Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 1+R/gfhb6nzyLRgsM8clfiUf8Ceio2OA9jT8d4CN3hc=
Subject key identifier: 4C:A6:3A:58:F7:D0:FA:B0:7A:02:F4:91:D7:6C:FD:B8:92:82:9E:E6
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 01989411F9531418FA77BB3D31606287E915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 10D3
Signing time: Sun 10 Aug 2025 13:01:02 +0000
Manifest this update: Sun 10 Aug 2025 13:01:02 +0000
Manifest next update: Mon 11 Aug 2025 13:01:02 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: QAKZjBd8UK2xDq8YnaJUHWWSKes5bht9Lg8Mw4JgZWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:f9:53:14:18:fa:77:bb:3d:31:60:62:87:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Aug 10 13:01:02 2025 GMT
Not After : Aug 11 13:01:02 2025 GMT
Subject: CN=4ca63a58f7d0fab07a02f491d76cfdb892829ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:f8:23:87:30:0c:ca:50:84:af:f2:47:8b:
82:1e:d3:22:43:f7:ea:85:8a:bf:86:13:58:6b:fa:
d6:09:81:9e:b7:a4:6b:a3:21:39:0b:cc:0d:d7:c9:
af:ef:17:48:44:c1:0b:ee:6d:f8:a6:4b:33:2e:df:
2f:3c:2e:60:12:d9:86:b2:a1:dc:ce:2f:65:89:e2:
91:68:25:a2:73:c2:89:c6:97:bd:68:18:3b:1d:c8:
a8:f2:25:8a:c4:13:3d:e0:dc:8c:99:42:39:fe:eb:
33:61:02:91:d1:02:57:a6:9c:6c:c8:28:61:9d:ac:
89:96:76:83:21:93:ef:f1:86:4b:a5:e0:f6:93:56:
6e:01:f8:c7:7d:83:63:6d:68:4c:a9:6f:34:bf:11:
46:e7:2b:4d:53:06:f4:58:e8:52:f1:32:3f:2c:70:
4f:df:e5:28:e9:cb:79:18:d8:7d:d9:be:f3:44:cf:
ac:55:e5:59:63:e0:ab:63:26:7c:18:91:27:7f:e1:
e6:6c:42:82:a5:4e:1c:d8:d7:20:a1:c9:ab:a6:61:
eb:a2:d6:70:61:4d:a2:ad:7f:1f:c3:a6:d2:56:21:
22:39:4b:d1:0a:0a:19:29:75:10:18:10:45:6d:62:
6a:7d:a3:da:dc:2a:39:94:9d:49:5c:eb:5e:fa:e6:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:3A:58:F7:D0:FA:B0:7A:02:F4:91:D7:6C:FD:B8:92:82:9E:E6
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:63:f4:5f:bb:b9:93:00:33:91:db:e9:5d:a7:47:85:4f:
b2:11:b3:1f:74:cb:92:85:db:fb:1b:ac:ae:2e:13:f3:16:f6:
b9:ac:0b:07:f3:a4:66:a6:11:e1:f1:87:63:0b:a8:37:24:27:
8b:7b:15:c8:12:eb:e8:b5:0c:3d:70:e5:ec:c3:07:e5:7f:07:
97:86:1f:2b:f5:4a:80:78:ac:57:eb:54:e3:89:9a:48:ca:41:
b3:d8:c4:19:6a:fb:3e:15:fe:96:09:63:88:45:e0:f5:14:d0:
a4:6f:ed:da:0b:dc:39:03:bb:24:cd:68:e7:7e:08:a6:1e:e1:
cf:8b:6e:8a:ba:64:4d:5f:ae:c3:f2:c8:6b:63:e0:70:5d:e4:
e0:7f:d6:36:7c:74:a2:74:a8:cc:21:1b:36:62:af:a2:ad:82:
62:59:2f:90:99:b1:2c:81:88:f0:af:76:af:17:35:2d:46:1d:
91:4b:d6:07:66:c1:d5:47:ad:c9:be:3f:fa:cd:9a:c9:80:00:
d2:5f:5d:60:9a:9e:17:67:37:db:2d:6c:3b:d9:4c:97:a6:e5:
64:b3:4a:29:04:01:6a:ee:8d:0c:23:97:f2:b0:bc:da:ba:fc:
91:4d:ec:cb:18:c2:2d:6e:68:f5:c9:56:f0:5a:bc:61:b4:39:
58:89:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:31 2025 by rpki-client