Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: WWe//D5Y8m1Igo3r805h9RQCEWkfB3YY4VEY0z8zMi8=
Subject key identifier: 9F:55:84:D3:63:8E:E4:E4:F4:05:8D:C3:F8:6E:9B:B9:51:DA:D0:39
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 01988C8F7E93B2CAC4466653D8E0619F5AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 02:01:10 +0000
Manifest this update: Sat 09 Aug 2025 02:01:10 +0000
Manifest next update: Sun 10 Aug 2025 02:01:10 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: 8sVIJhoo5WJ7r1dutqoqAENk6b0JHzH5NCo+4upklyA=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:7e:93:b2:ca:c4:46:66:53:d8:e0:61:9f:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Aug 9 02:01:10 2025 GMT
Not After : Aug 10 02:01:10 2025 GMT
Subject: CN=9f5584d3638ee4e4f4058dc3f86e9bb951dad039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:89:b1:5b:d6:ea:15:85:3b:25:69:5d:d0:
dd:36:07:b3:d1:23:9f:73:f5:e8:df:f7:45:6b:08:
e4:dc:84:f7:09:1e:9e:4a:79:f8:1e:15:40:48:ae:
19:7a:a0:9d:ac:8b:8b:55:84:f2:df:67:61:90:bc:
58:03:4e:7b:df:d8:92:0b:5d:c6:d4:b8:7f:22:7b:
fd:b6:b8:4a:a8:dc:dc:7f:e9:8f:22:ea:10:87:af:
e4:12:f7:26:2f:ae:7c:55:b9:cf:a2:f5:5c:4d:28:
8d:a9:e6:f5:06:8a:80:cf:59:41:6e:c6:eb:3b:d0:
b5:21:db:5a:b0:3e:29:b2:96:5d:1c:a9:66:24:55:
77:ab:20:99:0e:0c:39:25:32:33:d6:fc:22:66:64:
fd:a8:2c:d3:30:e0:b5:37:08:21:fc:30:ed:1b:21:
ff:36:c5:09:c9:17:16:9e:55:66:eb:6e:ae:bf:21:
89:52:8b:e3:1a:75:aa:d7:a9:83:47:1a:71:2e:16:
52:f3:6f:5c:7c:0b:6d:cd:20:67:3d:87:e4:22:64:
3a:96:8d:8f:22:39:bc:8e:9b:90:0a:55:97:2b:ed:
d1:70:99:4f:f2:76:3a:58:09:a0:4d:8a:e6:9f:20:
6d:14:50:d7:12:6d:8d:d4:79:5f:0f:4e:bb:9b:72:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:84:D3:63:8E:E4:E4:F4:05:8D:C3:F8:6E:9B:B9:51:DA:D0:39
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d2:16:4c:5e:4b:88:77:79:29:f7:78:6d:68:e9:46:cb:94:
1d:5d:5e:29:2b:b0:82:6e:e5:3e:27:6b:3f:33:4f:d1:34:08:
5e:c2:00:fd:69:bd:e7:55:8b:5a:58:86:aa:19:5a:ec:81:99:
31:2e:4a:e2:a6:9d:b7:67:b5:45:e6:c8:e2:72:9a:b7:9d:ed:
29:90:4a:e1:c6:13:7e:2d:27:01:1b:8e:31:1f:1f:2d:cb:be:
ae:e6:db:7e:9b:7c:75:22:76:cf:4e:a7:d3:24:41:aa:43:fd:
c2:f9:d4:f4:54:e3:3a:6e:9a:83:2b:da:3b:1c:ea:a7:e8:2f:
c8:69:fb:91:da:2d:e9:4d:0d:0f:32:de:63:c9:70:88:5d:00:
0d:cf:49:4c:be:98:49:32:3b:95:6a:a6:84:6e:a5:ba:4e:07:
39:ac:58:28:da:c8:eb:cd:41:e3:8d:12:37:8c:29:c0:fd:f5:
47:b9:fa:cb:3a:0b:a1:68:63:87:b1:4e:a3:a8:a5:6b:27:e9:
39:c0:e3:ac:66:c2:94:2d:64:6d:90:05:14:e6:97:02:9a:7f:
8b:29:22:fe:c2:2b:4f:fd:f5:fb:ce:e4:66:de:aa:fa:f9:1b:
db:0d:33:94:6b:87:a7:58:1b:57:e6:8f:5f:10:63:74:3d:68:
2a:da:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:29 2025 by rpki-client