Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: 1WpoAdzdiDGSgm6R8SgWT4UiCcB1UOWjwB1pO06dzoM=
Subject key identifier: 2A:8C:D1:05:35:24:B3:04:F1:B1:24:27:D8:6C:96:F8:7E:A4:93:99
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019897135395FB529C62F1032B8C397DDB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 03:01:22 +0000
Manifest this update: Mon 11 Aug 2025 03:01:22 +0000
Manifest next update: Tue 12 Aug 2025 03:01:22 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: wUlIwJdhDH1QHhrfE1ue44ERdf1FZZ/tRT7td408fqo=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:53:95:fb:52:9c:62:f1:03:2b:8c:39:7d:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Aug 11 03:01:22 2025 GMT
Not After : Aug 12 03:01:22 2025 GMT
Subject: CN=2a8cd1053524b304f1b12427d86c96f87ea49399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:ef:b3:4f:66:d0:2e:70:85:9e:46:ae:a5:
94:b7:dc:a0:b7:fd:ac:f1:0c:6d:e6:5c:28:5b:1e:
9b:ca:46:c1:17:80:aa:a5:5d:1d:3d:c2:99:0e:8a:
25:8f:c7:9c:25:83:77:81:c8:ff:79:2b:e0:1b:ab:
dd:33:e8:8c:93:ad:7e:cf:b9:04:98:32:f3:23:62:
51:00:38:4c:72:6d:17:d6:51:ce:09:7e:67:dd:27:
a6:7c:96:ae:65:55:60:aa:1f:a4:cb:c9:df:d5:17:
de:cb:38:8c:ae:28:35:7e:31:62:53:13:cf:c0:72:
76:86:8d:da:b7:36:6c:34:03:25:b5:0c:99:e5:e6:
96:cd:98:01:e8:64:6a:33:07:cb:8b:07:80:65:ed:
46:c5:0d:94:03:60:cd:d5:83:13:14:2e:c4:53:29:
a0:dd:0b:b3:3f:71:8a:22:c9:4f:96:a3:b2:69:2a:
3d:85:e2:ce:9d:7f:8b:1d:31:d2:04:2d:ef:ea:6f:
17:3b:3a:e1:e0:62:1f:10:23:92:47:dc:64:3d:00:
ea:f6:6b:98:d7:a7:67:78:34:80:79:c7:30:70:11:
de:47:48:40:84:4a:7c:59:38:55:e7:52:c3:af:d7:
22:dc:2d:c6:dc:31:23:f8:3e:84:f4:f6:5f:96:03:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:D1:05:35:24:B3:04:F1:B1:24:27:D8:6C:96:F8:7E:A4:93:99
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:7d:8e:ff:ef:6d:41:56:af:bd:b8:3a:d3:a8:bf:a6:14:
2c:0a:c0:c4:b4:6f:da:b6:75:09:99:99:15:fa:a2:8a:6e:43:
01:3e:40:04:95:49:4d:34:c2:e3:4f:b9:8c:0c:b0:cf:a3:29:
4c:76:c8:85:09:b2:f3:87:52:78:6f:36:94:33:03:61:48:14:
9e:bc:40:92:07:75:29:48:c1:d8:65:a7:c4:a1:4f:14:5f:a9:
c5:18:25:3a:62:ed:b1:a8:83:24:07:1d:d8:e2:8d:82:08:6c:
93:78:e4:f9:5b:26:3f:fa:fc:0a:f8:05:a6:ba:25:2f:b2:35:
18:68:3e:0d:dd:49:d2:73:c0:b9:c5:34:21:d5:dc:da:54:aa:
4b:48:d0:67:4a:31:85:60:87:38:51:87:ef:48:c4:33:7e:ce:
36:90:8a:d5:d5:51:9f:83:5c:7b:79:11:d7:13:23:06:33:7d:
75:36:dc:68:19:9a:6b:1a:20:15:9e:51:b0:0e:ff:69:3c:bd:
f6:f3:fd:56:d0:8b:62:e4:cc:04:ac:84:88:6e:b2:64:0c:63:
d3:b0:95:f5:0a:cd:7e:52:08:9a:df:1b:12:08:6a:c4:b1:33:
bb:99:7b:12:63:e3:2d:2f:6a:3f:af:30:a4:9e:b3:e1:8a:f5:
7a:f8:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:31:09 2025 by rpki-client