Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: aSQkRk21L/qbI7I5jlPH0RPI3G//bp+NSfPMMxljn1Q=
Subject key identifier: 62:E6:F2:8F:61:74:97:76:82:C9:DC:53:8D:9B:F3:14:55:4D:BA:2F
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 01969115999AC6006024725A27C29216362C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0D83
Signing time: Fri 02 May 2025 13:00:33 +0000
Manifest this update: Fri 02 May 2025 13:00:33 +0000
Manifest next update: Sat 03 May 2025 13:00:33 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: QQ0X3HazG0Lhx/5vfzPOmcf/6IYOOvZwKEmkmxPOsAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:99:9a:c6:00:60:24:72:5a:27:c2:92:16:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: May 2 13:00:33 2025 GMT
Not After : May 3 13:00:33 2025 GMT
Subject: CN=62e6f28f6174977682c9dc538d9bf314554dba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:fd:d4:b1:ae:99:04:d1:a4:5c:0f:11:1c:
06:3b:94:4a:c7:ab:67:b8:a1:04:ad:a0:aa:22:f0:
8d:9d:e9:f0:86:35:a6:be:b6:2a:85:04:a1:21:09:
48:e0:fe:5e:d8:61:9a:ec:17:97:93:9a:42:25:a8:
a0:0c:09:60:f0:e8:22:42:05:33:83:20:6a:7b:42:
94:a0:c1:38:76:77:4f:76:e5:db:08:e0:ac:7c:b8:
f2:67:55:43:6f:5b:d5:c7:b8:06:df:d4:21:5b:82:
a1:54:70:a5:69:e5:48:5a:b3:bc:5a:6a:c9:6f:04:
d0:99:51:31:18:40:d1:b8:1e:25:28:ef:53:41:bd:
62:83:29:0d:29:98:10:d4:68:1e:5e:3d:5f:fd:05:
b2:f5:71:e5:b7:cf:e4:bb:96:f0:f2:92:89:6f:d1:
ec:8b:a8:29:89:c2:d1:1d:5f:69:f1:b4:a2:9b:da:
d3:0a:77:72:33:38:9e:48:c3:4e:c7:b9:5c:1b:99:
85:1a:b9:5a:c7:2d:67:4b:be:18:44:b4:00:35:81:
a7:8c:81:b2:0c:3c:15:09:6a:42:13:0a:a9:ca:34:
53:c7:b1:6e:fe:8d:39:b0:0a:fe:7d:46:e5:9d:08:
2f:ef:d5:bd:35:f4:33:26:e5:a0:b0:38:a5:1f:d8:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:F2:8F:61:74:97:76:82:C9:DC:53:8D:9B:F3:14:55:4D:BA:2F
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:52:ed:09:ab:e9:60:8e:f6:a3:34:dc:1e:a3:64:9c:83:
77:99:c3:53:8a:ae:81:a9:da:f7:27:a6:95:2c:ed:20:d2:57:
06:c1:5a:ba:6f:c3:a0:fc:1c:3a:8d:db:4c:74:e0:3b:f6:e5:
51:51:2f:bb:6a:e4:6f:32:56:10:26:89:4e:f9:46:0e:f9:8d:
99:c9:0a:be:4e:72:18:9d:02:cf:12:0f:49:27:bf:2d:2b:54:
67:5c:45:d5:14:71:0d:63:4c:98:6c:ba:6f:d5:70:00:ad:f6:
8e:d7:ef:a9:1c:df:8d:c9:b5:52:97:5e:7c:11:7f:5f:70:b2:
58:27:cd:92:ad:77:34:3b:cf:b4:b5:79:58:cf:4e:6b:fb:c2:
68:89:b2:cc:ea:95:fb:2e:65:5e:3e:cd:4e:5d:29:ee:f2:29:
b8:14:cd:9b:06:f9:41:10:0c:2d:53:fa:74:63:b8:33:a0:0e:
45:47:f1:39:9a:42:19:97:f8:d1:ce:a0:dd:76:44:bd:80:83:
87:5e:78:c4:f2:65:b4:b0:cd:72:24:29:89:c2:27:1c:02:67:
9f:53:a8:c0:da:82:ee:55:af:fc:ec:b9:c8:fd:ca:f2:b9:13:
88:46:e7:6e:db:a5:47:bb:30:ec:ca:7f:1c:3a:fe:a8:06:ff:
3b:e0:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:04:23 2025 by rpki-client