Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: tb98wVL25+KbPsRobfoXKMhMAipkJRJIAxroK4GCAyM=
Subject key identifier: FE:6C:64:62:A3:BB:64:9D:4A:05:FD:B9:B7:AF:50:B7:C3:07:5A:30
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0198D6983810D9102FE1895755CB15FE34B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 026B
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: dS4jzyabLiXwUz9X/5INiDDeKTIZrv0AdQuVI8huqbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:38:10:d9:10:2f:e1:89:57:55:cb:15:fe:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=fe6c6462a3bb649d4a05fdb9b7af50b7c3075a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:15:a3:d2:fd:e7:19:5b:9e:03:77:a4:ac:
ea:c0:8e:ce:51:bc:b7:aa:25:35:f2:dc:67:36:15:
76:bb:7d:71:24:be:93:88:31:e3:4f:fc:4f:ce:d9:
be:da:03:f4:40:b0:8b:39:fa:5a:69:6b:0a:ed:a0:
7e:e2:2b:28:40:a2:7c:92:44:67:29:93:ad:0f:17:
d2:3a:52:bf:70:73:e4:5e:3b:16:6c:dd:6f:14:1d:
e3:cc:6b:72:6b:de:68:a2:49:ac:bb:ec:9a:49:81:
b2:5d:16:de:e3:73:01:dc:79:94:99:f9:b4:ac:cc:
1c:b2:df:54:ba:e7:f5:52:ef:bf:8b:af:2c:c7:ae:
19:55:68:59:03:b9:56:ec:b4:9a:88:8a:c0:78:4b:
75:db:ea:48:46:88:9c:47:c6:ca:07:29:c4:74:90:
d0:fd:7a:97:1f:5d:0c:30:45:a7:13:9b:76:75:bc:
a1:b8:20:28:b2:cf:f5:21:86:0e:53:3f:40:65:94:
32:4d:58:88:bc:d5:77:34:3c:81:5a:cd:ba:a2:63:
56:ad:c6:6c:80:a6:62:10:e1:55:92:89:ff:16:37:
0f:5d:0d:2b:98:d7:df:78:f2:63:67:aa:ed:4d:61:
59:82:7a:e7:5a:97:b8:b9:1e:22:04:01:0d:58:42:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:64:62:A3:BB:64:9D:4A:05:FD:B9:B7:AF:50:B7:C3:07:5A:30
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:ed:42:d8:6d:40:dc:0a:14:4c:e9:44:68:03:3f:59:90:
60:2c:05:d0:57:ce:27:f3:2d:d5:28:70:71:28:35:7b:d6:7f:
f3:5e:a8:63:e3:9f:bc:27:f2:e8:f1:54:3d:71:f8:5d:c1:6a:
0f:66:d3:94:a4:57:94:59:50:00:41:37:2f:97:f3:bf:80:04:
1c:be:33:19:6c:98:b0:22:27:55:bb:79:07:06:9b:a1:3e:3d:
a0:11:b0:37:00:db:a5:3e:34:f3:22:a7:a2:f9:03:be:7a:67:
0e:26:c3:e6:f5:94:1a:fd:c8:a3:6f:b3:c5:d2:35:6b:84:59:
29:2d:28:b6:3b:0c:41:86:68:de:86:d3:ef:53:31:a7:bb:e0:
ae:3a:4e:bd:f3:67:0f:a0:07:e8:50:3f:13:93:b5:e8:fe:9f:
21:d7:e9:c0:8d:e9:e4:ec:89:b8:81:7c:f1:ca:e5:0b:13:e3:
cd:0d:3e:c3:55:3e:22:94:10:e5:3f:89:82:0c:f6:af:15:27:
20:c8:45:03:d3:cf:b3:16:bf:7e:22:2c:c3:5b:e6:a6:e9:ee:
3d:ce:8a:b6:21:3a:43:e0:8b:4b:b8:78:ed:3d:36:e5:9c:66:
23:8e:0c:87:23:b2:37:46:c8:49:b4:f0:7a:33:38:07:e1:65:
a0:83:62:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDgQ2RAv4YlXVcsV/jSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjUwODIzMTEwMjM2WhcNMjUwODI0MTEwMjM2WjAzMTEwLwYDVQQD
EyhmZTZjNjQ2MmEzYmI2NDlkNGEwNWZkYjliN2FmNTBiN2MzMDc1YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HUVo9L95xlbngN3pKzqwI7OUby3
qiU18txnNhV2u31xJL6TiDHjT/xPztm+2gP0QLCLOfpaaWsK7aB+4isoQKJ8kkRn
KZOtDxfSOlK/cHPkXjsWbN1vFB3jzGtya95ookmsu+yaSYGyXRbe43MB3HmUmfm0
rMwcst9Uuuf1Uu+/i68sx64ZVWhZA7lW7LSaiIrAeEt12+pIRoicR8bKBynEdJDQ
/XqXH10MMEWnE5t2dbyhuCAoss/1IYYOUz9AZZQyTViIvNV3NDyBWs26omNWrcZs
gKZiEOFVkon/FjcPXQ0rmNffePJjZ6rtTWFZgnrnWpe4uR4iBAENWELV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5sZGKju2SdSgX9ubevULfDB1owMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIXtQtht
QNwKFEzpRGgDP1mQYCwF0FfOJ/Mt1ShwcSg1e9Z/816oY+OfvCfy6PFUPXH4XcFq
D2bTlKRXlFlQAEE3L5fzv4AEHL4zGWyYsCInVbt5BwaboT49oBGwNwDbpT408yKn
ovkDvnpnDibD5vWUGv3Io2+zxdI1a4RZKS0otjsMQYZo3obT71Mxp7vgrjpOvfNn
D6AH6FA/E5O16P6fIdfpwI3p5OyJuIF88crlCxPjzQ0+w1U+IpQQ5T+Jggz2rxUn
IMhFA9PPsxa/fiIsw1vmpunuPc6KtiE6Q+CLS7h47T025ZxmI44MhyOyN0bISbTw
ejM4B+FloINi7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:02:07 2025 by rpki-client