Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: /hoW7+jaHA01SMzh7gMWtPzMIRUSGukPNKWEsFCI23I=
Subject key identifier: 7B:CD:A3:D6:E8:B2:E2:07:11:57:F1:F4:BA:8D:0A:78:2B:16:CD:77
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0196C570F151AF40A6C34FCF0F5074D04CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 0159
Signing time: Mon 12 May 2025 17:00:35 +0000
Manifest this update: Mon 12 May 2025 17:00:35 +0000
Manifest next update: Tue 13 May 2025 17:00:35 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: ebstuVMjuLR7aJ/+Yp65o2WsutivluMGiHj8mgaDucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:f1:51:af:40:a6:c3:4f:cf:0f:50:74:d0:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: May 12 17:00:35 2025 GMT
Not After : May 13 17:00:35 2025 GMT
Subject: CN=7bcda3d6e8b2e2071157f1f4ba8d0a782b16cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:97:66:35:99:5e:94:0a:06:a9:0c:aa:b8:
41:34:1d:bc:ea:02:d9:54:fe:8d:24:30:ba:32:42:
5e:71:2b:69:14:98:24:18:3b:96:5e:87:a2:70:2c:
69:6e:7d:64:49:c2:78:f7:d8:42:ab:d0:0d:1c:10:
a6:66:47:5e:38:0d:0e:d5:72:64:1a:cf:b2:58:11:
39:4c:71:c6:31:81:d8:33:1b:c8:3c:23:db:89:4c:
07:22:cb:4a:1f:58:c8:f2:2c:74:84:f2:35:2d:44:
ff:49:11:11:fd:87:56:99:54:d4:8c:11:de:21:13:
de:32:db:b2:aa:3f:96:77:b2:7b:92:ed:7c:42:7e:
22:27:49:b3:0d:66:97:21:33:94:8c:5e:bd:53:d8:
dd:3f:6d:de:c6:4e:30:29:d9:48:fb:b6:d0:0d:0f:
30:3b:7a:bb:f6:04:d6:36:06:8a:ac:36:6c:ed:da:
ce:23:17:b0:ad:66:1d:a9:58:98:de:a5:a5:c6:8e:
28:6f:9f:92:97:cf:c4:96:d4:7c:46:1b:5c:73:9a:
c3:6c:2b:44:1c:da:df:ae:26:2b:df:63:79:92:53:
62:a4:e0:65:83:2d:d4:09:59:49:14:b7:15:13:0c:
7f:5e:39:ed:1e:a3:e8:1c:c3:97:ec:f3:fb:cf:86:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:A3:D6:E8:B2:E2:07:11:57:F1:F4:BA:8D:0A:78:2B:16:CD:77
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:6f:e9:3e:46:a3:38:77:e8:4f:3f:37:72:ce:2c:33:9e:
08:24:f2:fd:b6:4f:16:d4:6e:11:d3:8f:33:da:ef:15:26:d0:
4c:c5:ba:a6:f0:29:98:93:ea:c4:78:6f:b5:30:93:a7:6e:b2:
27:18:ab:65:cc:4a:3b:0f:cf:50:fa:cc:83:98:6b:e1:6c:a5:
4b:31:ee:8b:41:81:d3:32:18:6c:06:94:d7:bc:e6:55:21:29:
2c:91:22:57:a5:92:a5:14:c6:cf:0d:23:b6:1d:e3:ce:13:75:
5e:2d:37:83:89:6f:8e:9c:a7:5d:cb:b0:32:a0:93:35:bf:c7:
d9:be:84:6e:6b:5d:87:f2:bc:36:d4:c7:f9:65:cd:68:e6:3e:
76:10:ed:1b:0e:22:bd:ce:59:fe:2e:e8:83:89:b8:be:3d:fa:
af:cf:86:6a:2c:04:29:a4:06:8f:22:80:2d:5e:ef:1c:a9:08:
60:5b:4b:fb:6e:94:ec:79:6b:51:57:05:03:65:96:31:fd:e1:
ac:78:5b:5e:df:92:da:15:e9:1f:ac:0b:d1:ef:3f:31:9c:67:
54:ef:88:6b:48:a3:5b:8d:c9:85:4b:08:1f:1d:96:26:e7:66:
17:ee:4d:ec:47:37:74:4f:fb:09:91:0c:e3:a5:60:4c:c2:16:
b1:2f:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:43:23 2025 by rpki-client