Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: YE0rJyg8W0Aqq16rQuNnMhjyhVhRwUigmfEIzQWPFW0=
Subject key identifier: A0:86:8A:18:05:CC:7F:7B:6D:EA:DF:1F:86:6B:50:6D:4D:B0:F2:D8
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019883FA675BF483D6446EC3E91E68297C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 10:01:22 +0000
Manifest this update: Thu 07 Aug 2025 10:01:22 +0000
Manifest next update: Fri 08 Aug 2025 10:01:22 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: fo4LQvvE+7byn1WcWLeN1gLyTos6hHDpS7vy2Ct/tiE=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:67:5b:f4:83:d6:44:6e:c3:e9:1e:68:29:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Aug 7 10:01:22 2025 GMT
Not After : Aug 8 10:01:22 2025 GMT
Subject: CN=a0868a1805cc7f7b6deadf1f866b506d4db0f2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:e8:c6:29:8e:47:72:c3:a8:68:ff:1d:37:
3f:1c:49:5f:c1:3b:6c:a2:95:8e:85:a7:a2:80:d6:
51:9f:eb:3b:cb:56:ab:d9:77:5c:24:ca:68:2e:a7:
93:d2:bd:32:6f:ef:f8:1a:24:0b:81:f9:08:0f:00:
ce:ea:69:f1:9f:96:c4:e1:f5:96:49:8a:f9:c0:59:
31:8a:5c:b8:98:cc:30:99:b3:62:40:b8:60:88:ae:
e3:38:5b:a0:8b:3c:1a:05:75:36:50:d7:96:ac:26:
28:78:e5:af:d9:32:50:cd:36:52:68:34:34:3a:71:
eb:11:2e:30:dd:bc:e2:13:a9:96:ee:31:ed:e6:f3:
02:5f:d2:77:71:bf:37:40:f5:af:d7:70:a2:31:af:
b0:6e:87:c4:8e:14:d5:38:d5:3f:61:d8:d6:97:8a:
02:a3:15:49:f1:94:93:19:88:20:9d:d4:85:3d:14:
6b:f1:c2:2e:98:c1:8e:f8:09:cd:15:f5:a3:4b:50:
17:11:3b:5c:ee:5a:a6:94:a5:e9:c8:1c:44:3d:59:
45:66:97:fd:b2:ec:b8:a2:af:f7:ea:75:86:4a:49:
2a:e6:63:b2:81:4b:51:98:cf:c1:ed:89:20:96:6c:
19:02:bb:ac:0d:ac:ad:65:10:56:22:a1:78:7e:7e:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:8A:18:05:CC:7F:7B:6D:EA:DF:1F:86:6B:50:6D:4D:B0:F2:D8
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2c:b0:17:8d:78:fd:c3:74:4e:79:b3:ad:cc:bc:a1:00:dc:
c7:19:f5:09:cf:6a:45:8e:20:56:72:06:d3:6e:f2:66:6e:c1:
4f:f6:bb:91:4d:a6:2d:21:2c:39:15:02:91:ad:90:90:ea:e8:
8a:a5:8b:86:4c:f5:84:46:75:2b:a8:bc:7e:83:31:49:41:2c:
d8:85:9a:49:84:46:10:28:70:74:34:73:81:54:0f:a8:eb:20:
c1:f0:5a:03:5f:31:5e:4d:fc:21:b4:b9:2b:3f:98:e1:59:81:
7e:11:1c:a2:e7:82:4a:d9:e3:9e:5b:27:8c:58:95:cf:ec:c0:
7c:d3:80:1b:44:ca:69:4a:66:fb:36:40:0a:d4:b2:b1:d5:50:
e9:a1:6e:c3:b4:ac:4d:3b:59:5a:6b:6a:ed:1f:52:7c:b3:8e:
2c:da:92:c3:a1:bd:69:8f:3b:c0:2f:b9:74:64:69:97:43:12:
6b:e8:6c:e6:26:84:c4:b4:de:5c:c7:b0:f9:66:90:ea:a1:8b:
8c:0f:05:ee:4b:88:68:7f:3a:ac:61:15:dd:aa:44:26:b8:9a:
0d:57:51:67:1e:7a:36:a1:08:f7:21:ee:25:60:35:18:7f:fa:
1d:5d:94:71:de:69:da:43:d5:97:c8:37:ac:14:40:a4:f0:82:
99:87:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:09:49 2025 by rpki-client