Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: Es3sdjvKA2jKfnNIfbf2g81tA+BIbz7Ueh/p+LMTmaI=
Subject key identifier: DC:3E:9F:C6:59:7C:17:EC:01:38:14:FB:51:5B:32:EA:D3:FF:41:7F
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019688B722BD50C151CB5AA13207877B18D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: D0
Signing time: Wed 30 Apr 2025 22:00:25 +0000
Manifest this update: Wed 30 Apr 2025 22:00:25 +0000
Manifest next update: Thu 01 May 2025 22:00:25 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: YXaSg9t85B1EqqBz3WtysMAEiKYiJwk+rXCldn4NmDA=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:22:bd:50:c1:51:cb:5a:a1:32:07:87:7b:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Apr 30 22:00:25 2025 GMT
Not After : May 1 22:00:25 2025 GMT
Subject: CN=dc3e9fc6597c17ec013814fb515b32ead3ff417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:3f:87:ca:b6:dc:40:63:1d:a8:fb:d1:59:
85:70:b0:96:fb:71:2d:07:f8:c7:56:43:99:88:c5:
1f:41:0c:52:30:8c:94:20:b6:9a:e0:17:97:d0:12:
23:9f:82:50:20:37:e8:a0:20:b5:74:e1:4b:61:42:
e7:f6:96:79:de:32:a7:bc:48:16:85:ba:2e:bf:8d:
3c:a3:c2:fb:e7:bd:04:1f:df:0f:c1:59:a1:f7:59:
ca:c8:ed:f1:20:2f:e5:80:d4:8d:70:26:50:22:62:
95:ec:1c:a8:e3:3c:ff:1c:78:06:15:04:a6:85:10:
76:52:b3:c9:92:12:7a:77:cf:e2:38:ae:05:47:ea:
0a:c9:c4:11:37:43:9f:6d:1b:af:6d:d1:c1:fa:a6:
1b:a7:e5:dd:aa:30:c8:78:5e:da:03:a6:e7:76:46:
a3:20:81:91:01:d1:7a:2f:07:9b:b6:53:a5:11:9d:
44:51:3d:db:d3:ad:5b:0f:f3:33:a1:87:a8:f0:ad:
e3:ab:13:f5:ab:85:4d:70:95:2c:98:0c:44:0a:9a:
84:c8:ba:32:16:37:4d:a0:35:ab:17:6d:42:1e:1f:
60:cc:a6:0c:fc:aa:87:f9:ed:02:10:0a:ce:5c:10:
ca:2b:e4:5e:dc:de:e5:89:6e:d5:b5:bb:f0:8e:86:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:9F:C6:59:7C:17:EC:01:38:14:FB:51:5B:32:EA:D3:FF:41:7F
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:f6:b0:b9:28:33:e3:80:b7:a9:0f:f4:90:93:38:25:d8:
2b:a2:e0:4f:73:87:09:cb:0b:d5:7b:ae:28:90:a3:6c:80:fb:
47:47:40:be:00:1c:ce:c8:89:4f:3a:94:64:64:cc:b4:e3:fd:
92:51:44:c4:9f:82:42:c6:87:31:d8:99:d7:f1:98:f7:17:c7:
a1:25:ca:78:98:35:0f:f3:b4:25:8a:70:c8:61:de:8b:24:09:
50:7e:9e:b3:ea:c9:97:e3:bd:24:7b:03:aa:e6:0e:de:8f:be:
b4:dd:10:48:c1:1d:5f:d6:93:0e:bd:2a:2b:bc:16:32:06:2b:
5a:2c:97:1b:32:1c:4b:cc:e2:3a:87:b1:53:bf:1a:65:05:96:
f9:45:1c:96:df:d9:74:7c:b6:d9:7e:0a:0d:31:e4:9f:d4:62:
1f:b4:db:a3:c6:f7:10:82:bf:3b:26:f0:26:74:30:5f:43:da:
ae:2b:7d:5b:e0:41:c6:c4:5f:f2:b0:2d:4d:e5:a0:29:d0:83:
61:66:a6:17:e6:d2:e1:4c:59:34:67:94:12:24:c8:89:ed:77:
c3:41:a6:bf:1e:9c:eb:ff:ad:41:94:25:c7:bc:0a:34:f5:89:
81:f5:72:ca:7d:df:f4:25:62:12:6e:1b:51:db:39:f7:5f:11:
5d:27:eb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaItyK9UMFRy1qhMgeHexjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjUwNDMwMjIwMDI1WhcNMjUwNTAxMjIwMDI1WjAzMTEwLwYDVQQD
EyhkYzNlOWZjNjU5N2MxN2VjMDEzODE0ZmI1MTViMzJlYWQzZmY0MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPg/h8q23EBjHaj70VmFcLCW+3Et
B/jHVkOZiMUfQQxSMIyUILaa4BeX0BIjn4JQIDfooCC1dOFLYULn9pZ53jKnvEgW
hbouv408o8L7570EH98PwVmh91nKyO3xIC/lgNSNcCZQImKV7Byo4zz/HHgGFQSm
hRB2UrPJkhJ6d8/iOK4FR+oKycQRN0OfbRuvbdHB+qYbp+XdqjDIeF7aA6bndkaj
IIGRAdF6LwebtlOlEZ1EUT3b061bD/MzoYeo8K3jqxP1q4VNcJUsmAxECpqEyLoy
FjdNoDWrF21CHh9gzKYM/KqH+e0CEArOXBDKK+Re3N7liW7VtbvwjoYz/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw+n8ZZfBfsATgU+1FbMurT/0F/MB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn32sLko
M+OAt6kP9JCTOCXYK6LgT3OHCcsL1XuuKJCjbID7R0dAvgAczsiJTzqUZGTMtOP9
klFExJ+CQsaHMdiZ1/GY9xfHoSXKeJg1D/O0JYpwyGHeiyQJUH6es+rJl+O9JHsD
quYO3o++tN0QSMEdX9aTDr0qK7wWMgYrWiyXGzIcS8ziOoexU78aZQWW+UUclt/Z
dHy22X4KDTHkn9RiH7Tbo8b3EIK/OybwJnQwX0Parit9W+BBxsRf8rAtTeWgKdCD
YWamF+bS4UxZNGeUEiTIie13w0Gmvx6c6/+tQZQlx7wKNPWJgfVyyn3f9CViEm4b
Uds5918RXSfrAg==
-----END CERTIFICATE-----
Generated at Thu May 1 05:37:30 2025 by rpki-client