Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: nDmAQ+kBHAoQqyNJGT8MKapFK5EGT7Ssnmpyydf0ftE=
Subject key identifier: 5B:33:A4:56:27:7C:1F:8E:3B:5E:EB:59:BF:AE:45:BB:7D:C6:1B:B9
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 019777C19D8B52D2919B4351E9557303BF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0433
Signing time: Mon 16 Jun 2025 08:01:06 +0000
Manifest this update: Mon 16 Jun 2025 08:01:06 +0000
Manifest next update: Tue 17 Jun 2025 08:01:06 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: d01rOJUcE1u/wBY9/ra6ak/7ELITMxh1wdhFyKc049c=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:9d:8b:52:d2:91:9b:43:51:e9:55:73:03:bf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jun 16 08:01:06 2025 GMT
Not After : Jun 17 08:01:06 2025 GMT
Subject: CN=5b33a456277c1f8e3b5eeb59bfae45bb7dc61bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:b8:bc:64:c7:3c:11:cf:41:1b:9f:96:69:
c9:a7:d0:f6:82:96:d0:db:12:9e:b1:92:aa:a8:e0:
f6:3f:4a:53:6e:11:51:db:09:a6:15:2f:3e:48:21:
1c:da:4f:b6:4e:4c:92:df:f8:38:fb:1b:54:64:02:
6e:b8:14:5b:4f:9a:a1:ac:ae:ba:f0:f1:90:29:f5:
67:42:1d:19:4a:78:81:3b:37:e3:b0:e2:55:f3:f2:
85:f2:8d:1f:cf:28:1a:94:a3:9f:1b:38:f3:97:28:
58:d9:c4:c9:81:f2:bd:d5:a6:aa:60:aa:00:94:c4:
a3:58:37:84:96:c0:ba:07:5f:05:17:c6:68:12:73:
1c:bd:7b:4a:18:03:a0:49:c0:eb:8e:ae:28:11:13:
61:04:e2:ae:ad:1e:ce:bd:41:89:b8:0b:65:78:60:
84:92:ab:ed:69:ca:ad:c9:6d:f7:c2:52:ec:15:43:
f0:a4:cc:30:da:c5:03:ff:9d:29:67:f8:58:17:d0:
85:ee:ff:0d:07:0a:e7:26:2c:ec:1c:aa:a7:87:6c:
93:5e:25:9a:cc:16:38:6f:ea:4d:2d:78:9e:a7:fa:
75:6b:84:1e:70:b8:45:52:98:bb:b5:5c:66:9c:4d:
e4:8d:da:8b:fd:65:83:bc:72:86:d7:5c:55:cb:68:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:A4:56:27:7C:1F:8E:3B:5E:EB:59:BF:AE:45:BB:7D:C6:1B:B9
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:9c:22:60:d0:f9:d3:2e:d3:a8:5e:3e:52:68:be:c0:0e:
52:86:64:eb:79:6a:4f:1f:3e:a0:ec:cb:ae:6f:48:76:d4:eb:
b1:eb:3b:3e:3f:d0:be:2c:ea:35:69:80:1a:66:1c:75:78:de:
06:13:9a:8c:ff:05:a2:db:2f:8b:a6:72:e8:37:38:95:88:8e:
f8:90:3c:84:5a:59:8b:c6:9e:1c:6f:03:67:d2:f1:ff:58:02:
86:4b:dd:df:06:2d:b1:39:43:ea:f0:d8:72:a5:fe:ee:21:5b:
7d:85:20:f9:52:05:6c:f3:e2:19:44:c8:33:55:3e:f8:8b:a6:
7e:92:eb:fd:f8:df:0d:6b:32:cf:7e:14:99:66:af:11:96:94:
2d:01:dd:6c:04:2b:14:6e:b6:63:22:c9:76:cb:2f:18:2d:bc:
a0:9b:b2:10:34:66:ad:9a:c6:86:71:a8:ff:39:a1:1d:a4:41:
bc:b1:b0:4a:a0:01:d6:0c:96:c3:1c:3b:ed:1b:c2:a8:17:d6:
ba:dd:0c:98:b1:65:46:44:66:07:9b:ed:a9:8b:dc:95:bc:3d:
67:16:4c:30:87:ef:64:2b:78:cf:bc:6f:b7:21:fb:b3:ff:88:
bc:c7:75:1a:a4:f4:9b:31:e3:0f:fd:7a:9e:2e:40:c6:1b:a7:
45:6a:e5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wZ2LUtKRm0NR6VVzA795MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI2MTcyYmVhNWIwZmQzNDU0MDZlYmI0YWU5NWZmOTVl
M2Q1N2YwHhcNMjUwNjE2MDgwMTA2WhcNMjUwNjE3MDgwMTA2WjAzMTEwLwYDVQQD
Eyg1YjMzYTQ1NjI3N2MxZjhlM2I1ZWViNTliZmFlNDViYjdkYzYxYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFS4vGTHPBHPQRuflmnJp9D2gpbQ
2xKesZKqqOD2P0pTbhFR2wmmFS8+SCEc2k+2TkyS3/g4+xtUZAJuuBRbT5qhrK66
8PGQKfVnQh0ZSniBOzfjsOJV8/KF8o0fzygalKOfGzjzlyhY2cTJgfK91aaqYKoA
lMSjWDeElsC6B18FF8ZoEnMcvXtKGAOgScDrjq4oERNhBOKurR7OvUGJuAtleGCE
kqvtacqtyW33wlLsFUPwpMww2sUD/50pZ/hYF9CF7v8NBwrnJizsHKqnh2yTXiWa
zBY4b+pNLXiep/p1a4QecLhFUpi7tVxmnE3kjdqL/WWDvHKG11xVy2hI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFszpFYnfB+OO17rWb+uRbt9xhu5MB8GA1UdIwQY
MBaAFBESYXK+pbD9NFQG67Sulf+V49V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTct
OGQ5MDk0ZjNmNWExLzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTctOGQ5MDk0ZjNmNWEx
LzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkGcImDQ
+dMu06hePlJovsAOUoZk63lqTx8+oOzLrm9IdtTrses7Pj/QvizqNWmAGmYcdXje
BhOajP8Fotsvi6Zy6Dc4lYiO+JA8hFpZi8aeHG8DZ9Lx/1gChkvd3wYtsTlD6vDY
cqX+7iFbfYUg+VIFbPPiGUTIM1U++IumfpLr/fjfDWsyz34UmWavEZaULQHdbAQr
FG62YyLJdssvGC28oJuyEDRmrZrGhnGo/zmhHaRBvLGwSqAB1gyWwxw77RvCqBfW
ut0MmLFlRkRmB5vtqYvclbw9ZxZMMIfvZCt4z7xvtyH7s/+IvMd1GqT0mzHjD/16
ni5AxhunRWrl1g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:59 2025 by rpki-client