Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json)
Hash identifier: TEK9VJWiz1JeHf7wWKE42uzvWAd5LFA2RrMzvtMhzKI=
Subject key identifier: 11:68:46:01:7E:EB:C9:E7:E2:07:CD:AD:3A:B9:3A:EB:CC:BA:06:D1
Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Certificate serial: 0198496673F002925EF9D7DA68C71A9A91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
Manifest number: 0A0D
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: h/1yh2VHGjYA5X1PETQoNVANiN/xZSUpJov9n4l+yi4=)
2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:73:f0:02:92:5e:f9:d7:da:68:c7:1a:9a:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=116846017eebc9e7e207cdad3ab93aebccba06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:14:33:72:5d:8a:47:be:08:df:13:6c:8f:
02:b9:cd:8f:75:59:14:6b:95:5e:5f:b7:a8:00:0d:
ab:26:5a:90:d3:21:15:ca:be:5a:eb:b3:5b:44:2b:
82:f3:8b:fd:de:f2:4c:ef:50:8e:d2:a3:1c:27:39:
7b:86:78:15:c9:dc:6c:51:a2:bf:86:1f:9e:97:9f:
78:5f:61:a4:19:28:2b:33:c5:0f:6d:d5:ca:43:58:
ea:3f:7b:fd:2f:68:1d:82:10:b3:49:1b:51:1a:fd:
46:0d:3c:23:72:33:5b:d9:e4:fc:6d:ed:bd:6e:9e:
09:0e:9d:e6:81:3c:6e:7f:9d:2c:9a:e4:03:ec:ad:
14:8e:96:45:65:f0:05:75:84:50:01:19:00:c0:89:
88:0c:79:3d:9e:2f:18:72:e1:e3:d1:37:ff:ca:d2:
c9:c6:77:c0:b4:93:0a:43:8b:3a:f2:64:37:81:0f:
9f:a6:91:c3:a2:c0:7a:b6:e3:0a:fd:2d:37:da:23:
57:b9:22:86:af:3b:47:a5:70:bd:28:18:d4:bc:64:
41:0a:ae:2e:d3:c9:c9:d3:bc:8c:a9:b8:d0:af:73:
17:9c:c4:1e:27:4e:71:7d:5e:fb:c5:ee:3a:29:9c:
60:de:11:55:35:99:6b:fb:ea:dd:4e:28:72:b7:fd:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:46:01:7E:EB:C9:E7:E2:07:CD:AD:3A:B9:3A:EB:CC:BA:06:D1
X509v3 Authority Key Identifier:
keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:85:75:3b:91:ba:96:a0:cc:ea:53:1f:3e:46:6c:d5:dc:
cf:99:17:81:c0:23:e8:e5:ba:6d:fe:20:a4:aa:6f:9b:2e:9f:
1a:26:5c:1d:44:3c:d9:96:87:5f:bc:21:27:ea:f1:e6:c8:0e:
db:7c:70:e1:d1:16:58:71:ae:5f:c5:05:42:ce:b0:cd:d7:43:
b6:ee:e0:40:67:56:3a:b4:e7:17:79:c7:2f:91:6c:b0:76:fe:
ac:12:06:67:57:99:36:67:e3:98:74:8f:ed:45:92:68:13:ec:
49:4b:9e:31:72:21:f6:4d:9c:0c:63:11:e8:b4:d5:d9:d1:ff:
00:15:da:56:17:0e:00:9a:91:af:4a:af:2f:cb:1d:73:e7:bf:
2f:69:05:ed:3a:dc:e4:d5:78:da:e2:24:63:62:b8:e4:1b:ab:
df:12:97:d3:06:61:36:b7:dc:fe:10:13:78:72:9d:bf:7d:c4:
8c:af:92:06:70:c7:cd:a5:a5:ab:b7:ee:15:68:38:27:fc:71:
31:f2:d9:2e:6a:16:a7:28:af:fd:bd:bf:df:dc:1b:cd:39:c5:
13:b2:ce:d2:0e:02:84:d3:50:7a:29:2f:0a:85:5f:97:80:cf:
51:8f:ef:c7:75:3f:25:07:0d:19:86:64:11:92:d7:96:ad:9f:
e8:cc:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:09 2025 by rpki-client