Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: lA76I6G+Yl9MvR/kmEZMZzenDmlcNXKbtdmU3lHWgac=
Subject key identifier: 2E:DE:5D:CE:24:68:2A:0C:94:49:1A:39:A5:13:60:11:FC:2B:D0:2D
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 01986C287BEA5EDE8B6D3C4A6072999253D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0E7A
Signing time: Sat 02 Aug 2025 19:00:49 +0000
Manifest this update: Sat 02 Aug 2025 19:00:49 +0000
Manifest next update: Sun 03 Aug 2025 19:00:49 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: GfqdyS3oDp+Ccq1spvHGO5qyNLSQSL1ETQUqmI+AEc4=)
2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6c:28:7b:ea:5e:de:8b:6d:3c:4a:60:72:99:92:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Aug 2 19:00:49 2025 GMT
Not After : Aug 3 19:00:49 2025 GMT
Subject: CN=2ede5dce24682a0c94491a39a5136011fc2bd02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:a3:f1:01:90:cc:60:52:27:51:8c:ed:9c:
ff:1d:2d:d5:61:9e:f6:dc:5e:8a:2a:e3:36:36:3c:
be:0c:2c:c0:91:57:4c:f3:30:b1:df:c3:f8:b9:cf:
cd:b3:40:b8:c2:5b:ff:70:6b:98:81:37:10:e5:08:
46:93:c0:7c:06:18:52:d4:d2:cb:3c:ce:87:28:f2:
a6:bd:9b:20:01:bc:fc:7a:90:59:e2:ef:57:ad:4d:
72:9b:41:a7:d0:6b:52:c1:7c:d9:c3:ae:4f:c8:26:
c7:aa:28:fd:72:20:f5:1d:28:57:a3:55:a5:83:c1:
d3:54:b0:a2:b5:6d:a3:7f:84:67:df:bf:38:78:5e:
46:0b:91:a4:a6:98:6f:c7:3b:4a:47:e8:ee:0a:3c:
16:02:22:e4:6b:06:b8:69:82:40:0c:9d:2d:87:9f:
6a:05:83:4f:a7:00:d8:5d:c7:7d:30:2a:93:88:c6:
e3:54:2f:f5:dc:36:4d:34:87:af:59:03:1f:b9:19:
f6:20:81:e2:e0:8d:bb:17:fe:16:1c:49:b6:5e:fa:
d4:3e:34:2d:ad:a8:a0:25:46:30:99:c5:6b:88:9d:
e6:2d:cc:de:20:b1:fb:3a:fc:97:20:04:11:a4:e0:
01:7c:e8:29:e5:82:1e:56:bc:e4:a1:cb:87:34:5b:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:5D:CE:24:68:2A:0C:94:49:1A:39:A5:13:60:11:FC:2B:D0:2D
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ec:4d:92:0a:3f:88:ba:c9:a1:86:84:59:ad:a9:1c:45:f5:
65:76:dd:ad:83:a4:0d:06:22:d9:43:05:de:31:e0:64:d3:dc:
5d:25:89:61:04:c3:72:fa:6d:26:5b:e4:f8:cb:e6:ed:b9:e2:
c5:67:ab:13:9a:2b:8e:09:6f:c0:19:cd:78:36:11:97:83:91:
e4:d1:2d:31:79:31:67:3a:03:94:fa:f4:b4:5b:a7:31:b4:ba:
59:31:97:81:ad:dc:4f:05:68:4a:aa:f8:e3:c6:d6:c6:3c:51:
87:b0:fb:ce:42:39:7b:76:28:88:88:2b:ea:0f:f8:41:6e:04:
64:d1:6e:c8:49:ef:c7:a9:a4:bd:f9:9a:b9:9e:eb:93:2e:f9:
92:12:60:a3:83:dc:de:80:1c:75:f7:f8:0c:c4:7c:1b:aa:d7:
f3:36:68:27:8e:7c:70:75:e0:c7:14:d3:e8:bd:b5:38:4d:b2:
97:13:cd:5b:a9:a5:35:9a:a1:aa:6c:74:c2:9f:a2:0b:6e:a7:
e5:b7:cf:3b:78:4d:18:17:ba:ad:e5:98:f1:b3:fc:ae:7d:ed:
85:16:2a:c6:92:c3:6b:5c:29:70:0a:b6:44:a0:d3:34:3d:cc:
71:68:77:92:e1:ae:5d:76:9f:8e:16:30:32:b9:f9:7e:44:b1:
29:5e:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:49:17 2025 by rpki-client