Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: hEBy7yOSEaFRnQmoW0iejy9GPwA1ZSK+11q4DovXsqk=
Subject key identifier: 15:19:D3:1A:8E:AB:1D:29:B6:AA:06:8F:DF:93:81:B4:77:DA:7D:78
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019924442CC3DD71AB3E1F7F33F10B8147FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 13:01:11 +0000
Manifest this update: Sun 07 Sep 2025 13:01:11 +0000
Manifest next update: Mon 08 Sep 2025 13:01:11 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: A/d+gvVzAsUpVRV5PQ0+bedYb0XFLwGmOfBL27ovwzc=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:2c:c3:dd:71:ab:3e:1f:7f:33:f1:0b:81:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Sep 7 13:01:11 2025 GMT
Not After : Sep 8 13:01:11 2025 GMT
Subject: CN=1519d31a8eab1d29b6aa068fdf9381b477da7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:fd:fe:06:13:10:7d:13:cc:55:40:ad:f0:
6a:06:c2:73:85:81:ca:db:83:d4:05:f6:73:14:00:
5b:51:6f:bf:59:38:07:7c:bd:7d:a6:bb:51:ee:5a:
bd:d9:23:27:a4:46:a5:76:5d:49:40:3d:3b:19:1e:
0b:4e:70:d6:d5:69:35:7d:c6:92:9d:46:35:4f:d6:
58:ed:d6:6e:2b:11:96:b9:08:57:a8:22:b2:fa:33:
b5:68:e6:81:fc:c0:86:36:83:ed:c8:11:75:4a:a1:
61:61:d1:3e:dd:98:57:a6:1c:4b:29:89:ef:9a:d0:
7a:ae:b6:c1:a2:0b:53:4a:70:55:ce:c6:30:38:f8:
98:65:13:b3:0e:ab:4f:c0:4e:2e:66:53:88:93:15:
71:52:c2:03:7e:4d:04:68:00:e4:d8:c7:70:16:60:
f9:6d:7a:db:a2:19:0a:aa:0d:08:2f:ec:f7:93:ac:
fa:b0:94:41:51:26:c6:ff:d7:72:39:c0:5a:4f:fc:
67:e6:48:3b:c6:78:cd:b6:e9:14:40:62:00:42:10:
f0:d4:83:fb:f5:ae:86:41:40:87:d2:76:ef:90:24:
0b:8e:0f:17:bb:6c:6d:93:da:39:9f:eb:13:72:ef:
d6:4d:0f:36:27:05:7d:a5:e8:f6:ca:53:9e:b5:e5:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:D3:1A:8E:AB:1D:29:B6:AA:06:8F:DF:93:81:B4:77:DA:7D:78
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:31:0f:86:a6:0c:0f:0a:35:d6:c1:91:71:35:5c:dd:f0:
14:52:24:b2:c2:88:89:9d:99:31:35:c7:05:9c:b2:b5:00:4b:
ed:ea:43:8f:68:25:9d:25:c0:32:8c:6b:d6:bd:a9:09:6a:36:
20:5f:ee:87:9a:94:e1:2f:3c:2c:ab:0a:7d:65:1d:57:7f:a7:
b4:62:f6:2e:ee:4e:8a:f8:35:22:d8:a1:00:2b:ec:e4:a4:7b:
31:f1:63:f2:73:70:23:21:20:97:1d:31:44:61:6a:b8:67:53:
e6:f9:7e:81:90:20:dc:97:a9:44:ea:72:7a:9d:0c:2e:f9:e4:
34:06:fb:54:79:14:8d:f5:f9:b8:ef:0d:74:92:7e:39:93:ed:
26:07:4b:6b:64:2c:fb:de:fa:11:6e:b8:eb:d4:a1:18:9d:2d:
89:48:f1:ff:9f:f1:6e:81:ee:3a:5f:68:a6:c0:b0:05:bb:0b:
68:59:6a:f7:63:bd:5a:f9:c2:6c:56:16:b5:70:53:44:89:df:
01:35:0e:5c:d3:93:49:99:51:8b:98:34:94:53:95:9b:a1:c9:
a0:10:34:0c:4a:30:f1:27:9b:a8:58:4b:d6:76:0a:11:e1:80:
74:38:a6:69:0e:a5:11:aa:f4:65:d5:cf:e8:ff:c0:9a:e0:d2:
7e:c6:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:01 2025 by rpki-client