Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: AYj9ZFJwjMv/6vs9V92HGl9FyOTXGvbljX7kURyEr4w=
Subject key identifier: 40:A4:08:10:8B:D2:61:B4:2B:FE:AB:76:D7:DF:67:7F:DE:13:F1:CC
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 01988FC7821A855071BBE189F8EBC39538B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 17:01:13 +0000
Manifest this update: Sat 09 Aug 2025 17:01:13 +0000
Manifest next update: Sun 10 Aug 2025 17:01:13 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: Qs3Tlij/eBFeP/B/yDydh2k+n6U6S9hcrEyxjHzDk/I=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:82:1a:85:50:71:bb:e1:89:f8:eb:c3:95:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Aug 9 17:01:13 2025 GMT
Not After : Aug 10 17:01:13 2025 GMT
Subject: CN=40a408108bd261b42bfeab76d7df677fde13f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:cb:18:13:0a:b3:36:d5:7a:3e:cf:15:80:
a5:23:34:4f:9a:70:39:f0:ff:12:72:e2:6c:d3:e1:
ce:94:35:41:ab:07:86:24:19:78:cd:e1:cd:f8:69:
c1:da:97:76:30:ab:e5:85:bf:0c:e8:9e:d4:8e:79:
77:03:f5:e5:49:a2:28:01:4b:8b:e9:e8:7c:a5:6c:
00:61:6f:61:91:82:15:59:a6:a6:98:8b:77:41:e3:
b1:90:df:84:1f:ea:e3:ab:95:b0:1c:d6:ba:03:25:
71:15:75:ed:6f:b5:bb:60:57:14:be:77:5f:4b:b5:
98:00:ae:52:5f:2c:4a:80:a1:fb:f5:7e:d8:dc:f0:
74:17:af:e4:9e:52:9a:f0:4d:19:da:4b:1c:86:3a:
57:e6:c7:3c:b4:e1:7b:84:8e:1b:09:24:ad:f9:ec:
bd:86:b9:94:f2:0d:08:a0:2c:85:aa:4a:42:98:bc:
b1:5d:e3:11:00:92:99:fe:a8:db:4c:bf:19:bb:33:
21:a8:bd:0a:0f:72:2b:a7:4b:e2:33:b0:6a:3c:98:
47:9e:18:94:5f:fd:25:0c:60:a7:c7:bf:fb:d3:52:
e1:df:bf:1c:7b:f6:b4:46:38:35:25:40:28:ae:55:
f1:69:81:c7:39:bc:6a:05:c8:01:cb:19:f1:c8:16:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:08:10:8B:D2:61:B4:2B:FE:AB:76:D7:DF:67:7F:DE:13:F1:CC
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:51:31:61:d5:00:77:ad:15:a0:51:18:31:cc:36:e7:62:
05:3a:2a:31:95:f4:5c:dd:b6:e9:c4:9d:55:43:18:b8:e8:3f:
d1:f2:db:3b:8c:ac:5b:e8:78:aa:ab:19:db:84:ef:0c:dc:cd:
1d:9a:29:9f:ca:14:80:a8:94:11:b2:55:f7:1d:f1:21:bb:38:
01:7f:df:e6:6e:20:d1:b2:78:81:c2:9c:ed:27:bf:be:2c:29:
00:e4:72:80:ed:a9:9a:77:7a:ff:81:6f:e2:82:a8:e6:4c:c7:
71:4a:46:fe:ce:ce:05:ce:bf:59:b7:d8:83:28:19:e7:d2:9d:
a6:92:42:43:9a:b3:c1:f0:a1:0e:06:23:bf:c8:91:01:e4:25:
db:4e:bf:43:19:ac:de:16:e2:d9:19:f5:42:c1:64:62:68:0a:
8e:3b:44:4c:9e:6d:71:22:ec:4f:d2:64:12:d4:3c:f8:6f:57:
5c:a7:47:04:3c:cb:bb:54:4f:b7:1d:c6:b9:c8:c3:38:e9:1c:
7a:d7:d0:0f:f8:52:e3:2e:cb:02:10:bb:62:c9:19:e3:d3:8a:
e5:1e:f1:9c:90:29:0a:35:b0:9a:d2:df:ea:30:ed:e5:11:36:
be:2b:61:01:fb:df:b3:48:49:9d:a2:60:5f:1d:02:39:ba:99:
96:ce:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:38 2025 by rpki-client