Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: F2QVOuQFcepBL7TyqM3XRJLfNcDp97oezLirx8OYz6g=
Subject key identifier: AB:CE:4E:8C:C7:72:B3:BA:AA:40:64:BF:1F:6A:85:31:7F:E9:C4:ED
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 01964744D0D90B842A6D7E1A8CA923CFC743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 05:00:14 +0000
Manifest this update: Fri 18 Apr 2025 05:00:14 +0000
Manifest next update: Sat 19 Apr 2025 05:00:14 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: QU/c81ZHgmOwmfT25hty5n1IuPjce58QIXl9gim9Hic=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:44:d0:d9:0b:84:2a:6d:7e:1a:8c:a9:23:cf:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Apr 18 05:00:14 2025 GMT
Not After : Apr 19 05:00:14 2025 GMT
Subject: CN=abce4e8cc772b3baaa4064bf1f6a85317fe9c4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:63:1c:ba:09:2c:ab:83:c1:ed:16:05:4d:
1f:c6:1c:59:b8:56:15:d3:e9:73:11:52:77:0c:be:
59:1f:92:3c:ba:d6:54:b3:bd:1a:43:48:7d:b6:d5:
07:90:f9:c1:40:88:16:37:64:64:32:6c:f9:c9:80:
23:70:70:e8:d1:88:cf:8e:d0:5c:08:74:a4:20:d5:
68:18:7e:9d:9a:90:39:58:8a:1d:73:34:9d:bd:25:
dc:4f:ea:92:d3:ba:0b:00:27:49:65:78:96:c1:99:
3a:c0:2f:11:ff:aa:54:34:3c:b7:a0:88:ab:61:b1:
c8:51:98:c7:15:72:4a:8b:a2:3f:61:ef:f1:ad:54:
89:39:54:23:eb:92:75:4a:c8:b8:05:79:09:92:37:
ef:d8:a6:a7:18:dc:13:66:8b:52:10:68:eb:cb:b8:
12:51:23:22:b6:fc:52:8d:b6:01:82:41:63:b4:6c:
b8:b1:31:90:83:c2:b2:95:60:b6:f3:ac:d7:b8:3d:
6d:21:52:19:69:7f:8d:17:a0:84:d0:15:67:d7:a9:
7d:a9:c8:a0:aa:b2:8e:aa:5a:6f:63:bc:a4:e5:25:
8e:42:f1:95:74:1a:52:ec:72:0c:44:a5:53:38:3b:
2e:8f:cf:78:8a:12:11:2b:b1:86:23:62:27:dc:49:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:4E:8C:C7:72:B3:BA:AA:40:64:BF:1F:6A:85:31:7F:E9:C4:ED
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:a6:58:90:9b:7b:57:40:91:93:a4:2f:27:ac:3d:8d:36:
b2:97:13:c2:db:2c:51:4b:cc:a7:bb:a4:34:87:33:38:d8:20:
13:2d:af:9f:fa:50:35:59:dd:57:89:f8:29:99:f1:a5:2d:13:
b5:47:cf:f9:b7:26:88:50:74:cd:8c:13:00:d8:f2:a7:1a:36:
b0:bd:e7:73:48:0c:c4:6d:c1:de:8e:f5:43:bd:51:3e:4a:2f:
be:d5:08:9d:46:7e:5e:cf:a2:6d:c0:1a:55:65:52:83:f1:a0:
99:15:f1:03:cc:50:a4:ce:d6:59:fa:31:04:c7:ad:cc:5b:16:
b6:b7:9b:2e:0d:95:cd:a8:e0:c4:00:8a:10:8a:78:36:51:78:
d3:da:a3:bf:2c:9f:b4:3e:e4:47:5d:0b:16:7d:74:2a:4a:87:
11:d8:5f:10:2f:b8:de:26:11:79:71:d1:86:6c:0a:90:5c:9c:
6e:c3:d3:6f:10:00:6f:78:03:62:b0:72:ba:31:ac:73:7f:9b:
b0:55:5c:97:2c:b6:46:d3:a3:23:4d:8c:fe:df:6c:d4:7a:6d:
f7:11:62:33:51:be:36:17:2f:cb:3e:ae:dc:f4:3d:78:5f:fa:
d1:cf:09:e0:b4:a7:af:0d:47:ae:20:5f:c5:e1:25:97:40:61:
b2:8a:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:05:00 2025 by rpki-client