Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: UvX33qsgpWSz3u4NDCTbooXz+hCpq0CexNeyoKBrizw=
Subject key identifier: 29:8E:B7:25:B6:4D:2A:CD:06:70:28:BB:01:1E:1F:1C:AF:A8:71:2F
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 0196827E3AAF32C6B55A2B16E252064464B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 17:00:32 +0000
Manifest this update: Tue 29 Apr 2025 17:00:32 +0000
Manifest next update: Wed 30 Apr 2025 17:00:32 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: 2n/dby91+VEOXDXv5BECx2Ul6aW1dlgZvzXF15PnGVw=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:3a:af:32:c6:b5:5a:2b:16:e2:52:06:44:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Apr 29 17:00:32 2025 GMT
Not After : Apr 30 17:00:32 2025 GMT
Subject: CN=298eb725b64d2acd067028bb011e1f1cafa8712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:a9:97:ef:37:20:fd:6a:3c:cb:bc:79:2c:
fb:e3:f8:d8:0a:c0:3a:a5:f0:9e:e1:0a:cc:cb:69:
2a:8e:60:81:16:2c:3a:c5:9b:62:ef:5d:54:d9:64:
f9:de:c6:da:ed:aa:03:3c:99:eb:21:3f:1a:b7:08:
41:95:de:c0:3f:42:4c:89:5c:12:71:eb:5e:f5:1e:
25:23:71:8e:79:b6:89:fa:4e:0f:33:3f:bb:96:7e:
cd:a8:d8:8c:da:6d:29:8e:c4:13:0c:09:39:e6:6f:
c0:df:ff:0d:e1:1b:ea:22:d6:51:50:4c:40:69:9f:
9f:4a:51:2b:97:18:9b:f2:6f:e4:b4:e6:1b:0c:3d:
1f:a4:6d:b3:78:77:94:0d:a3:39:bc:f7:5c:4c:de:
01:86:59:7e:6e:61:a0:44:b4:b0:1d:c5:94:13:46:
95:77:04:1f:c7:12:49:04:29:a3:0b:51:d2:54:1b:
b8:28:40:3c:5b:5e:3c:04:75:79:9e:47:94:6f:26:
82:4e:53:5f:e3:2a:3d:63:4f:68:5a:ba:2d:13:d8:
49:1b:9a:9a:bb:ac:0a:dd:ae:25:a9:b6:0c:06:a2:
a4:6c:29:0f:5f:5f:77:d3:fd:e3:f1:23:3c:bf:c9:
14:be:ec:80:32:58:ff:44:60:22:df:cb:09:e7:1c:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:B7:25:B6:4D:2A:CD:06:70:28:BB:01:1E:1F:1C:AF:A8:71:2F
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c7:ae:0a:d2:2a:3c:ae:66:90:b7:cb:85:c7:6d:b1:38:44:
a9:9f:8e:c5:86:9e:b7:8a:f9:ba:92:05:61:fa:1f:80:56:8e:
e5:a7:3b:b7:19:bf:32:5d:db:dc:cc:09:df:25:27:01:5f:d9:
6d:6d:ac:82:39:9a:d4:e3:66:dd:2e:08:aa:a1:06:23:08:fa:
e7:92:2f:a2:dd:d6:a6:15:a9:5e:06:70:46:fa:d7:09:6c:d9:
68:35:fb:c9:49:66:5f:f9:4b:7d:73:c8:e1:d4:fc:b7:46:c1:
42:fb:65:67:92:3a:6c:25:04:74:fa:40:a9:97:98:0c:35:5f:
1a:55:07:c9:56:3a:31:93:ee:cb:3b:9e:8e:50:a2:42:ea:7d:
d5:b3:a8:bc:f8:b5:12:cc:d2:22:9f:a0:d3:f5:dd:8c:b9:49:
32:26:71:d1:67:79:84:03:1c:6d:14:06:7e:61:f2:6c:f0:da:
12:fe:fb:8d:51:73:41:a1:b7:54:ea:a4:c7:4a:3a:be:6b:15:
3e:4d:90:2d:28:45:cd:65:c9:2b:5b:6d:32:5f:5f:21:6f:11:
74:d4:ba:1f:6d:36:83:fc:16:63:bb:04:d7:ca:09:2b:e1:d4:
42:28:82:7b:cd:1f:71:54:f7:b1:14:62:b7:4f:db:b2:45:02:
30:49:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:59:26 2025 by rpki-client