Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: QpagdhaJ8vlY802USlI3fJaAhlkK5ahKARUJHBgrgcM=
Subject key identifier: D9:67:0F:22:11:3C:12:D5:AD:63:B2:A9:C7:2B:78:AD:94:0B:1F:33
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0198695EBE0EE48459A524F8D23B1F2E9187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 08AF
Signing time: Sat 02 Aug 2025 06:01:13 +0000
Manifest this update: Sat 02 Aug 2025 06:01:13 +0000
Manifest next update: Sun 03 Aug 2025 06:01:13 +0000
Files and hashes: 1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: 7oVHHM0+9tGX6T/iX5vhcYP+4L2FMPLpCTsZ3RA5XM8=)
3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:5e:be:0e:e4:84:59:a5:24:f8:d2:3b:1f:2e:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Aug 2 06:01:13 2025 GMT
Not After : Aug 3 06:01:13 2025 GMT
Subject: CN=d9670f22113c12d5ad63b2a9c72b78ad940b1f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:1f:84:fc:2c:3e:4e:ff:4b:a8:61:64:af:
83:ab:a0:ae:ea:9b:18:61:32:78:4d:56:51:27:8a:
56:8a:22:ac:91:64:62:4b:ce:08:1b:18:06:3f:02:
0e:6a:08:df:e9:89:ab:63:0e:4a:e5:49:c2:94:62:
04:ae:3a:cf:1a:50:78:09:3d:ad:d1:b0:c8:33:44:
33:03:1b:f2:40:ef:57:4b:56:82:7b:d4:2d:6a:6d:
25:f4:5c:f4:fe:9a:cf:c3:9d:5c:d4:f5:14:d5:61:
24:c4:50:9c:f8:89:b4:4a:b6:bf:11:61:45:27:81:
07:82:25:98:ba:58:09:c6:4d:cb:c6:c2:ab:da:ef:
1c:e5:2e:22:8b:ab:25:56:38:5a:07:a0:84:fd:16:
74:56:4a:a8:90:ee:bf:de:aa:c7:2c:1b:12:2d:c5:
51:59:96:db:ea:a9:28:41:d2:89:f0:12:5e:ba:a5:
60:fa:94:d2:39:95:eb:c3:f7:1a:4f:45:b4:98:8c:
b8:7b:f9:38:9d:e6:7f:1b:d0:a1:3d:09:15:f2:e7:
ac:a6:af:33:19:72:f0:41:04:06:7f:99:cc:fa:6d:
7e:a9:6a:0a:ad:5a:5c:d8:b6:99:c2:17:11:a1:84:
17:e1:1c:a6:d9:b0:99:01:b3:c9:96:6c:0a:92:9a:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:0F:22:11:3C:12:D5:AD:63:B2:A9:C7:2B:78:AD:94:0B:1F:33
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:b3:46:38:29:8e:8d:43:3d:80:6b:98:b6:c6:df:9b:e7:
30:4d:43:11:f5:94:f5:2d:7d:4e:a1:87:17:d2:d4:58:66:20:
6d:f1:fd:b8:06:9e:46:d7:e0:9f:c3:8a:da:09:f8:e1:1a:96:
6c:ea:4c:17:8e:89:d9:1e:65:0c:4b:db:30:87:14:1a:bb:1f:
3d:55:30:a7:ca:e8:7d:1b:a3:f4:34:13:8b:0d:af:d9:e9:7c:
e0:a6:76:95:29:48:6b:69:84:ed:72:cd:26:bf:d0:09:c4:3e:
05:7f:98:01:c1:09:34:8f:bf:4b:14:c9:34:a5:ea:9d:9d:51:
e9:f4:a7:e0:b2:86:b8:78:98:e5:4e:86:ec:f7:5c:9d:67:e0:
3f:07:c6:a4:35:7d:f4:67:b0:6c:86:2a:ca:37:70:b9:2b:ec:
1a:0a:6c:67:e6:68:7e:a6:ae:d1:07:f8:66:b5:28:76:a6:c2:
a7:41:b1:55:a4:27:2c:15:b1:0c:2a:98:33:5b:af:4f:e9:e1:
c3:89:f5:09:ba:59:4b:19:e3:12:20:db:33:72:21:94:96:21:
69:58:a1:94:f3:50:2a:90:11:ee:2d:ae:4e:98:ee:c1:1e:55:
10:d1:77:83:09:9d:88:49:52:56:84:e6:88:e1:5b:c6:35:db:
27:ab:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:05:36 2025 by rpki-client