Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: FSKVXlR1yWHQjJqdJ59Kxng9CClgFh8Cg8LS29RB/p4=
Subject key identifier: F6:08:0E:A0:6A:BD:71:57:0B:64:CD:14:D4:B8:0D:FA:4C:B4:6C:0B
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 0196CA605C6A0A95973FA7361A5F03289824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 05BE
Signing time: Tue 13 May 2025 16:00:34 +0000
Manifest this update: Tue 13 May 2025 16:00:34 +0000
Manifest next update: Wed 14 May 2025 16:00:34 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 95gBhN4ej5PlAh3oTsR2a0rN/CmdeVmVa+lTIxVjrEI=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:5c:6a:0a:95:97:3f:a7:36:1a:5f:03:28:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: May 13 16:00:34 2025 GMT
Not After : May 14 16:00:34 2025 GMT
Subject: CN=f6080ea06abd71570b64cd14d4b80dfa4cb46c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:56:a5:36:9c:13:a8:73:22:13:07:51:7c:
78:49:59:a0:e4:2f:52:bb:68:66:07:06:ba:67:43:
ca:b2:1a:54:c5:71:22:7d:71:3d:4d:71:ac:54:fc:
04:3c:e4:77:db:b4:a6:83:63:1f:cf:88:f1:fa:e2:
51:fb:48:c9:73:d2:c7:2b:53:7c:ca:d8:60:6f:63:
9a:3c:d5:e3:6e:a7:ac:dc:77:a3:9b:5e:bd:90:e1:
57:94:00:c5:1a:14:8b:47:57:7a:01:fc:ce:73:8c:
4a:6f:1b:95:ff:9a:df:89:e3:e8:84:55:3a:59:f5:
2f:14:5d:0b:90:30:c9:90:ca:8b:c9:c9:f4:27:34:
6d:a7:32:c1:d5:8f:7a:f7:67:37:f8:b0:a3:99:48:
c3:15:0c:41:0a:d7:c0:5c:f2:02:b3:4c:d3:6e:aa:
87:b8:af:6c:dc:c9:ca:44:86:72:94:a4:ad:2f:48:
72:64:bd:9d:07:ab:b4:00:e5:d3:91:08:f2:f8:05:
a2:7d:67:8a:ea:56:ea:a2:b3:6f:5e:cc:20:14:59:
dd:2d:b7:f2:f1:30:0c:52:f4:87:6a:d8:c6:28:21:
67:71:9f:a0:11:bd:bf:4d:1b:8b:4e:0f:90:77:68:
5a:67:90:ca:41:bb:f6:b0:54:30:ac:b0:af:1d:13:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:0E:A0:6A:BD:71:57:0B:64:CD:14:D4:B8:0D:FA:4C:B4:6C:0B
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:09:1c:e9:c3:11:77:bc:30:a4:20:eb:e2:b1:45:79:aa:61:
b7:9e:2f:33:c3:33:12:84:84:de:7e:85:e4:34:22:78:d1:e1:
f5:60:4c:98:98:45:7c:47:1c:9b:b5:db:87:16:12:e3:f3:25:
06:e1:57:01:9e:98:bc:66:91:21:92:03:9f:66:bb:b0:5d:30:
61:06:83:8a:a5:95:79:d7:05:e0:be:04:c6:c9:26:0f:36:14:
82:b3:b1:6e:85:14:aa:fb:18:6d:da:81:a4:0f:84:05:c8:6c:
46:cb:03:53:e7:6c:77:97:27:b7:33:ee:f0:41:bc:64:6c:5e:
20:68:8c:35:51:e5:25:25:ab:e6:4c:18:9b:c1:22:4b:90:a5:
f0:64:01:26:51:6b:ca:49:d5:78:06:5a:77:e5:12:c6:6f:87:
a1:be:71:08:14:8d:b1:12:9c:e6:2d:60:3c:3c:2a:3a:2e:d4:
5d:82:9c:90:ee:96:07:f4:be:1a:49:65:90:57:48:a9:c6:01:
76:b6:6c:94:23:6d:42:57:48:33:0a:2b:70:1f:82:d7:f1:1c:
8d:58:69:63:62:ab:64:21:d2:a5:f9:a7:14:96:32:44:b8:05:
85:4d:ca:31:fa:bc:64:1c:37:93:c1:c2:fd:3c:fe:d1:99:7a:
d9:9a:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:34:24 2025 by rpki-client