Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: nIdburFv7J9OKCjns0Ao6eXPu0tsPsX4NkEqZU0t4Ps=
Subject key identifier: 3B:B4:19:C9:7D:79:E4:B5:0B:48:F8:DA:1A:80:80:32:AA:EA:2E:EC
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 019838DF9732F9BCB29D2C8A0669BD045274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 146B
Signing time: Wed 23 Jul 2025 20:00:34 +0000
Manifest this update: Wed 23 Jul 2025 20:00:34 +0000
Manifest next update: Thu 24 Jul 2025 20:00:34 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: gSOIDIM3V7Uf6UAW5y/l4iiKoqJH41Vip21WCtfx1l4=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:97:32:f9:bc:b2:9d:2c:8a:06:69:bd:04:52:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: Jul 23 20:00:34 2025 GMT
Not After : Jul 24 20:00:34 2025 GMT
Subject: CN=3bb419c97d79e4b50b48f8da1a808032aaea2eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:b3:7c:a1:06:e7:a2:c1:e9:cc:c4:81:b2:
f5:25:08:17:1a:26:5b:f1:00:d6:8f:90:07:f5:4f:
7f:09:68:c0:7a:86:61:ff:1f:85:77:27:87:da:5b:
f2:b3:de:5e:3d:21:2d:7c:6e:4a:b8:f9:bf:a4:8b:
aa:56:fa:28:bd:66:09:2a:8b:f9:1d:a9:b2:fc:18:
45:2f:6e:75:f8:d3:ab:1e:03:d3:90:f5:31:b5:a5:
3c:9b:d0:b3:eb:08:07:84:e5:c7:7e:30:3f:9f:9f:
65:65:07:07:06:21:ec:c2:02:e3:68:6b:70:bd:3c:
2b:2e:48:5d:ce:7c:e3:dc:70:7b:eb:39:a1:76:e3:
08:4b:4d:04:e2:1d:02:a1:d2:91:0b:2f:bb:00:79:
e1:25:0b:90:28:67:d1:d4:3c:bc:ba:28:8c:aa:7a:
01:db:d1:81:45:57:71:35:f7:25:4a:20:b8:53:38:
a4:53:f6:b2:60:ee:8c:6f:d7:5a:6b:0b:15:13:f0:
6f:e5:65:1a:3f:3e:86:ca:1a:2a:21:d7:d4:c5:45:
6c:e7:65:15:be:99:50:fd:95:a1:6b:2c:3c:85:41:
81:4b:e1:50:ac:9f:89:a9:9e:62:8e:7e:bf:15:11:
86:e7:58:2c:f5:a8:1a:1a:cf:d4:27:20:79:ff:2b:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:19:C9:7D:79:E4:B5:0B:48:F8:DA:1A:80:80:32:AA:EA:2E:EC
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:61:cf:e2:2d:86:85:14:9f:ac:d0:8b:7d:84:4c:fa:83:
cc:bb:5b:6a:4f:ac:1b:3f:88:70:b1:24:33:c0:59:b7:f3:16:
a9:a3:bf:f8:94:ac:ea:ff:8a:c9:f6:13:7b:76:6e:70:e9:e6:
6a:ac:7c:f1:7e:79:c1:99:ad:a7:27:b4:02:00:d4:4b:83:26:
c2:91:f0:93:ec:56:2f:71:65:33:75:71:ca:75:c4:8c:ba:3e:
00:3b:d9:3d:57:a3:af:b9:c6:10:8a:93:12:d4:69:20:4c:69:
18:79:c5:1e:da:51:cb:5f:b7:50:c8:a0:3d:96:ec:9d:a2:cd:
17:55:4e:b5:6e:83:9a:6b:09:fc:f1:34:1d:66:20:e2:16:5d:
c7:a6:fe:6d:bd:82:88:37:7a:2b:2f:45:31:2d:09:55:62:f3:
71:dd:de:65:9c:8f:6a:16:7f:0f:01:38:10:e5:0d:2e:fd:b4:
76:7e:36:f5:20:31:dd:7f:52:a8:11:31:91:6d:ef:1e:78:fe:
58:19:c0:c3:1a:63:ef:83:06:86:8d:92:49:43:78:51:35:45:
64:10:b7:bb:01:08:e1:fe:98:10:1d:34:41:5d:e0:41:8d:51:
91:92:0b:a7:6b:a8:52:ac:4d:ed:5d:10:68:61:99:de:2f:d7:
f4:0e:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:58:16 2025 by rpki-client