Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: /NLKe3CE3NuEfBpsZJ/4krZtOMbfaQ9GfiIaQDvXC34=
Subject key identifier: 55:22:62:8D:DC:0C:CF:D1:C9:C8:C0:84:87:2E:28:86:CD:BF:76:3F
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019872983663D9BDD210F2C79A6611F8CC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 09A6
Signing time: Mon 04 Aug 2025 01:00:34 +0000
Manifest this update: Mon 04 Aug 2025 01:00:34 +0000
Manifest next update: Tue 05 Aug 2025 01:00:34 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: 0qQ/kcH5wLnpmATnOYb+Yg9D+7QhvYMS0zCQROoNj6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:36:63:d9:bd:d2:10:f2:c7:9a:66:11:f8:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Aug 4 01:00:34 2025 GMT
Not After : Aug 5 01:00:34 2025 GMT
Subject: CN=5522628ddc0ccfd1c9c8c084872e2886cdbf763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:9a:a6:df:7d:2e:09:12:06:c3:f5:cc:54:
c2:64:f6:08:9f:07:29:4d:8d:56:7f:6f:e2:26:99:
35:b0:4c:da:19:b6:b8:5d:26:96:24:0e:6c:c7:b9:
57:60:7a:3f:88:7e:e8:83:44:4d:1e:c5:1d:f0:56:
d0:73:27:10:6d:1f:66:82:49:d1:d2:48:95:4c:cd:
37:e3:2d:13:41:4e:6f:cf:49:1a:99:28:e4:37:71:
70:c0:68:69:4a:ef:d7:6a:cc:ed:b8:53:6b:3d:15:
d2:52:21:b2:46:39:f5:82:fb:09:67:48:33:13:56:
4a:5d:43:fb:dc:28:89:b4:14:d2:04:15:03:b9:d5:
89:d5:9d:4b:5a:fe:40:99:14:93:7e:0f:bc:22:d2:
96:87:26:25:1f:76:b1:ad:ad:3a:06:93:f7:85:61:
f4:d5:5d:92:51:b2:b1:04:71:12:81:67:49:62:e5:
14:36:10:9f:0b:70:88:3d:fe:4c:7d:5c:6a:c4:9f:
96:a9:34:37:3e:41:8f:0d:7d:fd:a6:b4:c1:3b:6f:
97:45:bc:70:9f:6e:5f:08:30:19:e3:d7:dd:ae:df:
4e:0c:a0:cb:06:7c:d7:c4:fe:2d:95:39:7d:b0:de:
7b:6b:78:96:aa:9c:86:20:89:c1:b1:33:2d:e0:fa:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:62:8D:DC:0C:CF:D1:C9:C8:C0:84:87:2E:28:86:CD:BF:76:3F
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ed:e7:85:18:a8:9e:5e:25:f2:24:74:fe:91:23:58:7a:0a:
c4:47:8c:aa:62:45:24:2d:3d:b6:e8:40:84:e7:6f:b2:61:58:
aa:59:c0:d3:80:1d:0d:74:1e:88:b7:fc:ae:37:5c:c2:ef:dd:
7b:4c:c6:af:f3:0f:e9:6f:11:94:70:13:76:f1:e5:57:30:7d:
43:f1:8d:61:77:c1:22:8a:22:e9:cd:37:9d:55:19:09:db:35:
9b:44:39:3b:a2:57:e3:01:b9:c5:7a:15:c0:e3:14:e4:3f:01:
7b:21:f8:cc:07:7f:dc:74:80:4d:4c:05:19:d3:6d:ea:e4:9a:
6d:74:b8:32:b0:ab:3c:58:ae:59:28:3f:c2:6b:05:75:ad:be:
8b:d0:03:bd:4f:71:60:9a:47:17:bd:a8:77:40:8e:7c:43:48:
3f:a6:db:8b:a2:31:ad:90:a2:ed:39:2b:23:dc:19:bc:c6:35:
e6:7e:a1:c8:f4:26:2d:88:6f:85:c1:23:8b:35:c2:5d:49:15:
7b:67:df:ce:3d:77:9e:ea:07:67:b0:b1:62:cb:5c:47:37:d1:
2a:60:fc:56:c1:71:9f:8e:bb:33:c7:e1:a0:1e:28:58:ab:c5:
7d:47:cb:79:00:f7:8d:2e:ea:f0:b1:98:2d:c7:b5:89:19:74:
a8:1a:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:39 2025 by rpki-client