Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: YMy0hjT1/0T/fbxYZPQfgUhgPMAZPtDBlWMUUB3/9ME=
Subject key identifier: E3:F6:0E:9B:23:52:15:FE:EF:A4:FA:AB:BC:2E:CF:04:A2:C3:A8:D7
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019922558BEC92A021A41A8FF732F21E7D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0A01
Signing time: Sun 07 Sep 2025 04:00:55 +0000
Manifest this update: Sun 07 Sep 2025 04:00:55 +0000
Manifest next update: Mon 08 Sep 2025 04:00:55 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: PErL6VfocIfebFpuEAp1zsfNvlm/bw5+tY162KjlOUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:8b:ec:92:a0:21:a4:1a:8f:f7:32:f2:1e:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Sep 7 04:00:55 2025 GMT
Not After : Sep 8 04:00:55 2025 GMT
Subject: CN=e3f60e9b235215feefa4faabbc2ecf04a2c3a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:fd:d0:e8:be:bf:0c:ac:61:39:68:df:5c:
d8:c0:69:ab:b3:25:b7:d1:e6:b0:7f:c0:72:82:9d:
39:32:f9:d4:23:13:e4:a1:53:32:a4:ad:17:b5:cd:
ff:eb:6f:a4:c1:27:83:8c:ea:24:ed:81:2d:06:11:
2b:ad:d5:4a:8f:39:6f:99:54:51:2c:05:6c:53:c4:
99:78:9f:b9:8e:4b:f1:16:d8:a3:df:f1:59:c3:e6:
42:3f:cf:c1:ce:9e:c7:83:c5:66:e1:d8:4f:f0:a9:
a8:9f:d7:09:66:6f:04:e2:f5:91:cf:96:71:7f:4c:
cd:43:b1:98:d9:83:10:15:7d:57:70:23:26:dc:e9:
72:ac:03:88:a3:c1:03:7e:7a:e6:48:fc:a2:4e:e1:
ed:4d:64:9d:bd:d1:fb:27:17:2e:ac:7e:2d:d7:8a:
30:b6:41:6b:e7:85:83:4c:4f:c2:3a:5d:73:19:3a:
b6:88:a7:7b:22:5d:a0:f3:8b:55:29:74:db:8a:0e:
1d:ae:fa:cf:30:59:0d:2e:a4:21:08:b8:f9:35:b9:
7a:80:99:9c:d0:c2:3d:48:6a:02:8b:9e:da:1f:93:
66:18:5c:6f:11:96:a8:ee:bc:d5:f6:1d:c5:45:26:
4d:74:2a:a9:24:3f:8d:b2:06:53:21:ab:01:00:81:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:0E:9B:23:52:15:FE:EF:A4:FA:AB:BC:2E:CF:04:A2:C3:A8:D7
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:23:27:ad:73:3b:00:b2:b7:99:d2:6c:65:d2:1f:00:61:
09:56:e4:1c:04:40:39:ab:c0:80:6d:b2:e5:ee:4f:f6:8e:d0:
57:75:b2:6f:14:d5:54:db:d5:b0:37:55:25:f0:e8:f8:d9:2a:
f8:2d:02:aa:45:55:6e:6e:b8:87:54:fc:44:95:68:e2:c8:af:
37:83:11:83:d8:79:ef:51:ef:e9:19:2f:bf:87:6e:42:4e:bc:
b8:93:8e:49:5c:38:7f:f9:ee:67:b8:c9:ed:85:62:48:ae:60:
7c:34:d9:8d:71:a6:04:6f:c1:39:6e:4b:92:4d:81:42:05:a7:
aa:22:ae:67:92:1b:f4:9a:ee:c2:1f:70:7c:77:34:fd:8e:a5:
f4:00:4a:a0:7d:54:98:c0:1e:0b:4e:01:67:85:c6:43:19:8d:
d8:cc:d9:f5:78:83:93:78:11:4d:7e:0d:a2:d5:25:bb:2c:20:
b0:b7:5f:5e:5e:46:42:d6:d8:e3:e5:9b:84:74:e7:5c:ee:5b:
32:e8:f2:86:d4:21:6d:55:79:10:a1:aa:ad:38:84:34:6b:d5:
36:13:40:c4:09:c2:b9:70:a1:ed:12:55:a3:e3:41:fa:a8:b3:
67:db:f0:51:92:7c:07:fd:a6:c2:2e:a5:19:1b:dd:ef:32:93:
39:55:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:13:25 2025 by rpki-client