Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: yOkmLrDj1U2B2BytJO78HjH4TPxNqmryx5cigkSAdlY=
Subject key identifier: 04:0B:87:39:98:F4:87:D1:D6:4A:52:78:DF:32:50:F1:5F:66:A8:52
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0197B6D7BA8EB471A6F5AE41DCF873A1DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 01D6
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: 8FowZlvzR/VUSR/tSfjn1WOVRqo6XyQCRYD5jy0biwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:8e:b4:71:a6:f5:ae:41:dc:f8:73:a1:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=040b873998f487d1d64a5278df3250f15f66a852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:6b:45:89:e1:5e:6c:71:92:56:b8:d2:71:
6e:0a:f3:99:e8:89:65:fc:c0:9d:25:a3:df:df:0d:
e7:ec:dd:bf:53:a5:ef:35:c2:56:4c:ca:f9:a8:14:
7b:ed:bc:39:d3:0d:96:fe:db:ea:95:c6:65:4b:29:
86:f0:40:3c:37:a0:1a:e4:f2:8c:d5:48:80:aa:62:
75:13:67:1d:45:2e:09:79:0d:b5:66:ff:fd:72:d5:
76:86:85:21:ab:ee:a0:39:30:47:6e:77:93:82:cf:
79:9d:06:c6:21:33:3a:d7:58:3f:fc:35:64:18:dc:
cb:ae:18:9b:17:9d:f9:e8:39:55:46:a0:06:b0:b1:
60:0b:89:86:32:67:73:a4:fe:23:50:46:70:42:0f:
57:21:66:c7:08:34:15:f9:83:a4:90:7b:5d:e3:b0:
9f:a9:7c:de:8b:82:5a:c6:9b:a6:7c:3d:eb:99:c3:
30:c1:77:d5:00:16:bc:99:eb:f9:e9:f4:b3:60:60:
f8:60:74:b2:5a:04:47:1e:61:92:f9:4c:3d:75:c9:
4b:86:03:80:3d:47:ba:ac:6b:c6:31:39:b8:d5:f5:
c6:42:1e:0d:d0:a8:25:b3:2b:6d:61:c3:09:97:4d:
5c:9b:78:51:44:7e:d2:e1:14:72:23:d7:d8:18:20:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:87:39:98:F4:87:D1:D6:4A:52:78:DF:32:50:F1:5F:66:A8:52
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:d3:45:2b:ca:1a:09:78:90:08:e8:c6:a7:bf:cf:7d:8e:
2e:55:ba:5f:4c:e3:6d:57:df:74:1a:dd:c0:da:72:ae:61:af:
72:1a:2c:a5:6a:be:ce:d2:f6:dc:eb:e9:0f:4d:49:76:c6:bc:
f1:37:c9:6e:78:e8:36:24:ce:60:8d:1b:18:6b:4b:a7:d8:7a:
7f:bc:ad:24:e4:39:b4:93:1a:59:87:1c:61:e2:a6:8f:8c:7d:
8f:d6:e3:ac:cd:34:56:1c:79:30:c6:62:24:06:b3:b8:53:bd:
7d:ea:87:a9:ae:3e:a8:7e:91:0d:6c:2b:26:05:f5:e2:74:0f:
9c:bb:7c:6a:29:c9:5f:4e:4e:0f:07:90:52:30:c1:84:21:22:
8c:1a:6e:ff:45:18:60:1a:66:92:c8:6b:88:c0:69:87:85:7a:
ac:d6:14:a8:b7:fe:61:ba:99:bc:c9:71:ca:dd:d3:ca:3b:c3:
f5:b5:00:ef:05:61:d3:2b:7e:aa:b4:d5:70:05:ee:21:a1:22:
6d:01:b3:da:9d:5a:a6:dd:08:99:8a:db:0d:9f:84:5e:46:4f:
cc:9a:a2:43:be:b4:ce:a4:20:b9:42:a2:db:c2:8f:b7:ec:ca:
b8:ef:4d:96:1c:33:d5:97:70:14:db:6a:51:fb:af:79:1b:d2:
b6:e7:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:19 2025 by rpki-client