Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: XTFbw7V2AjYIqCu2oen5jSO1e+Ynw92Lm30kQX1uXSs=
Subject key identifier: 32:29:31:8E:74:BA:CB:5C:FE:9E:F1:02:87:89:67:7D:76:D9:E1:8E
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019749318735B9A133A54664BFF199CD75C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 090C
Signing time: Sat 07 Jun 2025 07:01:11 +0000
Manifest this update: Sat 07 Jun 2025 07:01:11 +0000
Manifest next update: Sun 08 Jun 2025 07:01:11 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: vIdYMWFvpAhSzByDPOI5E+ZTMPP+mJycgh4eNl2zDEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:87:35:b9:a1:33:a5:46:64:bf:f1:99:cd:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Jun 7 07:01:11 2025 GMT
Not After : Jun 8 07:01:11 2025 GMT
Subject: CN=3229318e74bacb5cfe9ef1028789677d76d9e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:d0:08:b4:d2:e4:18:52:db:05:69:d4:28:
d8:d2:30:a0:1b:27:21:e1:70:d6:49:bf:08:78:bc:
57:0f:72:49:b2:65:92:18:55:91:16:b2:1a:34:0c:
44:6a:7f:49:b8:69:6b:fd:c2:73:34:38:63:05:b7:
a3:f4:ce:b8:e6:0e:68:c4:bf:50:1a:30:22:c5:ab:
8b:fc:5a:dd:ca:43:b8:d6:ba:d3:e7:18:c0:5a:0a:
26:ba:e6:b1:83:f9:98:06:fc:e1:85:39:9c:2a:f4:
1f:3d:35:7f:a5:0b:77:68:23:65:6b:72:f0:87:90:
7d:2e:2f:83:f7:56:f9:b8:24:1f:dd:61:36:84:74:
07:23:8c:97:78:36:f9:91:cc:ac:af:8a:94:0b:b4:
a8:94:9d:18:ba:44:de:2e:c7:42:7a:ae:3d:e6:60:
8c:b7:24:c9:bb:39:a9:22:c0:3e:e6:e7:d6:21:11:
ab:06:20:05:55:35:c1:a9:8e:c8:43:19:94:f7:18:
34:0b:b7:1d:9a:6d:67:c8:b5:46:e4:04:da:12:5f:
7c:c1:74:99:c6:77:d4:22:21:af:b1:67:94:cd:cb:
32:4a:f3:87:7f:b0:8c:a9:14:8e:8f:4f:7b:ac:15:
e6:b9:90:42:2c:16:06:68:1b:1d:d6:39:3e:c5:4f:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:31:8E:74:BA:CB:5C:FE:9E:F1:02:87:89:67:7D:76:D9:E1:8E
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:3e:ec:cc:0d:16:a5:65:13:57:f4:27:38:34:8f:08:ac:
42:b3:60:f2:2e:ea:ee:a0:31:03:10:b3:d0:3c:c8:c5:b0:23:
75:f8:0f:fa:46:39:78:0d:3f:3b:5f:2c:94:d2:bc:93:15:18:
1e:21:ba:f7:9a:93:d0:22:3d:31:4e:31:9f:55:66:68:10:fd:
f3:6a:a2:a5:d7:4c:f6:1e:24:5e:13:61:f5:58:5f:fa:9d:1a:
b6:81:e5:1f:c8:4f:ae:31:84:3c:5e:44:69:20:87:1c:b9:b8:
15:14:a9:d0:53:0b:80:17:6f:20:28:5f:98:fd:50:7d:86:63:
39:c1:47:8c:bb:2d:38:8b:f2:18:98:1e:ca:1d:c4:43:0d:ab:
c8:da:ae:27:8d:24:df:68:fd:d8:23:5e:fa:73:7b:f0:4f:a6:
06:5c:07:fd:3c:33:fe:74:d3:9f:ec:7d:02:c2:52:87:c1:76:
8b:2a:56:bb:09:51:c3:62:76:3b:7c:cd:b1:2a:6f:87:20:41:
98:1c:29:f6:ea:79:68:f9:60:7c:d0:1a:3c:59:11:2c:da:61:
af:d3:f5:1d:b9:8a:7a:11:e0:31:6c:b5:58:ae:84:31:23:89:
88:7e:9e:c6:a4:d9:e9:5a:53:2a:ca:03:b1:5e:61:16:12:78:
4d:f7:20:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMYc1uaEzpUZkv/GZzXXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4
ZjIyMmEwHhcNMjUwNjA3MDcwMTExWhcNMjUwNjA4MDcwMTExWjAzMTEwLwYDVQQD
EygzMjI5MzE4ZTc0YmFjYjVjZmU5ZWYxMDI4Nzg5Njc3ZDc2ZDllMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mzQCLTS5BhS2wVp1CjY0jCgGych
4XDWSb8IeLxXD3JJsmWSGFWRFrIaNAxEan9JuGlr/cJzNDhjBbej9M645g5oxL9Q
GjAixauL/FrdykO41rrT5xjAWgomuuaxg/mYBvzhhTmcKvQfPTV/pQt3aCNla3Lw
h5B9Li+D91b5uCQf3WE2hHQHI4yXeDb5kcysr4qUC7SolJ0YukTeLsdCeq495mCM
tyTJuzmpIsA+5ufWIRGrBiAFVTXBqY7IQxmU9xg0C7cdmm1nyLVG5ATaEl98wXSZ
xnfUIiGvsWeUzcsySvOHf7CMqRSOj097rBXmuZBCLBYGaBsd1jk+xU9sQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIpMY50ustc/p7xAoeJZ3122eGOMB8GA1UdIwQY
MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt
MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh
LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6I+7MwN
FqVlE1f0Jzg0jwisQrNg8i7q7qAxAxCz0DzIxbAjdfgP+kY5eA0/O18slNK8kxUY
HiG695qT0CI9MU4xn1VmaBD982qipddM9h4kXhNh9Vhf+p0atoHlH8hPrjGEPF5E
aSCHHLm4FRSp0FMLgBdvIChfmP1QfYZjOcFHjLstOIvyGJgeyh3EQw2ryNquJ40k
32j92CNe+nN78E+mBlwH/Twz/nTTn+x9AsJSh8F2iypWuwlRw2J2O3zNsSpvhyBB
mBwp9up5aPlgfNAaPFkRLNphr9P1HbmKehHgMWy1WK6EMSOJiH6exqTZ6VpTKsoD
sV5hFhJ4TfcgvA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:14 2025 by rpki-client