Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: o0KT1x0hcFa71KL+w+4R0pCRCgROiyWKXmn/cqBLCRE=
Subject key identifier: 04:FF:81:6F:92:02:B2:94:50:D5:61:0D:28:71:CE:DB:36:2D:39:E8
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 019931FF3587A72A2A2A9D0DC0276D38E784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 0518
Signing time: Wed 10 Sep 2025 05:00:32 +0000
Manifest this update: Wed 10 Sep 2025 05:00:32 +0000
Manifest next update: Thu 11 Sep 2025 05:00:32 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: fOpGc3RNI2wbXA3BsPgY858AuAMSMmoO9ODvdmrVTnI=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:35:87:a7:2a:2a:2a:9d:0d:c0:27:6d:38:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Sep 10 05:00:32 2025 GMT
Not After : Sep 11 05:00:32 2025 GMT
Subject: CN=04ff816f9202b29450d5610d2871cedb362d39e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:93:17:7a:2c:56:21:4f:0a:fe:e8:4f:f1:
b6:27:06:ee:73:ce:3c:7c:0e:8b:cb:db:b5:35:b4:
47:d2:3d:b2:fa:54:41:fb:78:9e:98:a2:ed:9a:ec:
7c:45:9b:7a:e2:49:8b:10:30:17:14:23:8b:31:f3:
94:15:df:60:c8:94:c3:c5:73:d1:2b:da:ae:65:8f:
ab:03:b0:ef:af:d4:dc:66:ba:ad:6a:03:d9:13:35:
cf:b5:c2:8b:73:f3:50:15:b6:30:12:43:bb:8d:06:
89:d8:c2:2a:e9:11:95:e0:8a:15:37:34:09:ab:7f:
72:c5:bd:32:9d:c3:4f:10:1c:95:f7:2b:de:c0:5d:
e9:da:3e:03:10:d0:45:ba:7a:94:29:2a:f4:80:3d:
78:d2:e0:33:b3:df:db:34:05:75:bd:99:73:9a:af:
35:3a:cc:65:3e:54:e3:c8:59:df:42:75:c9:5b:e7:
9d:54:b3:2e:6b:63:ae:e7:60:15:a7:de:1b:da:96:
f4:ee:60:7c:0d:bc:c8:3d:8c:58:c6:ec:5b:fb:d6:
26:07:0f:df:b6:37:e2:8a:90:f4:f7:ea:b3:82:00:
3f:24:ee:e1:c3:55:bc:fa:d6:fe:f1:47:cb:3d:6b:
32:6a:8d:21:9e:19:5e:e8:b7:c9:d7:d4:75:61:a4:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:81:6F:92:02:B2:94:50:D5:61:0D:28:71:CE:DB:36:2D:39:E8
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:01:4e:6e:39:2a:4c:b9:fd:d3:77:3c:b9:ca:b1:6a:e8:
df:9c:b2:fa:51:80:10:49:54:a1:70:24:d2:25:88:88:26:af:
93:cf:8a:1a:53:05:cf:38:3c:b9:35:88:f5:87:83:30:5f:ea:
2c:d0:0d:90:fe:98:7a:c0:0d:8b:11:62:42:ca:0d:e1:1a:f3:
49:63:16:ae:64:48:0c:63:2c:28:f7:e9:23:2f:3b:98:6b:68:
ef:6d:f9:95:04:bf:36:93:bd:ef:d0:5a:f5:cd:11:0b:e7:fa:
f8:54:bc:5e:aa:51:b0:95:b0:54:b8:48:ec:5a:bc:32:42:11:
90:df:14:9f:ab:6d:68:b2:12:d0:e2:bc:a6:20:4d:60:e7:b5:
4f:49:92:35:25:83:11:3b:11:7d:c4:27:a6:bb:5a:e5:3f:ae:
f6:3e:1b:89:02:e7:62:3a:fc:45:39:4f:47:31:f5:29:9b:bd:
4b:c5:fe:67:f7:95:f4:36:f8:aa:b1:c9:55:5b:83:da:32:6f:
99:16:ec:82:a7:28:72:7c:5f:14:42:eb:5a:f2:04:5e:d8:18:
70:af:51:4e:7e:b9:05:a2:65:ba:20:63:45:cf:5f:fa:dd:61:
6d:77:3a:83:4c:3b:11:59:2f:86:1d:ac:69:68:6e:56:0c:95:
fc:2d:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:05:04 2025 by rpki-client