Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: pB5H0WRe2FdbctXaS5+ySczdlPe99JItJ8aFeUQIJGE=
Subject key identifier: DF:A2:08:45:95:A8:67:82:D9:08:24:4D:F3:A6:77:4D:D7:A1:A5:17
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 0196BD815588BDE7DAFE243D60167CD54243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 08B9
Signing time: Sun 11 May 2025 04:01:31 +0000
Manifest this update: Sun 11 May 2025 04:01:31 +0000
Manifest next update: Mon 12 May 2025 04:01:31 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: jIQPB4F0bnJIKTBrfN15GVM//+oGwYwufmOOI7XVczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:55:88:bd:e7:da:fe:24:3d:60:16:7c:d5:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: May 11 04:01:31 2025 GMT
Not After : May 12 04:01:31 2025 GMT
Subject: CN=dfa2084595a86782d908244df3a6774dd7a1a517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:fa:07:8b:d3:8d:91:aa:32:a3:4f:ff:3c:
60:ca:2d:0b:04:41:e0:a8:1b:39:f1:42:77:87:c7:
7d:d2:46:26:c3:32:28:a9:29:ce:5a:1a:84:cd:80:
c9:ba:32:72:b2:5a:85:a3:ab:d4:93:03:13:bc:53:
63:27:ef:98:ca:d1:bc:80:23:29:a9:82:8f:c1:1c:
2f:22:70:93:94:62:9e:a8:60:b7:d6:ab:72:48:99:
a9:e8:eb:2d:51:03:3c:e2:e5:f5:13:91:d3:46:e4:
22:14:d5:4d:01:fc:81:52:72:c9:1b:df:d9:9f:40:
df:3c:e5:66:af:12:3a:58:70:0a:f8:86:97:ea:ca:
6d:92:2b:e2:99:d1:01:fa:d4:89:3a:c8:75:d3:ab:
cd:1f:d5:2b:38:b9:8a:d4:58:ea:5e:a9:d8:26:57:
b2:32:70:d6:f5:ae:86:a1:1e:22:7b:86:55:fb:87:
d6:a5:bd:d6:05:f1:54:d8:88:7d:cf:f3:06:b0:e3:
8d:34:b8:9d:05:11:46:27:36:f0:39:72:78:18:af:
f4:fc:e6:5e:f3:bb:f5:8e:3e:3e:3e:2b:f6:13:a1:
4b:54:fa:33:2d:4e:a2:74:27:13:b9:53:8b:62:7d:
5a:c2:48:71:05:17:aa:0e:87:2f:a3:b0:cb:72:0d:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:08:45:95:A8:67:82:D9:08:24:4D:F3:A6:77:4D:D7:A1:A5:17
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7c:ab:ee:9e:a1:7e:e0:d4:af:6e:49:d4:e7:f7:6c:90:a7:
1c:36:f4:b1:f0:3e:b0:9a:35:77:5b:2e:c5:f0:f1:6e:f5:f8:
64:e6:78:8a:fb:06:df:9e:ea:31:92:18:a1:46:67:f0:cb:fc:
b0:ce:5b:68:c9:00:a7:46:fe:97:ef:48:8a:27:b1:f3:9a:0e:
aa:67:c6:11:79:f6:9f:dc:27:9c:fe:5d:6d:24:27:52:15:f2:
df:2a:e8:e3:90:a5:64:01:51:07:b6:08:b0:c5:c1:d7:ae:2b:
44:8f:32:94:ef:af:4f:72:78:d2:d6:58:8a:d3:d6:44:32:19:
94:5a:d2:ce:ce:54:7a:02:c2:e9:5c:b6:44:15:27:1f:b6:f9:
53:d0:7b:aa:0c:8a:c5:7f:71:f9:cc:8b:a8:c2:e9:f8:f9:e7:
ad:9a:a9:55:6c:86:7e:6a:c9:d4:2e:13:3a:11:45:8f:de:47:
3b:49:5a:af:9f:39:db:fa:22:ec:58:23:8b:41:c4:a3:f2:a1:
63:a6:69:a3:08:e2:01:04:92:30:eb:dd:43:e0:72:ba:d1:6a:
99:2e:f4:9a:27:da:83:1d:6b:c9:0b:1f:a5:9d:ae:d5:0d:8a:
71:95:3c:bf:25:4b:c6:9b:52:09:13:39:1b:68:35:55:33:65:
a3:53:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:29:58 2025 by rpki-client