Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: XyvD+zY5srzQrN516W0vsd3eRIXybwgwagieP73tUn0=
Subject key identifier: 5E:43:F7:8F:DF:7B:DA:A9:1D:0E:C4:0B:35:18:F9:5F:15:1B:4C:9D
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0198D706277435DEF44173AFA63429206198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 09DA
Signing time: Sat 23 Aug 2025 13:02:41 +0000
Manifest this update: Sat 23 Aug 2025 13:02:41 +0000
Manifest next update: Sun 24 Aug 2025 13:02:41 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: fiYXI2A2Hjde9cuJskmd6BFNV1y09Yoi/hPOkTDOXCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:27:74:35:de:f4:41:73:af:a6:34:29:20:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Aug 23 13:02:41 2025 GMT
Not After : Aug 24 13:02:41 2025 GMT
Subject: CN=5e43f78fdf7bdaa91d0ec40b3518f95f151b4c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:31:ae:97:bd:d9:49:7c:42:08:a9:55:f0:
40:86:12:d4:d8:97:98:f0:ee:00:0e:90:74:2c:c1:
b1:84:72:19:58:d2:5f:38:08:22:6c:29:3c:a9:39:
5a:86:11:6b:5f:02:74:7b:7c:37:2e:0e:c9:af:e1:
a0:63:bf:f7:9e:b8:f2:e6:be:ef:a3:f1:5a:1d:7f:
8c:45:b9:20:d0:22:a5:16:ee:8c:ef:2d:18:d6:f6:
db:25:fb:8f:5c:dc:eb:cd:a1:18:d8:fb:ba:94:8f:
21:b8:a4:00:6b:ac:4d:45:10:87:c9:26:aa:af:87:
4b:3f:8e:6f:6e:62:6f:0d:df:26:1c:1a:1e:88:29:
92:fc:a9:af:5e:0c:bb:82:05:00:8a:19:20:bd:f5:
aa:87:b9:2b:84:36:bd:8a:98:4b:14:7a:b8:82:6f:
ed:65:5e:65:de:00:e4:f4:19:59:b8:52:7c:2d:cd:
a5:be:b4:cb:ce:df:3c:52:7f:20:c8:36:12:09:99:
4c:dc:33:69:72:24:50:ae:01:0b:4e:c3:c7:aa:d0:
31:03:66:89:c0:2e:4b:1c:99:64:8f:f4:47:7f:c5:
2d:42:21:ae:8b:f0:76:f3:24:2e:b7:cb:4c:be:9c:
5a:8c:cd:05:a3:e7:32:79:91:e4:0a:de:76:c5:a4:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:43:F7:8F:DF:7B:DA:A9:1D:0E:C4:0B:35:18:F9:5F:15:1B:4C:9D
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8f:0f:37:c6:cd:54:9d:d0:e1:84:6e:6b:ae:26:5e:f1:d9:
64:bb:f9:47:79:b0:cf:b0:2f:ef:70:1b:a1:f7:42:15:fd:54:
ca:db:71:16:27:46:ba:74:65:ec:e5:5e:a6:d8:0c:b1:83:9f:
17:8b:c6:c5:22:62:f1:78:6c:6e:1d:a6:97:ac:e9:3c:3a:21:
1d:e6:2c:63:d5:4b:52:78:d5:a0:8a:db:ff:bf:1f:b1:53:23:
bc:d2:ed:6b:4e:91:e9:4f:78:ef:92:cc:59:00:ba:35:28:a3:
25:e5:7f:14:e5:34:57:1b:b4:35:c2:69:fa:e6:5a:63:ba:ce:
ed:8e:7b:1d:5a:c7:27:7f:b4:6f:1a:9e:f1:9a:b5:6a:14:26:
10:60:81:29:d1:f5:c8:ec:62:0e:00:bf:f9:78:d8:f5:56:bf:
66:54:91:61:43:97:ec:fb:6c:63:ef:cd:05:7f:17:f0:84:64:
72:03:c0:83:69:e3:8e:0c:f1:41:ec:0b:d1:7c:ad:43:22:18:
f5:57:0a:fa:05:2e:d7:09:4b:45:41:bb:e9:df:dd:85:4d:71:
f4:ac:93:d9:b1:16:e3:c8:b1:1a:60:a8:a2:4e:60:11:0a:95:
24:53:04:2c:3c:bd:d4:0d:92:a5:62:f3:47:34:fd:ef:0a:49:
a8:35:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:45 2025 by rpki-client