Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: Q5xC4XXExftaaxuO+YnlJcvbPCqqOZQzQGPtRlJ37Z4=
Subject key identifier: C4:82:AF:AB:07:D3:1B:26:01:8C:23:86:80:2C:C1:0F:01:8E:80:16
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 019688EE3B703CDA9771D05A1EC201B1B8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 23:00:36 +0000
Manifest this update: Wed 30 Apr 2025 23:00:36 +0000
Manifest next update: Thu 01 May 2025 23:00:36 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: WAtMEU3GHcY930+ILAz4hwSDhvBCFjofjuKy7Tpr9YY=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:3b:70:3c:da:97:71:d0:5a:1e:c2:01:b1:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Apr 30 23:00:36 2025 GMT
Not After : May 1 23:00:36 2025 GMT
Subject: CN=c482afab07d31b26018c2386802cc10f018e8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:e6:f7:c0:1c:ef:e9:81:b5:55:5e:cd:25:
0d:16:b7:f7:3c:19:e2:88:71:15:bb:dc:5a:fe:78:
09:b1:a9:30:fb:fa:b2:82:21:7d:0a:ab:27:ab:36:
5c:32:4f:a3:55:a6:21:cd:4b:06:17:d2:31:de:f7:
fb:04:98:94:42:fc:4e:fd:ab:77:24:b7:ba:91:a9:
6d:36:fe:50:a1:12:4c:27:31:4e:5a:f0:e4:15:c1:
54:0a:01:a7:7c:d2:26:ad:9d:4e:de:ae:c2:95:72:
82:c5:d8:12:bd:95:fd:86:ee:04:af:ad:9b:9c:05:
34:1f:5a:65:da:fe:0e:56:18:11:62:e2:f7:f7:c5:
0d:c2:2f:73:54:64:c4:56:48:91:bb:03:47:a0:4c:
63:3a:78:4d:09:88:80:e4:f9:ef:7f:1f:3e:1a:52:
25:4a:3d:d1:be:80:03:2c:91:63:05:f6:d5:4a:87:
03:e5:f8:d0:a2:af:8c:b6:ba:d2:67:a9:4a:a5:6d:
8d:c0:c1:53:31:5c:ab:f8:a3:2a:c3:a7:16:57:89:
b9:c1:dc:4a:93:0e:ee:03:94:60:de:ec:34:2d:7a:
16:58:23:2a:6f:20:ee:aa:3b:cd:32:0f:91:5b:81:
39:bb:9a:fe:93:5f:75:ef:f8:89:f6:03:4e:34:17:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:AF:AB:07:D3:1B:26:01:8C:23:86:80:2C:C1:0F:01:8E:80:16
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:87:80:50:b4:e8:d7:f6:c8:0c:0a:da:8c:96:35:04:5d:dc:
89:89:25:7d:79:40:1f:cc:b5:ba:68:c3:f8:da:b5:b2:59:17:
07:95:ab:2c:da:a4:85:bf:aa:b0:69:a4:d7:d8:70:30:87:12:
22:13:af:cf:08:be:a2:ab:a4:df:ef:90:2c:d9:67:bc:b9:c6:
3f:72:81:89:d9:4b:30:b5:a9:ad:23:be:ba:79:1b:72:9f:ac:
98:34:5f:75:6c:b6:13:5e:86:c4:79:9c:b0:ae:8b:57:cc:b2:
12:43:cc:f9:4c:c5:07:db:38:d9:02:ac:10:7b:cf:99:f9:4e:
9c:45:1d:ab:26:7a:3c:17:ba:a1:c1:8e:f1:42:6c:25:87:5b:
09:0e:07:8a:8d:0d:75:42:43:53:a1:3f:ef:0b:ae:59:47:fa:
aa:e5:12:fc:5d:5f:a9:26:19:67:85:f6:69:fa:0c:61:a9:18:
9f:2e:c9:55:3d:14:ef:6d:f8:dc:a9:6e:60:a1:24:f0:c4:bf:
5b:b0:cd:93:75:b7:6e:99:74:d7:7a:38:8d:64:51:9c:51:95:
39:64:2b:e3:41:bb:8c:34:13:fd:e6:f2:bb:3a:af:6e:69:7b:
53:13:2f:20:48:1d:77:f8:3b:1a:5e:e9:51:fd:bd:c3:40:53:
a3:a5:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:36 2025 by rpki-client