Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: abVyUqeRHq8tKKr7A37ngV8V99WY3wAx23pMg6SXKZA=
Subject key identifier: A2:6D:DB:7A:FB:70:39:BC:B0:55:8C:B6:53:E1:CE:46:DC:C9:57:2D
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01963D2F5E9F6A5AD63AEF2A216A5947A70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 11DD
Signing time: Wed 16 Apr 2025 06:00:36 +0000
Manifest this update: Wed 16 Apr 2025 06:00:36 +0000
Manifest next update: Thu 17 Apr 2025 06:00:36 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: mBZXAt6XI1hUfD7WyLfCpm5e0f6fou9ujybhfgBsoDw=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2f:5e:9f:6a:5a:d6:3a:ef:2a:21:6a:59:47:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Apr 16 06:00:36 2025 GMT
Not After : Apr 17 06:00:36 2025 GMT
Subject: CN=a26ddb7afb7039bcb0558cb653e1ce46dcc9572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:f2:81:53:0a:de:34:f1:d7:c0:66:e1:5a:
fd:b5:a6:bd:2e:aa:98:21:b9:2e:1d:a1:5a:8d:a9:
6a:84:43:98:1c:44:f7:2e:bb:cb:b8:40:f9:a7:aa:
80:ef:70:23:80:4e:0e:a9:1e:8a:58:47:01:41:20:
15:c0:40:ec:84:67:26:84:0c:80:04:6a:59:67:6c:
54:29:c1:b0:57:4b:d5:d3:64:cf:45:00:fc:29:da:
5a:d6:5d:01:36:ee:ce:d4:19:f4:2f:bb:f2:5b:fd:
ee:0c:06:1e:38:ef:f8:06:c5:d3:9d:84:b4:24:75:
24:47:21:29:a6:16:bd:1a:e4:3f:e4:d1:1d:86:f6:
a7:a3:ca:e8:a9:32:d9:6c:bd:06:a0:cc:b3:a8:ee:
3c:b7:67:68:fe:8f:d1:64:68:2b:66:2c:3b:6d:9a:
cf:9a:9c:21:3a:c8:80:4a:5a:29:f3:4d:cd:d1:91:
81:c5:18:bd:4f:a4:a9:11:36:b0:93:bb:04:f6:29:
a9:56:f3:84:d6:4d:f0:c2:5e:40:8c:31:89:fe:89:
b5:62:3a:bb:fa:cd:81:a6:d2:ec:f8:c4:e9:94:cc:
51:43:dd:ed:d0:97:28:78:56:b1:16:be:c3:cb:73:
a3:0a:cf:dc:69:38:ca:a8:3e:3d:19:f9:f6:73:d3:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:DB:7A:FB:70:39:BC:B0:55:8C:B6:53:E1:CE:46:DC:C9:57:2D
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8e:6a:90:84:ac:2d:15:a8:61:48:1a:d8:63:80:72:c5:46:
5e:ca:1f:fd:2a:db:f5:c0:bb:5b:9e:d9:cd:f6:d7:a5:42:9f:
db:e2:f1:58:4b:5c:a6:04:c7:cf:f8:c6:18:24:3f:d2:71:4c:
f1:9e:90:7d:a9:85:b5:0e:f7:29:40:65:0e:68:a2:a7:04:20:
0c:6f:1c:7d:50:49:d4:ff:e5:60:9a:68:b0:85:b7:32:27:7a:
1c:08:40:7a:73:c0:fe:58:ca:60:12:c6:69:f2:70:e6:77:44:
68:37:79:df:3c:b0:77:39:18:02:a8:ee:63:80:7d:d7:69:88:
4f:43:22:ca:56:83:62:00:e5:44:0d:85:54:f3:06:21:f0:9f:
14:ea:d7:22:7e:8d:c7:31:82:70:ce:df:c5:37:dc:d7:96:7d:
e1:86:71:ff:b1:27:13:fb:86:2d:2f:34:19:10:7c:f9:96:b9:
a8:17:cc:fc:34:a6:54:a7:db:a8:54:02:6d:8f:08:1b:3a:e3:
26:99:1a:7c:2a:cf:bc:04:7d:f7:19:9b:ad:8e:e2:11:33:24:
8b:0a:07:6d:ec:6e:9a:c3:4e:13:5e:58:90:ee:9d:33:31:fd:
a0:e4:57:ba:b4:70:2c:84:6f:15:4e:6b:88:84:36:52:d3:1d:
e3:76:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:23:28 2025 by rpki-client