Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: CfgFdbxL2rUwISjIf0O8+57fdxiDVajmeFi/yhaQqog=
Subject key identifier: BD:A8:11:2C:B3:A1:3D:88:D9:D2:59:4C:5F:66:B9:2E:54:DA:7E:16
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 01987D8B6AB2887B32C31153DBB1060BBFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0A28
Signing time: Wed 06 Aug 2025 04:02:25 +0000
Manifest this update: Wed 06 Aug 2025 04:02:25 +0000
Manifest next update: Thu 07 Aug 2025 04:02:25 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: J4cCcOxL5A4I8ARUHsIYvXh58yOmHY6Ixnj6A4YwEUs=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:6a:b2:88:7b:32:c3:11:53:db:b1:06:0b:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Aug 6 04:02:25 2025 GMT
Not After : Aug 7 04:02:25 2025 GMT
Subject: CN=bda8112cb3a13d88d9d2594c5f66b92e54da7e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:4d:6f:13:ef:85:bf:65:7f:8b:b5:4f:d6:
55:6b:c5:08:dd:5f:d6:fb:c8:f2:7b:e2:75:38:09:
30:fd:11:82:28:75:ec:67:97:10:ba:d6:86:50:37:
ef:45:22:de:79:1e:14:20:13:96:4c:98:49:d6:b4:
e9:7e:b2:d4:05:db:45:32:bf:96:d0:99:33:9d:97:
e4:b6:c1:ee:24:e4:b7:46:be:40:67:fc:e5:f7:0e:
6e:e6:86:99:c0:db:e6:51:9e:50:41:3b:57:26:e0:
7d:0a:2c:e3:3a:d2:78:c6:00:53:f4:67:66:e1:34:
77:ef:e2:9a:00:9d:55:71:99:44:5e:82:9e:61:20:
0d:13:89:40:6f:c7:52:0f:19:15:60:37:05:ce:1f:
81:6d:30:62:d6:ac:4a:0c:21:ad:0b:0b:89:24:01:
f1:99:c0:c9:a2:6e:c4:55:ac:71:cc:d2:6b:4d:ba:
3f:43:49:ef:02:ed:96:f1:56:c9:8a:c0:82:ca:3f:
ee:54:9d:8f:f2:14:3d:e6:9e:48:1e:56:1b:cf:0a:
5f:bd:33:80:b8:e5:c4:06:66:28:ad:d9:79:59:37:
2e:70:2e:02:dd:10:54:1d:ab:e7:de:e0:a5:39:3a:
77:3a:b2:a1:34:8c:6e:7c:78:a5:28:b7:e1:1e:dd:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:11:2C:B3:A1:3D:88:D9:D2:59:4C:5F:66:B9:2E:54:DA:7E:16
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:df:ab:61:99:3e:cf:61:77:f2:cb:83:11:05:d6:cb:63:
e4:f8:77:ef:18:5f:3e:95:bd:4a:30:3a:db:ef:c1:3c:d8:01:
69:e0:4b:d1:8c:b9:45:32:2f:54:e9:50:29:2b:e1:9f:c8:15:
14:9f:77:77:e9:26:5b:0b:25:8f:71:a7:f2:aa:21:8b:46:81:
f2:93:81:db:3c:53:12:e0:21:05:ff:2b:2d:83:4a:e3:60:42:
4a:56:c2:29:0a:97:3f:9f:88:bc:d7:3d:a5:c7:4b:d5:30:44:
66:d3:6f:e0:26:13:8b:7a:ea:83:e2:75:4e:a9:2c:63:04:95:
4a:77:5c:b3:f9:7f:8d:9d:ed:87:27:6b:ec:68:51:aa:a5:18:
35:e4:4b:12:1c:bd:65:f0:3b:77:78:62:b2:84:e0:68:0c:42:
f1:21:5e:dd:bd:48:b0:7c:d3:d1:18:b5:e7:b4:12:23:6a:c3:
86:13:c9:bc:22:4b:65:e5:94:dd:a6:b2:50:d0:d5:e7:41:fb:
ad:27:35:f6:df:f7:5e:14:13:f7:28:ff:9d:f8:9b:1f:83:9b:
15:08:85:15:57:05:52:4e:31:b7:92:49:14:5d:0c:f4:e1:ef:
84:ca:5e:9e:c7:3c:e7:1b:f3:88:6c:fe:af:c8:a2:16:01:fd:
9b:55:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:01:53 2025 by rpki-client