Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: iQuClLWKyLhTzub/OGh65IYE0VJeo5FfgSTH4EL9SaY=
Subject key identifier: 71:3A:DF:1E:00:50:18:EE:FE:E4:AD:A5:B6:46:17:83:77:81:FE:8E
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 019846D2265641BA05E1A711C211E423916F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 10AB
Signing time: Sat 26 Jul 2025 13:00:34 +0000
Manifest this update: Sat 26 Jul 2025 13:00:34 +0000
Manifest next update: Sun 27 Jul 2025 13:00:34 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: zxGq6NX7UNOZyHZowGoYbSuujsEkEg4wZ+x6VKSEWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:26:56:41:ba:05:e1:a7:11:c2:11:e4:23:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Jul 26 13:00:34 2025 GMT
Not After : Jul 27 13:00:34 2025 GMT
Subject: CN=713adf1e005018eefee4ada5b64617837781fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:4d:1d:c7:96:29:dc:14:b6:61:23:ef:b7:
68:be:ff:a7:d7:7a:44:a3:5c:eb:e7:d9:42:bd:3b:
59:c2:18:fa:83:49:74:72:a0:08:08:e5:af:b8:2f:
65:15:c3:92:77:30:4a:bf:98:f1:e8:cb:1a:4d:26:
b1:0c:7e:36:67:11:96:b2:4b:4c:74:cb:d7:e8:65:
5a:a3:eb:40:d9:95:02:99:e2:50:9a:87:e5:3d:3b:
6e:7a:6f:3f:54:95:a0:f8:0d:2f:87:ed:5f:e3:71:
34:da:8d:7a:aa:ce:ba:83:5f:23:fb:8a:14:19:cd:
4c:0c:27:af:31:e3:12:28:d9:35:d5:a6:c9:fc:9d:
16:17:04:57:80:a5:3c:9a:9f:c5:64:92:92:4d:da:
89:ab:a7:4b:4a:a0:25:b6:7e:57:57:a1:a4:63:1b:
ff:1c:95:bf:0a:cf:70:76:ae:0c:67:a6:1e:10:7f:
ad:6b:2c:5c:8b:72:ff:b2:50:30:a3:4f:70:2b:c1:
88:c2:8b:a6:26:9e:e6:1c:ca:1f:9a:8d:7f:5b:49:
d8:a1:3d:43:e9:56:ca:49:3f:fb:5a:82:4e:10:47:
09:72:93:ad:70:a1:20:56:1a:a0:e5:42:5f:e2:cb:
15:56:97:44:01:96:01:c6:83:fc:c3:ba:5a:e1:e3:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:DF:1E:00:50:18:EE:FE:E4:AD:A5:B6:46:17:83:77:81:FE:8E
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:d4:0a:c6:b3:e2:00:4f:19:71:3b:ff:a4:05:45:2d:d4:
5e:7b:11:61:6e:1e:43:f6:eb:82:c5:7c:47:60:62:d1:7d:51:
66:5c:84:6b:2e:77:f6:3e:74:48:8f:53:ea:b0:40:96:e2:bc:
f1:7a:fc:9f:9a:65:01:b3:b4:d2:97:0b:9a:7f:dc:ff:a3:d2:
dc:65:26:6e:78:7b:c1:3b:ad:a4:a8:c1:55:b3:cf:66:b0:b7:
f2:ec:cc:0a:18:33:88:73:bc:27:00:61:02:56:55:df:ce:ec:
94:5b:ec:50:aa:19:7d:90:a4:28:41:99:3e:1c:37:60:52:0b:
c6:45:80:f4:23:08:9c:59:29:1a:14:37:9c:d9:05:6c:2d:71:
0e:43:06:ee:28:76:fd:3f:d8:8b:bb:76:47:89:48:7e:63:66:
22:ef:d9:13:05:aa:e4:88:00:cd:f0:3f:58:ae:28:88:c5:fe:
c4:a3:86:c9:2d:29:0d:e3:f5:77:a1:b9:52:5f:81:7b:0d:31:
df:d7:57:f6:ea:a7:f8:e2:28:ad:1c:cb:7e:9e:ae:ef:59:e6:
16:81:b0:e0:6f:f2:32:5f:50:96:eb:c8:b1:2d:b4:9f:d0:1e:
a5:85:7a:0d:aa:9f:35:37:fc:38:5e:da:03:5c:d1:b8:07:d4:
d3:38:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:54 2025 by rpki-client