Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: A+HVQR8A+s2mkEmc61EFOqpzUQ5I5v1tcJGrlznQvyA=
Subject key identifier: 47:33:0B:93:C0:8F:CB:F7:43:D4:95:B9:00:0C:F7:EA:BF:62:5E:0A
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 01984A412AAD30121CDD66CCAD90309C5316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:00:41 +0000
Manifest this update: Sun 27 Jul 2025 05:00:41 +0000
Manifest next update: Mon 28 Jul 2025 05:00:41 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: h2i92JQPy8HFVEuD5zQUCe0IlttrNYtnP1tlwG7PfqU=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:2a:ad:30:12:1c:dd:66:cc:ad:90:30:9c:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jul 27 05:00:41 2025 GMT
Not After : Jul 28 05:00:41 2025 GMT
Subject: CN=47330b93c08fcbf743d495b9000cf7eabf625e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:df:84:27:22:a9:56:b1:cc:7b:e1:dd:3a:25:
3c:34:e0:8d:96:f6:f5:cf:d9:83:5c:aa:c5:2c:e1:
5a:29:7a:6f:45:6a:6d:34:5a:50:f0:35:38:81:42:
dd:9a:15:49:da:91:92:41:b0:1b:34:9f:28:57:df:
ad:af:d1:6c:86:61:4a:0a:ca:79:2d:62:e2:c1:98:
24:f9:6c:9e:3d:bd:94:5a:56:b8:f1:17:7d:fe:84:
73:ef:80:c3:ae:3f:a4:03:be:e4:5e:e0:23:c9:91:
e0:d5:27:6d:7a:6e:4a:88:ef:5c:82:d8:2d:fb:4b:
f6:71:83:3f:90:2f:0d:32:6f:65:b9:8d:de:cd:13:
f8:95:16:fa:2f:5a:26:bf:ce:9b:b5:a2:e2:7b:9f:
b4:51:03:35:41:d5:e3:e4:2e:ee:d5:ef:fd:db:3f:
1c:12:c7:20:64:d0:0e:8f:e5:c6:99:46:0b:dd:f8:
06:61:31:89:40:a8:6d:79:f8:9b:3b:5c:01:6a:b4:
ca:c6:70:2b:c0:50:11:0a:f3:12:ed:3b:47:77:42:
63:fe:04:aa:47:83:1a:00:4e:45:e5:f7:80:bf:0d:
e5:36:6a:4b:1c:6b:36:00:c8:a9:9c:46:5f:d3:af:
47:75:df:9b:2b:c9:55:45:dc:24:82:0e:fa:9e:20:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:0B:93:C0:8F:CB:F7:43:D4:95:B9:00:0C:F7:EA:BF:62:5E:0A
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:11:fc:bf:6e:a8:8d:8e:c3:be:15:a4:c8:13:24:e0:f6:
3f:7b:8a:d2:4b:de:d2:c5:0f:11:25:16:43:59:c6:b8:f0:b4:
5e:4c:51:f9:4f:e9:65:35:c2:e9:ef:8f:c6:28:c4:b6:e0:1a:
27:51:a4:67:f1:c2:27:32:ef:98:fa:88:16:ea:0e:41:04:47:
72:b9:ed:dd:cf:24:95:bf:10:e5:c0:a7:23:22:21:ca:2f:fc:
4e:26:b6:e8:8d:00:bf:5f:0f:7c:18:85:76:83:40:18:c4:56:
4b:ea:07:ef:1e:11:1f:18:8c:28:8f:61:01:6d:00:5f:8f:bc:
39:1a:20:a5:1d:61:13:9b:36:a2:1a:56:b7:45:91:93:67:c8:
06:82:c7:02:6d:b9:2a:c1:b9:94:98:92:ec:0a:d5:6f:45:3a:
9b:54:a7:5c:81:e3:fd:18:ee:2a:13:b2:ca:71:0f:17:cd:fc:
6e:f5:e3:58:42:9f:f5:7a:83:74:60:1e:6b:53:db:3d:56:14:
ed:dc:df:63:9e:c0:18:42:49:02:fb:2b:95:5a:44:66:0b:72:
3d:d6:7e:83:b5:28:48:b5:9d:8a:33:7a:c6:99:41:c3:2e:fe:
b8:5a:91:34:5d:5e:c4:02:31:d6:15:03:7c:d2:ee:17:72:81:
6d:e9:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:44:11 2025 by rpki-client