:4f:6f:0a:
75:24:8d:f2:b9:8c:3d:4b:ee:3b:ae:a6:72:be:7d:
71:94:d4:97:31:ac:cc:7d:63:37:35:6f:12:8a:a8:
83:6d:1c:c4:98:03:5b:2f:c5:0f:e7:e4:81:f8:6d:
a2:cc:cd:fc:8f:f4:37:a2:aa:3d:c9:a4:22:e6:d0:
36:59:78:d6:1c:eb:b7:fb:85:b7:94:7f:e5:f3:8e:
f5:86:f3:fd:78:aa:d2:9f:7f:38:e1:14:54:43:6c:
17:70:1b:62:74:5a:a7:40:83:66:ea:2e:37:ab:f3:
c4:ae:46:82:71:3f:ed:aa:b1:17:6c:fe:99:bb:1b:
78:b1:ca:68:c4:15:a0:bd:6a:cf:d8:fc:db:71:b2:
02:94:ff:15:98:a4:69:bf:83:5b:58:94:85:32:bb:
21:e1:b8:13:ef:e6:ec:ca:13:5a:5b:21:89:79:0b:
79:e0:3c:39:5f:b9:de:2d:a2:d7:99:f3:42:a9:71:
a4:83:5f:ba:39:4b:aa:b9:7e:6d:55:96:7b:0c:c8:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:3E:D7:C7:D6:5C:B9:16:A7:65:51:54:8C:70:D5:68:A9:6F:14
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:8e:16:89:a3:24:01:bd:85:53:42:c5:d8:82:e6:58:90:
97:c6:ad:ec:94:63:f3:8c:16:1f:aa:e1:e6:1e:8e:0b:34:7a:
a8:12:12:4f:60:9d:86:5e:5c:b8:d5:36:cc:a5:d9:eb:c1:0f:
38:dc:88:d9:25:eb:b7:f9:68:72:4c:4f:e0:5f:f7:73:42:6a:
29:3b:95:8b:c6:8d:7f:2a:e0:05:6d:52:2f:1d:57:2d:c5:14:
52:9e:4d:15:3c:c0:12:47:45:7b:b6:d2:52:2d:16:b4:e3:64:
ba:5c:1c:7f:f6:f0:69:9f:07:a4:aa:66:31:0c:ae:eb:6c:30:
ab:aa:5d:b7:b6:88:5f:d7:be:ee:8f:4d:a4:5c:f6:c7:30:c4:
e6:0b:40:50:b0:62:63:95:f5:fc:32:60:69:1c:55:76:05:5b:
aa:4f:03:8b:2d:01:aa:2e:c7:14:c3:37:a1:9f:5f:6a:c6:bf:
24:df:2d:95:ae:86:fe:c0:f9:41:4b:93:93:24:0f:c5:52:39:
1a:e7:3a:36:c6:aa:9e:80:6b:8c:c9:c1:cb:c5:a7:fb:d9:ef:
06:30:58:3f:43:ca:ff:8d:e8:f5:a4:2b:99:f7:63:93:72:aa:
0a:7e:db:a9:ac:e9:c6:2c:20:0d:9c:cf:7c:cf:f1:eb:9a:62:
41:1d:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:00:53 2025 by rpki-client