Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: RzpBprtFR8QQGOUs5GmEKKkfIw6VxnCP/EME1mP96II=
Subject key identifier: 94:42:FA:D1:69:F0:B6:B6:13:E1:FC:A9:12:0D:DD:C8:04:8D:0D:E0
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 01988E0FEAE1460FB7725130549709BF8CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 08C2
Signing time: Sat 09 Aug 2025 09:01:04 +0000
Manifest this update: Sat 09 Aug 2025 09:01:04 +0000
Manifest next update: Sun 10 Aug 2025 09:01:04 +0000
Files and hashes: 1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: AHfKKKYBxHKK7EZspx3fij25zEPT3CfV2iuTQTb4DG8=)
3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:ea:e1:46:0f:b7:72:51:30:54:97:09:bf:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Aug 9 09:01:04 2025 GMT
Not After : Aug 10 09:01:04 2025 GMT
Subject: CN=9442fad169f0b6b613e1fca9120dddc8048d0de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:2a:59:1a:b6:fa:33:4d:b7:f2:ab:ea:fb:
e0:cc:f4:51:82:aa:3f:42:63:68:42:da:6e:6c:05:
52:45:85:66:94:ce:2d:95:8b:8e:9c:12:9d:bf:27:
9c:21:4d:9e:75:22:c4:c0:0a:a0:1d:24:52:57:fa:
c0:f1:3a:fa:b3:d5:3d:f7:f1:b9:2d:cd:2a:71:3c:
b7:b6:94:62:2c:72:4c:cf:5b:02:52:a0:b4:f2:d7:
ea:b1:3f:8d:54:1f:41:1b:c6:ec:75:a9:f3:b3:21:
52:4e:ed:91:1d:89:a8:ed:41:73:ed:c5:77:77:af:
dc:77:1f:e2:c9:ba:88:27:bb:ad:30:cf:54:b0:ae:
cb:ca:59:31:0c:6a:8d:e2:56:6c:9c:61:38:df:23:
b6:48:e6:b8:a5:86:69:0e:d2:53:67:84:d9:8a:aa:
24:ad:04:2e:93:fe:ef:64:39:c6:53:8e:ec:0d:58:
99:22:42:90:85:ec:69:fe:b5:66:25:74:e5:7e:14:
c9:44:e6:85:8b:1e:75:bc:a2:28:34:ec:51:43:ef:
14:56:d1:f5:ad:c0:ff:f6:0e:1a:bf:68:bb:95:c5:
18:27:1a:59:f6:65:cb:c7:9e:58:80:7b:be:bc:39:
01:9f:1f:5e:42:77:36:2f:83:92:ab:d0:f3:e9:f0:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:FA:D1:69:F0:B6:B6:13:E1:FC:A9:12:0D:DD:C8:04:8D:0D:E0
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:68:f3:39:39:a8:f8:03:1c:11:bb:7c:b2:a7:3e:3d:18:
1d:e5:2c:c0:f3:de:da:0d:d6:4e:c9:e6:1f:e1:7f:12:bb:98:
d9:b4:43:48:6b:b0:43:08:b5:9c:04:d4:15:41:2e:fb:67:1c:
42:9b:6a:6a:29:72:1d:53:a1:a2:19:22:f4:a2:12:72:b3:07:
a4:b4:3a:ed:8f:d0:0a:d8:9d:11:c6:94:c5:bb:af:15:3b:e0:
9a:8e:eb:56:80:c9:93:5e:3a:3e:51:eb:4b:c2:8f:81:45:48:
c2:9d:e7:85:d6:7b:ff:ec:b1:45:cb:e4:c8:0f:31:fc:3f:57:
cd:60:2d:1c:1d:25:4f:05:79:95:4c:ab:c2:7a:a3:a6:e1:be:
e7:26:19:33:52:f2:71:81:42:2d:51:16:65:fd:8f:5e:2b:73:
e7:d3:c5:12:72:fe:a6:4f:ca:65:46:0e:5a:67:2f:a6:80:76:
96:ce:ed:90:b5:e9:cf:01:a3:f2:6b:b4:35:9c:64:9e:e2:f9:
db:fb:6e:80:e9:98:dd:b1:db:90:2a:21:86:6b:4d:bc:1b:ca:
56:fe:b0:5f:5c:6b:21:9b:5e:49:18:73:b3:e9:36:d7:41:e1:
60:35:17:79:fa:7b:b2:18:05:33:59:bc:3b:e0:28:03:13:01:
58:5a:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:47 2025 by rpki-client