Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: W9aBOHIuIYj92o46ztCwSrB7jYKWaeD2BEk3ZYv4GjM=
Subject key identifier: 8C:67:77:FE:E4:0C:E6:26:1C:5C:86:FE:58:23:F7:28:9F:D5:1B:A1
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019655DD29647A668121A8A5AE4FB6235C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 088E
Signing time: Mon 21 Apr 2025 01:01:19 +0000
Manifest this update: Mon 21 Apr 2025 01:01:19 +0000
Manifest next update: Tue 22 Apr 2025 01:01:19 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: /RkKVLJ8yxbM7mjDRevUs6Inn6+xNFpBqjDdbl9NAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:29:64:7a:66:81:21:a8:a5:ae:4f:b6:23:5c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Apr 21 01:01:19 2025 GMT
Not After : Apr 22 01:01:19 2025 GMT
Subject: CN=8c6777fee40ce6261c5c86fe5823f7289fd51ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:3d:15:25:35:84:23:1d:89:03:08:e5:27:
fb:82:64:32:78:b9:55:cb:ad:a0:5e:3b:35:76:94:
95:42:98:0c:a7:03:47:92:f2:30:82:dd:6d:96:80:
22:bc:44:5c:64:c7:42:ca:74:e4:44:0a:16:78:ce:
44:64:f0:75:f9:5f:6f:bd:e4:b0:9e:be:a3:80:bd:
0a:05:98:a4:fc:2c:cc:fc:54:fd:75:3a:f2:7c:94:
4f:df:a7:32:7f:b9:25:c8:92:dc:02:c6:c9:7a:47:
0b:ae:eb:ec:d5:e6:63:11:c2:96:ee:9e:c5:8f:83:
44:53:70:8b:9b:e7:96:f7:d4:04:29:f1:d9:2a:1e:
92:48:97:14:91:75:51:db:94:e4:10:91:0b:cd:9f:
c5:2f:36:a7:0c:51:cb:2e:5f:6c:ad:61:e8:45:45:
6c:df:ed:48:bf:97:cc:93:5a:d4:b3:51:7c:4f:b9:
98:12:e7:9c:53:74:ea:ff:86:73:ed:b6:3a:31:77:
67:70:a4:c9:a4:0d:d3:b2:b7:52:6c:21:7b:15:fc:
f7:a7:04:a3:08:ec:1e:4b:ec:be:49:9b:c6:32:5d:
40:f9:34:d2:a9:25:49:17:88:0b:da:66:59:a7:d0:
9c:2c:c9:6c:5b:1c:18:b9:43:c7:df:8a:cd:50:3e:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:77:FE:E4:0C:E6:26:1C:5C:86:FE:58:23:F7:28:9F:D5:1B:A1
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7c:b3:b9:3c:0a:9f:ac:8c:22:74:5d:ff:1e:64:ff:d3:84:
c9:04:4e:8d:84:27:a7:76:95:08:8c:60:2f:ec:cb:b8:44:76:
dc:74:28:dc:b8:c1:5b:a3:f6:45:ea:ee:b3:ac:b2:9d:00:d2:
a1:e6:a2:43:06:95:91:27:0b:55:c1:4d:d6:1f:12:49:72:59:
44:1b:d2:79:63:fd:d1:e5:3a:8c:91:51:4e:64:73:db:b2:7d:
94:bb:71:be:15:0b:a3:a7:35:81:69:d7:ac:14:e8:be:e6:c3:
8c:a2:4c:73:e8:6c:be:cd:09:f7:36:0d:1f:9a:db:b1:f5:89:
dd:48:13:bc:12:81:a5:b6:30:8e:73:b8:60:f6:ee:f7:24:14:
2a:b6:33:4c:26:07:9e:ec:a4:51:c6:bf:b6:72:fe:50:fa:34:
a6:a3:9e:6e:e9:2c:f1:96:4a:a8:99:eb:2b:b3:40:5a:f4:64:
0f:91:3a:e2:4c:d2:7c:4d:f4:e3:67:7c:22:36:67:54:7d:c5:
62:60:5b:60:f4:30:3c:91:89:1d:89:66:62:91:aa:24:41:9d:
2a:6d:fa:b2:e6:93:c0:e4:26:06:1f:b8:a3:5a:d4:b2:c2:09:
d0:37:4f:ed:ba:91:61:e2:bd:89:e1:b6:fd:fa:62:a5:cf:6e:
5e:cc:00:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3SlkemaBIailrk+2I1xSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjUwNDIxMDEwMTE5WhcNMjUwNDIyMDEwMTE5WjAzMTEwLwYDVQQD
Eyg4YzY3NzdmZWU0MGNlNjI2MWM1Yzg2ZmU1ODIzZjcyODlmZDUxYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO09FSU1hCMdiQMI5Sf7gmQyeLlV
y62gXjs1dpSVQpgMpwNHkvIwgt1tloAivERcZMdCynTkRAoWeM5EZPB1+V9vveSw
nr6jgL0KBZik/CzM/FT9dTryfJRP36cyf7klyJLcAsbJekcLruvs1eZjEcKW7p7F
j4NEU3CLm+eW99QEKfHZKh6SSJcUkXVR25TkEJELzZ/FLzanDFHLLl9srWHoRUVs
3+1Iv5fMk1rUs1F8T7mYEuecU3Tq/4Zz7bY6MXdncKTJpA3TsrdSbCF7Ffz3pwSj
COweS+y+SZvGMl1A+TTSqSVJF4gL2mZZp9CcLMlsWxwYuUPH34rNUD7dCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxnd/7kDOYmHFyG/lgj9yif1RuhMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHyzuTwK
n6yMInRd/x5k/9OEyQROjYQnp3aVCIxgL+zLuER23HQo3LjBW6P2Rerus6yynQDS
oeaiQwaVkScLVcFN1h8SSXJZRBvSeWP90eU6jJFRTmRz27J9lLtxvhULo6c1gWnX
rBTovubDjKJMc+hsvs0J9zYNH5rbsfWJ3UgTvBKBpbYwjnO4YPbu9yQUKrYzTCYH
nuykUca/tnL+UPo0pqOebuks8ZZKqJnrK7NAWvRkD5E64kzSfE3042d8IjZnVH3F
YmBbYPQwPJGJHYlmYpGqJEGdKm36suaTwOQmBh+4o1rUssIJ0DdP7bqRYeK9ieG2
/fpipc9uXswAFg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:26 2025 by rpki-client