Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: J0/G6VaeB8pcsWnbnDyfKyrfSSBVgYBeZRQJNFODxPY=
Subject key identifier: 99:76:65:53:F4:01:BF:B0:1F:3F:AC:47:91:DC:8B:B8:17:FE:26:4A
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 01967CB343867A0354A95E0EFBE4BBA6300A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 03B1
Signing time: Mon 28 Apr 2025 14:00:45 +0000
Manifest this update: Mon 28 Apr 2025 14:00:45 +0000
Manifest next update: Tue 29 Apr 2025 14:00:45 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: 3kL1XqLnY3RX4+0NTbVBrIEVhjnRsxfyO/dIxy6l/ww=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:43:86:7a:03:54:a9:5e:0e:fb:e4:bb:a6:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Apr 28 14:00:45 2025 GMT
Not After : Apr 29 14:00:45 2025 GMT
Subject: CN=99766553f401bfb01f3fac4791dc8bb817fe264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:e8:de:ed:c8:d4:7b:02:46:1f:54:3b:78:
42:07:14:11:fd:1a:bf:d1:69:85:a0:7e:da:35:ae:
41:0e:ac:82:b7:61:82:5a:a9:d1:e5:33:37:d9:73:
95:f3:c0:cc:8a:9e:f5:db:0f:c6:bb:0b:49:eb:06:
3d:fc:56:46:f3:66:0c:7d:a7:df:7a:55:2a:fc:7e:
98:6c:29:29:de:58:8c:f1:40:81:be:bb:35:02:a9:
d1:07:df:7a:d7:17:59:83:fb:57:53:e1:e1:0e:f7:
49:c3:6b:61:db:0f:4d:aa:ad:b9:67:a0:f3:3e:e4:
9a:74:d2:09:da:f6:6e:d3:99:0a:13:5d:31:c7:04:
99:44:4f:a2:85:13:71:36:c9:c8:b7:ab:3b:86:35:
23:3b:3c:d4:5c:7a:2e:74:e0:2d:23:ab:00:ef:f4:
1e:70:a1:3d:53:d0:54:c1:03:21:32:fd:d0:c8:df:
66:38:d0:ca:ee:bd:fa:17:41:18:2d:f8:78:eb:e9:
d9:6a:9b:0a:dc:18:c4:fa:78:29:13:5d:80:db:a2:
80:1b:3f:23:c6:27:84:d4:1b:05:4a:76:57:b6:87:
78:26:43:f9:cf:f5:85:d5:53:21:b9:5e:36:fc:97:
34:61:e2:0a:e6:ec:3b:14:1e:a0:75:8e:fc:52:1e:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:65:53:F4:01:BF:B0:1F:3F:AC:47:91:DC:8B:B8:17:FE:26:4A
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:48:ee:bf:72:c7:08:67:71:b7:0c:7f:d3:84:7f:61:d8:
c6:27:19:d4:82:10:96:b5:84:60:bc:83:11:c6:68:6e:24:cd:
00:6d:8b:31:c2:6f:eb:b1:0c:81:66:fb:db:0e:68:da:66:5a:
45:6d:9f:c3:54:86:aa:25:58:cf:48:83:48:37:2e:d6:d4:8e:
4a:b6:ad:b7:2b:71:cc:77:c1:06:38:4b:d3:b7:18:76:3a:b8:
4c:19:13:93:3e:ea:f6:39:6c:e1:39:2f:82:f4:65:28:b9:62:
45:d3:b9:a6:72:cb:e5:ed:95:df:0f:cd:63:5b:87:67:d2:e8:
d9:2b:3f:56:f5:18:cb:15:62:34:6e:54:9f:40:71:89:7f:39:
83:c4:12:c5:61:38:18:2b:9b:88:16:b4:59:45:da:bc:a3:84:
7b:2b:e9:67:c6:3f:f7:aa:12:88:e1:33:0e:aa:7c:b5:da:e3:
42:2b:1d:9b:ea:cc:1d:1a:f3:9e:eb:41:e6:fb:24:0b:27:a4:
59:f7:65:d7:7a:e4:ac:3c:b8:a1:ef:db:2b:67:3a:e9:f5:a1:
bd:e6:6d:d8:8b:9a:ed:31:11:46:66:05:d7:70:d7:0d:26:c7:
77:2e:67:99:87:82:d7:d8:67:9d:9f:dd:43:25:cd:61:ad:c9:
bc:f3:f6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8s0OGegNUqV4O++S7pjAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI2MTcyYmVhNWIwZmQzNDU0MDZlYmI0YWU5NWZmOTVl
M2Q1N2YwHhcNMjUwNDI4MTQwMDQ1WhcNMjUwNDI5MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg5OTc2NjU1M2Y0MDFiZmIwMWYzZmFjNDc5MWRjOGJiODE3ZmUyNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLHo3u3I1HsCRh9UO3hCBxQR/Rq/
0WmFoH7aNa5BDqyCt2GCWqnR5TM32XOV88DMip712w/GuwtJ6wY9/FZG82YMfaff
elUq/H6YbCkp3liM8UCBvrs1AqnRB9961xdZg/tXU+HhDvdJw2th2w9Nqq25Z6Dz
PuSadNIJ2vZu05kKE10xxwSZRE+ihRNxNsnIt6s7hjUjOzzUXHoudOAtI6sA7/Qe
cKE9U9BUwQMhMv3QyN9mONDK7r36F0EYLfh46+nZapsK3BjE+ngpE12A26KAGz8j
xieE1BsFSnZXtod4JkP5z/WF1VMhuV42/Jc0YeIK5uw7FB6gdY78Uh6DIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl2ZVP0Ab+wHz+sR5Hci7gX/iZKMB8GA1UdIwQY
MBaAFBESYXK+pbD9NFQG67Sulf+V49V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTct
OGQ5MDk0ZjNmNWExLzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTctOGQ5MDk0ZjNmNWEx
LzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLxI7r9y
xwhncbcMf9OEf2HYxicZ1IIQlrWEYLyDEcZobiTNAG2LMcJv67EMgWb72w5o2mZa
RW2fw1SGqiVYz0iDSDcu1tSOSrattytxzHfBBjhL07cYdjq4TBkTkz7q9jls4Tkv
gvRlKLliRdO5pnLL5e2V3w/NY1uHZ9Lo2Ss/VvUYyxViNG5Un0BxiX85g8QSxWE4
GCubiBa0WUXavKOEeyvpZ8Y/96oSiOEzDqp8tdrjQisdm+rMHRrznutB5vskCyek
Wfdl13rkrDy4oe/bK2c66fWhveZt2Iua7TERRmYF13DXDSbHdy5nmYeC19hnnZ/d
QyXNYa3JvPP2+w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:23:00 2025 by rpki-client