Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: YMDTJr5AZ4pL+3+x4DCwYCG+nWKpSXbhJLBXJhnYlUo=
Subject key identifier: 4F:90:2B:E4:72:8E:AD:47:E4:30:52:57:60:61:6B:62:8C:41:33:8A
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 0198D999A01F79E6DE508A0EC492A541ED57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 06CF
Signing time: Sun 24 Aug 2025 01:03:00 +0000
Manifest this update: Sun 24 Aug 2025 01:03:00 +0000
Manifest next update: Mon 25 Aug 2025 01:03:00 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: ArQdCt2qLMFyOuSImlRTp3sD7q+kS2x1WuL0E2Px8IE=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:a0:1f:79:e6:de:50:8a:0e:c4:92:a5:41:ed:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Aug 24 01:03:00 2025 GMT
Not After : Aug 25 01:03:00 2025 GMT
Subject: CN=4f902be4728ead47e430525760616b628c41338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:0e:68:15:83:71:4a:bc:4f:05:35:7d:22:
f9:ee:77:db:0e:27:9a:6a:43:1c:92:44:7e:87:d7:
c4:42:21:96:53:4e:cb:fd:f3:1c:b9:73:86:19:bb:
bc:9f:3f:04:d8:52:c0:0c:2b:30:79:c5:89:e7:53:
a0:86:8f:17:53:5c:0b:05:fc:a8:9a:43:42:3c:4f:
6f:45:ff:9c:1b:45:d5:1b:c9:51:74:45:0d:e4:bb:
f3:79:d6:5e:4e:e1:e0:a1:5a:f6:ca:69:d8:3a:54:
0a:d8:b8:bc:74:aa:84:94:f1:f7:02:b6:14:33:eb:
45:b4:e1:f7:50:9b:9b:26:3e:dd:6f:42:32:80:be:
32:b2:72:38:3f:0d:b0:41:fe:f5:70:30:d9:a2:90:
ee:49:94:6e:ec:a1:ea:07:ef:85:c5:80:e3:c2:d1:
46:be:c5:a6:b1:f2:88:dc:0d:24:f3:c7:e5:66:37:
db:12:54:b8:42:a1:ce:25:5f:8d:f7:ac:e8:56:54:
25:54:f3:3b:44:d4:7c:78:58:8b:a0:c3:fa:37:ec:
86:8d:d1:16:e4:3d:b2:b6:94:a8:e5:5e:f1:85:7c:
e4:b3:27:ba:1b:37:60:f9:78:b8:44:6f:f3:61:da:
a1:8a:43:e5:e5:84:e1:d1:cf:d3:cc:5c:11:2f:28:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:2B:E4:72:8E:AD:47:E4:30:52:57:60:61:6B:62:8C:41:33:8A
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d7:a1:be:be:e8:12:1f:63:3d:bf:bc:3f:15:eb:27:98:fa:
5a:04:eb:2e:86:64:fb:cc:59:3f:73:09:c9:7a:c8:5b:d6:99:
f7:e0:f7:4d:af:b6:b7:00:99:fa:74:16:29:5f:d2:fa:d5:9f:
0a:e0:39:53:36:a6:0e:2f:a9:42:7c:91:57:64:da:9b:f0:ce:
36:6d:92:bd:31:e2:83:d1:a4:47:bd:fb:c2:ef:61:03:4a:e6:
87:7f:eb:a1:3b:2b:28:92:75:85:e9:45:de:23:5c:6a:8b:1c:
e0:f2:54:ac:33:8c:b2:33:3e:8a:a1:c7:41:ef:7a:78:23:67:
1c:10:57:cb:c9:3b:ce:7c:8d:a9:c6:e8:fa:e6:25:f6:9c:1d:
22:53:9c:b3:b1:23:ba:ed:c0:46:c4:09:dc:91:8c:48:5f:85:
c5:2e:d1:ab:fb:ef:3f:4d:c8:d9:3d:7e:30:f0:24:aa:36:e8:
13:a0:fb:ed:c2:0e:8b:6f:2b:5d:3d:b1:26:9a:37:bd:32:10:
d7:46:3e:bd:9f:52:43:39:d6:db:49:d0:56:55:4f:b4:1a:f3:
b4:e1:8e:d3:0e:fe:88:e7:34:e3:8f:91:93:7c:0c:1c:8c:eb:
35:79:2f:6a:50:33:c1:ac:5e:d5:5b:70:29:5e:0f:34:73:0b:
75:60:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:03 2025 by rpki-client