Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: mz4ppeNa6pkVoLBopC470mZv9vRHCGYcMWa+AhrGUag=
Subject key identifier: CE:45:15:54:62:EB:51:CF:1C:7D:3F:79:01:5C:18:26:DB:19:C6:0E
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0198D583F2A397D6F4E5EE7991A7FE69BECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1335
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: fsrGHKiOuYRKXB2TJtIbrB673L5GV/fF/kTaG6Sl9+c=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f2:a3:97:d6:f4:e5:ee:79:91:a7:fe:69:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=ce45155462eb51cf1c7d3f79015c1826db19c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:8f:3a:f1:6d:dc:2f:34:2d:fc:d7:6f:32:
51:fd:71:af:b4:33:f2:11:99:5d:e4:7e:af:ca:5e:
73:5c:a4:62:28:7a:0a:b4:60:ce:3b:6d:a4:c4:47:
9b:97:dd:3e:d1:15:fe:28:6f:42:71:bc:be:22:81:
5f:ce:cf:fa:29:66:a3:47:c3:de:c1:33:65:36:8b:
c0:d0:5c:72:61:df:1b:46:fe:8d:a9:1c:ea:bf:92:
11:65:1c:7f:f8:88:fd:2f:a4:eb:91:c1:ee:a5:61:
67:76:b3:a2:51:05:b3:f4:ab:1b:df:3c:2a:cd:94:
5f:d5:2f:13:80:44:ef:82:2e:22:1d:0b:e5:67:f9:
29:d7:ea:ee:1b:dd:6c:5e:1d:a2:8c:49:69:b5:2b:
2c:a6:ba:0d:c3:cf:a3:61:f3:42:81:87:d0:d2:08:
c6:8f:08:6c:cf:42:c3:dd:88:ad:6f:38:62:c8:34:
87:49:a1:ff:45:99:b0:8b:e1:2d:8d:6b:a2:2d:07:
c4:85:5f:b0:20:fa:11:13:75:fd:a3:e4:56:8c:42:
b7:07:cb:4e:78:30:c7:31:3c:b6:5d:fb:4e:f6:27:
e8:98:97:89:8f:d2:75:46:cc:f7:2d:fc:90:02:06:
69:57:a2:bc:39:13:20:ea:2e:15:66:5c:e3:ac:f9:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:15:54:62:EB:51:CF:1C:7D:3F:79:01:5C:18:26:DB:19:C6:0E
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:37:88:61:8b:91:e0:85:d7:cf:17:2a:40:6e:69:7a:f4:
2e:9d:13:31:f5:5d:dc:e2:06:39:5c:16:2c:db:ae:26:fb:60:
48:a6:2a:51:2f:72:01:c9:09:cd:66:bb:98:75:b8:42:95:ea:
28:fe:08:4f:64:6c:bf:b4:73:08:d1:94:4f:46:25:f4:30:42:
a9:14:54:6c:96:33:07:2b:b6:8f:49:ac:55:fe:fd:a7:b5:a2:
64:a6:fc:e5:e6:61:9b:a6:63:d8:12:c9:b3:ca:19:ba:c9:55:
8a:a7:06:14:61:6c:02:73:16:e7:9e:b7:05:45:21:bb:f3:2a:
6b:26:00:94:a2:93:f2:e1:ea:e6:c1:12:3a:2a:86:f4:98:c7:
f4:d5:2c:6b:20:73:67:56:b3:68:2a:d1:0f:7e:86:57:c3:67:
4f:49:c9:e2:c3:ce:2c:b4:82:8c:33:5f:33:33:12:e3:6e:49:
63:f4:58:bb:83:d8:c1:3c:5c:b7:43:0e:68:59:eb:66:17:e3:
bc:65:55:1a:79:10:66:11:d7:b3:69:cf:25:1c:d3:e9:78:e5:
6d:b5:7f:65:30:28:d8:41:06:e2:6e:bb:a3:7f:6a:d8:4b:eb:
8e:8e:f0:ad:91:84:b6:cf:69:af:46:c2:7a:5e:ee:39:4d:57:
05:73:56:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/Kjl9b05e55kaf+ab7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjUwODIzMDYwMDUwWhcNMjUwODI0MDYwMDUwWjAzMTEwLwYDVQQD
EyhjZTQ1MTU1NDYyZWI1MWNmMWM3ZDNmNzkwMTVjMTgyNmRiMTljNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqPOvFt3C80LfzXbzJR/XGvtDPy
EZld5H6vyl5zXKRiKHoKtGDOO22kxEebl90+0RX+KG9Ccby+IoFfzs/6KWajR8Pe
wTNlNovA0FxyYd8bRv6NqRzqv5IRZRx/+Ij9L6TrkcHupWFndrOiUQWz9Ksb3zwq
zZRf1S8TgETvgi4iHQvlZ/kp1+ruG91sXh2ijElptSssproNw8+jYfNCgYfQ0gjG
jwhsz0LD3YitbzhiyDSHSaH/RZmwi+EtjWuiLQfEhV+wIPoRE3X9o+RWjEK3B8tO
eDDHMTy2XftO9ifomJeJj9J1Rsz3LfyQAgZpV6K8ORMg6i4VZlzjrPmDMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5FFVRi61HPHH0/eQFcGCbbGcYOMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkQ3iGGL
keCF188XKkBuaXr0Lp0TMfVd3OIGOVwWLNuuJvtgSKYqUS9yAckJzWa7mHW4QpXq
KP4IT2Rsv7RzCNGUT0Yl9DBCqRRUbJYzByu2j0msVf79p7WiZKb85eZhm6Zj2BLJ
s8oZuslViqcGFGFsAnMW5563BUUhu/MqayYAlKKT8uHq5sESOiqG9JjH9NUsayBz
Z1azaCrRD36GV8NnT0nJ4sPOLLSCjDNfMzMS425JY/RYu4PYwTxct0MOaFnrZhfj
vGVVGnkQZhHXs2nPJRzT6XjlbbV/ZTAo2EEG4m67o39q2Evrjo7wrZGEts9pr0bC
el7uOU1XBXNWpg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:41 2025 by rpki-client