Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: nfYLEyrJ/T0hQ3HR79awnwYsRx/w0Cs+PzqR5M4+Kew=
Subject key identifier: 06:4F:0C:79:62:72:E8:70:69:0A:E1:0D:08:37:64:72:00:7E:D7:D8
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 0198D54E7C377D03003C0D7D3E895C1CB207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: v05fHEiJauZ5OgjLniaU5RdWNG+uYA0ECyUkD/Df4VA=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7c:37:7d:03:00:3c:0d:7d:3e:89:5c:1c:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=064f0c796272e870690ae10d08376472007ed7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:0b:83:b8:54:d3:a1:93:76:77:95:aa:ae:
f8:02:a3:50:78:41:51:30:10:ec:36:f0:68:5c:a0:
bc:82:2b:02:0a:3e:16:0f:48:a2:bf:5a:c6:f6:3c:
a1:a6:a5:59:7f:8a:da:66:06:d2:24:22:9c:73:cb:
19:16:5b:53:3e:2c:e3:25:e6:6c:c1:ab:eb:fe:1d:
98:f3:b0:7f:20:29:23:22:d3:f9:0b:10:66:e0:1a:
71:31:af:91:40:1b:d6:00:1e:59:da:55:ae:41:c8:
5d:20:82:76:aa:b9:3e:ec:0a:20:9b:95:68:68:f7:
14:37:fa:1b:17:cc:c1:ab:c7:c6:bb:0f:4d:a3:0f:
44:65:54:02:b2:be:77:b1:ab:9d:f8:7e:e7:d8:16:
7f:37:ff:25:c2:df:13:d5:67:5e:fc:49:60:5a:87:
40:f8:9e:09:f0:bf:cb:fc:de:3e:df:36:09:e2:1e:
1c:cb:88:d1:a9:dd:e6:91:fa:93:76:2c:29:29:fc:
4d:95:18:8e:82:22:5f:e2:71:e9:e7:02:55:ae:03:
4c:09:20:05:84:a1:51:c0:71:00:c5:1a:a3:ef:24:
9d:61:f6:18:46:86:65:3e:07:1a:e1:4a:f6:5b:ec:
da:e1:62:b6:42:42:e1:a3:84:b8:c4:d6:41:37:01:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:0C:79:62:72:E8:70:69:0A:E1:0D:08:37:64:72:00:7E:D7:D8
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:d7:17:9c:0b:b9:08:83:76:e2:c9:f9:fd:86:a5:84:5b:
f4:a1:7a:0f:42:29:d8:00:91:6e:70:2a:c3:2e:bf:03:63:88:
3c:84:f0:6a:08:df:ca:92:f8:62:9f:b1:44:e7:1b:dc:76:bc:
56:72:bb:b9:94:b4:01:93:67:9f:87:93:99:92:d2:46:30:10:
d3:36:5d:f5:6b:e7:d0:c6:7e:66:fc:de:6c:9a:ff:b6:77:5b:
99:14:6d:63:a1:fa:32:ee:a2:31:52:4f:4a:b4:38:07:72:5c:
e9:1f:d2:ca:d7:ba:e2:78:df:5b:15:44:33:4b:2a:c0:9c:44:
69:39:7d:d7:b5:4a:5f:cb:8b:79:7d:f9:54:90:36:25:55:da:
c3:e1:34:0c:3c:2d:22:e0:5e:57:6b:fa:8a:88:6e:9a:e8:96:
e1:6d:1e:75:75:52:51:69:3b:c9:6a:49:2f:1e:d6:04:54:43:
6b:ab:1c:b1:00:21:d6:3b:fd:65:0c:37:db:76:ea:94:b3:56:
b2:47:be:43:97:78:65:18:f1:35:51:04:b5:51:12:6b:8b:8c:
77:ea:4f:ee:e1:fd:83:4e:29:8a:16:72:67:84:92:7a:2b:f2:
ff:33:0d:fc:34:58:fa:2e:ff:66:e3:93:3d:c1:78:13:01:64:
b2:c0:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:34 2025 by rpki-client