Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: 1y/ZkZHkDjAmCmHwVIO/wENuS0EnAxKC8iFkxzrQ5p4=
Subject key identifier: EC:CA:27:E2:EC:3A:AE:F3:58:65:8F:09:AC:60:5B:F1:B9:12:D3:BC
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019873741CCF82F2325FFD5B8F005F4C266E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0A7D
Signing time: Mon 04 Aug 2025 05:00:45 +0000
Manifest this update: Mon 04 Aug 2025 05:00:45 +0000
Manifest next update: Tue 05 Aug 2025 05:00:45 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: Fu6H6HaPt++uREXFEV9yfZlLyL+PqlZ91x88GCB49p8=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1c:cf:82:f2:32:5f:fd:5b:8f:00:5f:4c:26:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Aug 4 05:00:45 2025 GMT
Not After : Aug 5 05:00:45 2025 GMT
Subject: CN=ecca27e2ec3aaef358658f09ac605bf1b912d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:24:2c:2b:6e:ce:d0:24:c8:8a:90:54:16:
98:55:0b:dd:57:84:06:ec:0c:df:20:aa:44:b4:b0:
47:81:f6:37:3c:2f:03:60:50:ea:a8:a2:df:6a:68:
17:70:14:a6:3b:87:6c:fe:2a:76:2b:61:6d:20:3d:
ed:ab:d6:e2:a0:0c:d9:d2:9d:34:e0:5b:c4:20:19:
6c:cb:4e:c2:81:06:27:14:21:10:da:45:57:e4:ad:
62:15:35:c5:ab:57:a2:a9:43:90:1a:b9:07:44:d1:
fe:66:a6:2b:1e:63:0c:5c:48:3d:34:60:a4:c9:bb:
2d:57:b9:76:2a:8e:cc:a2:3c:43:0c:9c:d8:d6:93:
30:24:94:31:4c:49:ec:11:78:c7:22:17:c4:01:6f:
2d:72:a4:bf:5a:ef:ce:6e:49:05:60:ee:ff:9d:ce:
b7:2e:40:be:a0:13:ec:61:5e:6c:59:5d:27:9e:ad:
a5:9d:c2:df:bf:e7:db:2c:76:17:ff:9a:4c:5d:5a:
3b:94:a5:d9:c5:9e:e2:47:9b:31:77:93:d5:14:06:
76:28:19:c9:f9:56:0a:39:18:3f:be:6a:74:55:7b:
2e:11:19:eb:92:d9:85:a1:0b:56:df:15:9b:28:ef:
1a:6f:83:a5:1a:72:62:9a:8b:2f:91:92:87:c5:e7:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:27:E2:EC:3A:AE:F3:58:65:8F:09:AC:60:5B:F1:B9:12:D3:BC
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:3f:ec:c0:57:ed:6b:68:bc:e0:86:ad:04:54:ae:47:d3:
f2:01:bd:9d:6d:ef:be:61:b8:bd:87:7b:8c:07:e1:84:46:38:
22:db:03:0f:0f:45:fa:b2:37:b9:8d:37:53:db:84:38:04:27:
8f:88:e5:d9:30:d7:82:a4:45:54:bf:f4:05:2b:84:d0:59:89:
58:b6:be:f7:fe:40:f1:89:10:5e:ab:47:b9:ad:85:c4:d8:a6:
61:e4:41:cc:26:b6:eb:50:96:47:dd:9e:a5:e0:70:00:1c:9d:
f0:19:09:75:47:57:42:7b:57:9b:2f:88:8f:7a:df:f3:5d:54:
7a:86:cc:1f:bc:0d:b3:ae:23:99:75:09:5f:c3:89:96:aa:c9:
b8:cb:ee:79:5e:07:b2:84:92:c0:26:2b:91:07:7c:fa:34:0f:
83:d0:b6:0b:1d:5c:92:94:0f:3e:f0:ef:a8:e3:ea:c1:17:0e:
18:a5:2b:d0:09:4d:cf:f2:5e:3e:25:e4:47:16:bf:16:60:d7:
11:a6:ab:20:38:73:0c:0c:29:08:0c:f7:4b:d8:f9:91:83:d4:
e5:c3:87:e0:17:b9:f9:eb:77:d5:53:92:75:da:3e:dd:ae:a5:
1a:80:89:68:00:aa:f6:0a:fd:34:b5:3c:f7:76:13:f7:ac:90:
e3:87:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:51 2025 by rpki-client