Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: GichTgo/71WqgS+vBwoY5mKKmNmL3weliHbCVQ9rAT0=
Subject key identifier: 3A:1D:EC:3B:2C:91:5A:96:B2:D2:3A:2A:61:42:0A:92:A9:4A:E6:9A
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 01976D3D5CD3CACAD9209F5D238C66966808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0DF6
Signing time: Sat 14 Jun 2025 07:00:27 +0000
Manifest this update: Sat 14 Jun 2025 07:00:27 +0000
Manifest next update: Sun 15 Jun 2025 07:00:27 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: SI0haRJxQuued3qmT7hcmnEWATarrP5B88vdkar37R8=)
2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:5c:d3:ca:ca:d9:20:9f:5d:23:8c:66:96:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Jun 14 07:00:27 2025 GMT
Not After : Jun 15 07:00:27 2025 GMT
Subject: CN=3a1dec3b2c915a96b2d23a2a61420a92a94ae69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:00:44:fb:93:03:40:d5:61:ae:09:5c:08:
d0:ad:7c:31:b3:56:d4:16:34:d7:84:87:b8:fb:74:
08:82:45:fc:e2:9c:d6:ae:8c:69:5a:80:d6:2c:cb:
74:9b:d4:c5:5b:fb:d0:eb:97:70:e0:5d:42:52:81:
72:40:c4:bb:31:c7:16:46:41:47:12:c7:7b:67:4d:
68:cb:48:39:fc:6a:1f:5c:d8:ba:88:3a:38:89:3c:
3a:4e:78:39:9c:f9:f0:3c:a8:3b:d2:44:d2:6c:74:
a6:1d:ff:72:00:ac:23:0f:30:2d:77:e5:b0:77:b2:
7c:c0:bb:0f:e0:7e:d7:b2:8c:3f:ca:d5:6a:91:dd:
19:b3:65:e0:90:06:bc:5d:9d:44:9f:36:0c:a8:7a:
50:f2:6f:df:2a:a9:fb:be:5f:07:c3:c3:f7:a0:f4:
1e:af:6c:e9:88:99:91:a2:81:6a:f1:96:33:57:bd:
df:97:93:5f:29:e1:70:47:bf:01:0c:0d:69:13:46:
00:40:f9:27:4e:64:6e:40:23:33:f2:7f:6a:9f:47:
01:b8:4b:69:e0:0c:ab:32:81:0b:d2:5c:62:1b:ba:
53:d4:78:ae:dd:0e:bc:17:7e:ce:09:42:d8:69:cb:
03:42:af:9a:f4:5d:a0:ee:da:83:1b:4d:cc:56:34:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:EC:3B:2C:91:5A:96:B2:D2:3A:2A:61:42:0A:92:A9:4A:E6:9A
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:43:6d:be:ba:df:87:82:cf:5b:42:f0:3a:2b:c1:32:35:
ba:f0:89:33:69:1d:3e:8d:ff:8d:3d:c9:c3:5c:74:0f:d2:22:
ff:a7:2a:ce:44:c0:bf:54:e3:67:ec:c7:df:b6:52:ba:d9:f4:
4e:c8:3d:eb:46:06:83:42:3d:f8:f3:ac:4f:27:d7:7e:94:ee:
16:c0:bc:9b:c9:b2:86:29:4b:9f:82:ed:ed:eb:a4:0c:58:3a:
6b:1b:1c:56:0a:8e:93:72:0f:09:ec:27:a0:a7:68:08:05:77:
d6:b3:f9:f6:01:78:0a:1f:0a:76:87:9d:5d:c0:91:cf:f9:41:
c6:74:b4:bd:9f:a9:65:6a:b0:e7:77:17:a4:ee:47:1c:7a:67:
46:03:b4:8c:df:73:ca:8b:08:64:a4:44:db:14:77:91:8b:c6:
26:ed:38:df:e2:b9:26:f8:d4:87:32:92:d5:49:2d:75:6b:28:
8a:5f:11:54:a9:92:f9:03:7e:26:89:91:44:76:4e:9f:c8:ad:
76:4b:01:a0:d6:d6:3e:d1:da:8d:06:49:e6:c8:59:ed:d0:66:
12:a1:6a:10:63:a3:49:75:c3:13:c2:1f:ef:39:10:68:6c:f8:
32:81:97:d7:aa:ac:62:36:f6:d3:72:07:a3:bf:04:15:a0:81:
3e:7a:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:00:32 2025 by rpki-client