Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: qrt5nUbXmfzJXsaSOWqWTf8bGX5zg3eGr7TcHu4FrBY=
Subject key identifier: D8:2D:33:D6:E8:A7:32:E8:13:7C:6B:F9:1B:0B:2B:67:EF:59:53:BB
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019616225E11AF71F1AF6473D2E6CE3FA75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 14E1
Signing time: Tue 08 Apr 2025 16:01:13 +0000
Manifest this update: Tue 08 Apr 2025 16:01:13 +0000
Manifest next update: Wed 09 Apr 2025 16:01:13 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: 2ehSUPbyIH/ELL+no0zQQtIk9ATOY0jdsmQP/gab6v0=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:22:5e:11:af:71:f1:af:64:73:d2:e6:ce:3f:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Apr 8 16:01:13 2025 GMT
Not After : Apr 9 16:01:13 2025 GMT
Subject: CN=d82d33d6e8a732e8137c6bf91b0b2b67ef5953bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:bf:34:0b:46:24:72:cf:00:cc:a7:f8:fd:
29:86:89:67:10:15:48:15:2c:59:d6:b8:30:93:7c:
38:2e:2a:e5:8b:a4:6d:54:eb:e3:b0:0a:d9:be:14:
32:f5:6e:e2:55:5b:dc:e0:02:a1:ef:74:8a:75:3f:
6a:88:fe:35:9a:41:c1:64:87:5a:d5:9a:c6:df:75:
28:d3:97:63:76:bf:c4:0d:cc:55:d4:b8:55:16:b5:
fe:23:fa:bc:eb:fe:48:7c:6e:21:5a:28:28:cf:12:
80:9d:ce:9b:81:c6:f2:18:cd:da:bc:b2:17:28:26:
70:c5:91:84:82:6a:46:d1:d9:a1:f5:96:a9:d8:71:
c2:c3:ae:5f:a7:08:a7:c7:4f:0a:bc:8f:37:46:ca:
dd:c1:58:0d:90:3e:b1:cd:ed:96:82:ed:80:4e:6f:
3b:0c:d9:3e:80:8e:be:7a:1f:85:09:67:42:4e:75:
14:06:d5:c3:ee:d0:f9:9b:e2:af:d8:4c:10:73:71:
d5:4c:7e:dc:d5:7e:92:8a:90:b9:89:93:ab:b4:69:
3e:ea:4a:57:0e:eb:e8:eb:25:67:b8:7d:ae:b0:cf:
c1:35:70:30:bd:d6:34:0e:10:ec:6f:53:2b:ff:2c:
17:83:2d:79:66:d1:67:ec:68:a0:12:64:82:67:a2:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:33:D6:E8:A7:32:E8:13:7C:6B:F9:1B:0B:2B:67:EF:59:53:BB
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d6:96:cc:90:fc:dc:03:a7:73:e0:90:d0:19:5e:3a:11:48:
2d:c5:b9:b7:63:c3:6a:10:33:b5:c6:87:4f:ff:e9:d6:95:73:
ac:54:25:a5:a8:49:47:fb:85:ca:6a:d9:f8:e3:79:ec:a8:08:
1e:f6:ed:fc:78:60:f4:04:e9:cf:0e:42:a8:47:fd:35:3a:83:
61:27:c2:6f:b7:36:34:94:ba:84:1a:e7:8c:7c:31:06:62:29:
bd:d1:43:a3:2d:ab:e4:f4:17:d4:db:23:5b:4a:33:5a:a8:a4:
4c:f7:13:64:e0:68:d1:b9:8e:0a:99:45:16:49:2d:cb:b9:f4:
8b:44:f7:1e:10:e4:f5:8c:53:1f:05:5c:8b:aa:a1:5f:18:0c:
81:71:7d:36:83:87:55:51:bd:1d:4e:58:fa:60:ea:2f:74:3e:
dd:df:6c:0c:51:b7:e7:5e:8e:ed:91:b6:b0:87:59:b9:68:b3:
1e:6f:2c:ef:37:fe:3d:26:3f:fb:a7:23:bf:cc:1c:31:98:5d:
75:bd:3e:2a:65:4a:09:e2:64:59:87:93:f4:4f:2e:fb:4c:db:
bd:dc:15:52:0b:bf:a0:84:47:49:33:71:79:7c:d9:3e:71:63:
da:e1:c1:19:02:30:c4:1d:f2:79:da:28:26:e0:d6:70:d5:a1:
e6:96:dd:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYWIl4Rr3Hxr2Rz0ubOP6ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWUwY2JiZTVkMWMwYTA5NDY1MDk1ZTQ0NGZiYzFjNzkz
MmM2ODMwHhcNMjUwNDA4MTYwMTEzWhcNMjUwNDA5MTYwMTEzWjAzMTEwLwYDVQQD
EyhkODJkMzNkNmU4YTczMmU4MTM3YzZiZjkxYjBiMmI2N2VmNTk1M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ia/NAtGJHLPAMyn+P0pholnEBVI
FSxZ1rgwk3w4Lirli6RtVOvjsArZvhQy9W7iVVvc4AKh73SKdT9qiP41mkHBZIda
1ZrG33Uo05djdr/EDcxV1LhVFrX+I/q86/5IfG4hWigozxKAnc6bgcbyGM3avLIX
KCZwxZGEgmpG0dmh9Zap2HHCw65fpwinx08KvI83RsrdwVgNkD6xze2Wgu2ATm87
DNk+gI6+eh+FCWdCTnUUBtXD7tD5m+Kv2EwQc3HVTH7c1X6SipC5iZOrtGk+6kpX
Duvo6yVnuH2usM/BNXAwvdY0DhDsb1Mr/ywXgy15ZtFn7GigEmSCZ6IiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgtM9bopzLoE3xr+RsLK2fvWVO7MB8GA1UdIwQY
MBaAFBEeDLvl0cCglGUJXkRPvBx5MsaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3Nzgt
ZDE1ZTUxNmRjNDVjLzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3NzgtZDE1ZTUxNmRjNDVj
LzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNaWzJD8
3AOnc+CQ0BleOhFILcW5t2PDahAztcaHT//p1pVzrFQlpahJR/uFymrZ+ON57KgI
Hvbt/Hhg9ATpzw5CqEf9NTqDYSfCb7c2NJS6hBrnjHwxBmIpvdFDoy2r5PQX1Nsj
W0ozWqikTPcTZOBo0bmOCplFFkkty7n0i0T3HhDk9YxTHwVci6qhXxgMgXF9NoOH
VVG9HU5Y+mDqL3Q+3d9sDFG3516O7ZG2sIdZuWizHm8s7zf+PSY/+6cjv8wcMZhd
db0+KmVKCeJkWYeT9E8u+0zbvdwVUgu/oIRHSTNxeXzZPnFj2uHBGQIwxB3yedoo
JuDWcNWh5pbdDA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:56:17 2025 by rpki-client