
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: 36UGAWyfr79lRL7lz28sVAWvp0GHEFW7/UtXQ/JrFuk=
Subject key identifier: 6F:F7:0C:04:4D:59:BA:CE:55:E3:66:4A:93:6C:65:1A:A4:4D:3C:7D
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 01974FA106AECFA77F0BF597948E7B8518C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 102B
Signing time: Sun 08 Jun 2025 13:00:42 +0000
Manifest this update: Sun 08 Jun 2025 13:00:42 +0000
Manifest next update: Mon 09 Jun 2025 13:00:42 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: m2CVKKTc6fxZ913+fhsvWftUAs0qPzzbfep5acAjbCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:06:ae:cf:a7:7f:0b:f5:97:94:8e:7b:85:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Jun 8 13:00:42 2025 GMT
Not After : Jun 9 13:00:42 2025 GMT
Subject: CN=6ff70c044d59bace55e3664a936c651aa44d3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:cd:e1:29:9f:80:51:95:09:5b:72:b3:f6:
5a:d1:f7:52:cd:98:5c:7a:f7:6f:d1:9d:67:f6:51:
0e:f8:ea:6b:24:96:db:0e:40:8d:05:9b:d6:6e:9b:
f6:6e:f6:3c:90:3f:0c:78:17:f4:b0:b0:0e:62:d4:
f1:98:d4:36:fe:59:4e:d5:38:25:b8:16:10:a9:df:
6a:20:33:5c:56:50:f0:76:be:b6:59:80:23:e1:46:
6b:25:d7:60:b3:a0:ef:7d:5e:35:bf:36:69:b4:29:
cb:36:b8:22:99:fa:4d:5a:e9:21:52:18:62:ef:30:
7b:ed:74:61:2d:3b:5b:ab:60:b8:99:06:2c:5e:07:
1b:f7:c6:61:a3:53:6a:99:29:05:c2:27:cc:29:24:
17:e3:7f:58:ac:5b:6c:88:ff:e2:69:9b:02:fe:58:
c1:a3:ce:20:1d:fa:af:f6:0c:4e:34:c3:8f:41:04:
57:fe:04:24:e8:75:60:b4:ca:e9:5a:c8:9e:b2:16:
86:d3:6c:4d:de:8f:7a:4c:ca:3c:8f:12:c8:2e:8f:
23:aa:52:3b:f7:e3:01:a5:10:db:6b:af:09:1e:43:
52:a5:5f:d3:42:7d:ef:ee:87:e6:9a:0a:c6:96:dd:
69:c5:cd:fa:3a:2c:b4:cc:46:05:d3:37:4a:91:53:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:0C:04:4D:59:BA:CE:55:E3:66:4A:93:6C:65:1A:A4:4D:3C:7D
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:cc:4c:e8:5e:44:ff:71:71:9b:0b:33:c4:a7:42:ca:63:
5c:59:0c:b1:69:fd:9f:20:f3:af:9b:ff:e8:a0:ea:44:66:58:
13:85:a1:ef:b2:74:73:6d:94:af:8d:82:85:10:30:ad:9d:bb:
33:39:6b:ab:fd:e5:c0:3f:0a:18:8c:53:f6:42:bb:0d:e0:c1:
e4:1d:89:78:1d:17:7b:d1:e4:96:b7:75:2d:f9:e8:51:8c:bb:
da:bc:74:51:71:95:d6:89:8d:2f:9c:db:42:7e:e5:a2:b2:ef:
05:fd:9c:56:01:5a:ba:55:46:80:af:b9:5e:bb:ea:b7:a3:39:
b8:f4:ba:a1:f4:5a:5b:42:5b:1b:bc:1f:32:d8:b6:65:62:9d:
93:e0:dc:18:cd:f4:f9:f0:fb:2f:10:32:8e:bf:5c:2b:05:cd:
71:cb:ca:45:a8:c1:dd:66:9a:4c:a0:25:3f:1c:19:3f:c4:d5:
3c:fa:12:b2:9d:61:89:f7:3a:ab:82:4f:21:a5:6e:1c:ab:74:
66:c1:96:ac:dc:52:17:1f:ef:a5:10:0a:2c:82:20:a3:08:78:
c7:ec:4e:26:06:b5:12:b7:33:6e:92:e4:d6:af:5c:11:bb:89:
fe:a7:a6:34:d7:4c:ab:9d:03:5a:e3:1f:6c:ea:44:04:9a:3b:
a2:76:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:06:05 2025 by rpki-client