Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: nHGkD4+7Pr+Z/V6w4EmQgDIV931yrzIKthqTvroS9SM=
Subject key identifier: 97:EE:24:8B:C2:AC:BA:74:F2:22:B7:F1:1B:7C:9E:27:CB:61:22:0C
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 01988A6A57DAB56E0F5FD453A42870C690B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 15DE
Signing time: Fri 08 Aug 2025 16:01:21 +0000
Manifest this update: Fri 08 Aug 2025 16:01:21 +0000
Manifest next update: Sat 09 Aug 2025 16:01:21 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: 7jKmXqGcOGNwlA1gpTEh05iKEf0nfqhzjA2l58UelrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:57:da:b5:6e:0f:5f:d4:53:a4:28:70:c6:90:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Aug 8 16:01:21 2025 GMT
Not After : Aug 9 16:01:21 2025 GMT
Subject: CN=97ee248bc2acba74f222b7f11b7c9e27cb61220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:81:17:d5:95:26:da:5c:e6:69:ec:e5:7a:
f2:c6:e5:40:75:5f:bb:67:cb:e6:79:3c:bc:59:d1:
16:2a:e4:54:9d:30:bf:13:69:ab:13:6f:65:d3:e9:
02:47:41:ad:c4:38:92:3e:b4:91:de:0f:38:af:ea:
0d:5a:57:3f:65:4d:37:e1:3c:b7:f1:98:63:97:85:
88:47:d9:f7:c0:f6:cc:e7:b9:44:3b:46:66:d5:9d:
7a:5b:2e:05:d3:84:3e:bd:08:e9:0e:75:8b:bb:70:
4b:f2:a4:74:aa:10:02:d5:50:22:17:7b:d6:d0:07:
f9:f2:bf:d4:e9:7f:31:ac:9c:10:5e:70:71:73:3c:
86:19:90:bc:8d:f5:64:e2:10:53:20:50:30:74:4c:
b8:ff:ba:c1:87:f5:69:0b:d6:01:5e:b2:d8:ae:cb:
1d:62:47:cd:0f:40:cf:73:7e:ed:81:8d:da:49:67:
35:77:73:f7:ea:eb:cd:1d:95:0d:86:6d:10:7e:68:
1a:9d:da:bb:01:8a:19:3b:45:1a:fc:e1:55:80:a7:
45:27:64:55:80:42:d8:7a:5c:e2:5e:0e:08:5d:14:
39:fe:21:8d:6f:fd:f1:ce:08:d8:b2:ad:0c:11:e2:
dd:11:04:f5:55:b4:ee:e4:4f:66:a6:31:dd:e3:de:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:24:8B:C2:AC:BA:74:F2:22:B7:F1:1B:7C:9E:27:CB:61:22:0C
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:a6:f5:0c:93:94:74:4c:61:73:ad:f2:f3:9c:8e:94:cf:
9c:f8:ce:79:36:42:90:14:23:7a:90:6d:ca:b5:69:41:f4:f1:
f0:85:7b:7b:d9:e7:f7:85:59:87:63:97:13:9e:20:73:43:18:
dc:e7:44:6b:a2:87:58:f8:b7:90:e8:94:e2:2f:5c:d4:b3:14:
a0:8d:fb:3f:04:41:e7:66:ac:22:f6:61:d8:d6:79:56:6f:9d:
e9:05:42:00:95:be:b0:26:36:fd:41:c9:eb:c0:fb:be:f2:b4:
cc:41:08:2a:99:1f:be:30:c7:38:2c:3a:bc:b2:68:12:49:87:
b2:ff:ee:7c:62:39:ba:50:8c:f6:dc:5c:b1:16:c7:0f:0f:a8:
8d:11:73:f2:4f:09:e1:07:17:a1:c6:fa:aa:50:87:5b:f9:c6:
68:8e:38:a7:d3:4c:bd:14:24:87:43:65:19:63:02:cd:84:12:
ba:c8:b2:26:f8:ed:f4:0a:68:a0:f5:52:06:56:43:50:f2:a6:
bb:7c:c9:d4:60:b3:31:13:ee:95:c6:60:7e:7a:36:39:b8:7e:
48:1b:51:0b:79:5f:9b:52:64:94:c6:0b:eb:fe:62:4c:c0:78:
0a:fd:25:bc:eb:e6:6b:e6:4b:dc:48:72:8f:d3:40:31:21:0b:
04:74:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:07 2025 by rpki-client