Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: LpT+Vwjo6SQczj90Y5OU2isAfHpX5Hg7Y6o3iJjcDXs=
Subject key identifier: 8B:6B:77:4D:47:7C:99:89:BC:C1:85:2C:E4:D7:F0:A8:73:F6:94:68
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 01974D446A117FCA7592991CCFADB84AFA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 02:00:18 +0000
Manifest this update: Sun 08 Jun 2025 02:00:18 +0000
Manifest next update: Mon 09 Jun 2025 02:00:18 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: pF4j05TwgJUAWWLlMdHI3C8JYS6MHNZGgUKr8/TtuxA=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:6a:11:7f:ca:75:92:99:1c:cf:ad:b8:4a:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jun 8 02:00:18 2025 GMT
Not After : Jun 9 02:00:18 2025 GMT
Subject: CN=8b6b774d477c9989bcc1852ce4d7f0a873f69468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:2a:c6:0e:db:45:90:85:a4:9d:bc:27:21:
90:76:7e:42:d1:c6:eb:b4:db:1a:9d:6f:59:07:00:
f6:bc:3e:b2:c2:44:93:23:e4:b5:c6:9b:93:59:21:
d4:df:a7:36:7d:6b:e4:73:48:36:a8:30:1f:54:b3:
09:a9:fc:26:52:ca:56:64:65:4a:4f:da:aa:a4:23:
90:4f:91:e3:df:99:1d:7d:c7:be:af:a2:13:96:10:
3e:67:0b:46:ed:45:67:12:67:36:b7:01:65:5e:77:
37:a5:06:74:a5:6d:bc:57:21:7d:5e:a0:17:e3:e0:
35:3a:95:37:c0:fa:67:f1:9f:a4:76:25:aa:70:28:
5d:a1:97:72:fc:c7:e8:aa:11:8f:48:79:9a:63:47:
d9:db:e8:77:49:69:7e:d9:e8:6e:df:de:21:b0:52:
ba:d1:88:78:d7:c9:6a:79:ac:2e:aa:29:c8:6c:4c:
71:6d:4a:19:7c:7c:d4:ae:c8:12:b2:a1:47:fa:ce:
bf:9e:14:be:6e:39:26:95:b9:3e:5b:f3:e3:eb:10:
8a:41:e1:3b:c7:c0:9b:52:d3:5c:00:21:95:5d:8c:
23:40:65:43:b7:82:a0:8d:89:ce:a6:b9:52:f5:c8:
4f:4d:3a:e9:7e:42:32:4e:12:3f:b2:87:1e:58:af:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6B:77:4D:47:7C:99:89:BC:C1:85:2C:E4:D7:F0:A8:73:F6:94:68
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:69:19:99:6a:d9:2d:b0:40:69:af:a2:46:85:4e:36:60:
cb:a8:14:83:7b:29:c6:4d:bb:e4:d9:1f:d7:8b:6e:a7:e4:62:
4d:5b:c3:c3:0c:66:a5:08:af:2b:2e:70:08:39:43:75:79:8a:
35:a6:4b:e4:e7:54:23:b7:24:c2:47:45:be:12:f5:4e:e2:02:
63:87:28:fa:21:d1:ec:a8:4a:74:0b:62:b9:1f:20:4e:16:97:
ba:1f:61:2f:91:ea:0a:4b:27:d9:4e:96:92:75:1e:89:8e:c9:
75:6b:f2:f1:6f:aa:04:84:10:2e:41:f4:c7:b1:63:df:cb:08:
4b:75:95:97:af:06:b7:54:1f:79:46:28:7b:f1:af:59:f4:2a:
29:04:8a:dc:eb:1b:f4:a6:95:65:cc:96:3c:b4:91:e1:1e:bc:
84:e2:40:de:72:eb:69:c8:cc:ee:c0:18:73:57:6b:74:cf:3e:
4c:1b:ae:08:7b:d5:fa:4a:46:fd:dd:07:c4:eb:de:23:5c:47:
8c:87:00:9d:14:c9:9d:55:8e:32:2f:b1:7f:a3:8b:d7:15:f0:
6e:1c:1d:ea:54:0e:4b:92:83:02:e8:20:05:d9:12:62:09:b0:
aa:df:87:92:77:d3:c0:a3:6d:e4:92:b9:97:6e:74:63:af:50:
95:d8:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:58 2025 by rpki-client