Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: TWxLcoBgzBZqdCKn1LyGJpg12hoxH3ngcJg7ItIqcpY=
Subject key identifier: 14:5F:2C:C7:87:AA:A7:00:38:6C:49:71:A0:56:63:6F:3B:AE:CB:E9
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 01976A05C8A7295F7CB4C4A32DFA14DD0834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 16:00:53 +0000
Manifest this update: Fri 13 Jun 2025 16:00:53 +0000
Manifest next update: Sat 14 Jun 2025 16:00:53 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: JzLuaBIMdymKk0uIF8XeMI/GyXeKjIj+w5ypvrNQHtU=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:c8:a7:29:5f:7c:b4:c4:a3:2d:fa:14:dd:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jun 13 16:00:53 2025 GMT
Not After : Jun 14 16:00:53 2025 GMT
Subject: CN=145f2cc787aaa700386c4971a056636f3baecbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:a9:08:a5:2a:e5:81:8c:2d:01:3a:9f:5f:
2b:20:44:86:de:22:a8:e9:6a:8f:f1:da:67:f8:03:
f5:16:fd:92:2d:f6:7e:fb:fa:55:fa:11:74:4e:88:
2e:09:53:34:c5:c3:68:dc:49:a4:8c:d6:f6:56:24:
99:70:f2:90:9a:1d:6a:c7:65:3a:d1:f4:df:30:4d:
44:6f:71:3c:8f:f6:00:50:1a:58:9b:94:50:ef:8d:
ae:81:a2:88:4d:8d:5e:0a:7f:16:19:1c:53:24:cf:
03:63:86:4e:8e:ee:8d:f5:8d:80:0f:a8:b4:0a:71:
be:e7:e8:c6:41:11:8f:c6:81:ad:68:fe:c3:04:2b:
c2:de:47:5a:58:93:12:e9:ff:88:79:c3:2b:33:f6:
0b:b8:6f:a4:89:b2:cd:17:b8:b0:be:89:75:38:2c:
03:c5:74:cd:95:0d:64:db:0d:8b:4f:b5:3a:f4:20:
b5:41:92:24:da:c3:15:55:53:1e:72:ab:2d:54:0e:
98:03:c3:41:ac:2b:68:e1:4e:54:74:73:be:27:eb:
4b:92:c7:62:46:e6:75:6b:9e:e9:4f:8d:9d:7d:ae:
32:d4:25:d8:4a:48:9b:b2:72:6c:c3:3e:43:12:df:
42:77:a3:c6:46:e2:64:35:22:60:91:ed:89:c2:7a:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:2C:C7:87:AA:A7:00:38:6C:49:71:A0:56:63:6F:3B:AE:CB:E9
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:90:01:7f:b4:45:0f:2b:f0:0e:1a:b0:2e:9a:01:8c:58:
33:db:2f:8e:05:f6:3e:23:9a:8b:93:6c:94:48:07:a2:21:1e:
65:ef:1e:2b:18:fd:20:e3:46:d6:a0:f2:b4:83:e4:b4:53:b0:
25:95:10:15:55:c6:4d:6f:b0:22:18:2b:6c:3e:23:d2:20:ec:
51:00:c1:3f:0c:ca:c8:f4:40:1f:d4:00:c5:ca:57:0b:be:01:
bc:95:45:31:01:15:ca:a5:84:29:72:96:78:d7:6e:46:d8:98:
f6:cf:8e:ce:ab:fd:97:b0:af:99:aa:5e:ca:6b:e8:30:74:e1:
3f:38:ac:c1:b9:a4:3a:49:5f:fc:6b:ad:3d:06:a0:f7:a4:c4:
95:06:60:44:3d:63:87:03:8d:fe:41:8b:1e:e4:ab:8e:47:33:
1b:a2:72:e6:41:7c:4c:d8:cd:05:b3:38:30:c1:e5:46:3e:f3:
25:a6:8e:42:e5:7e:73:d7:c0:38:12:2c:e7:32:93:56:62:1c:
0f:b9:8b:86:b0:df:64:e0:3b:ea:b0:c7:06:5a:1f:c3:40:bc:
35:c3:71:17:29:a1:bb:46:19:21:c5:a8:62:2f:16:6f:43:5a:
1a:0e:10:6a:29:8f:28:92:da:26:c7:a5:68:cc:33:3b:30:eb:
36:d7:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:23 2025 by rpki-client