Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: iGKCqHxUq+2G7OKSM3RmO92b/Md1ZyuKBQZaAPJY2Vs=
Subject key identifier: D8:08:DE:B5:5D:5B:2D:EC:B6:E3:0F:2D:A0:05:80:78:7C:64:8C:F8
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0196BDEE831862105A8ACD6948189DB5A2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 1355
Signing time: Sun 11 May 2025 06:00:47 +0000
Manifest this update: Sun 11 May 2025 06:00:47 +0000
Manifest next update: Mon 12 May 2025 06:00:47 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: mY5l61HlaCha3p3WYteUCkFpRsEQnxNFtMz1+1/i0bA=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:83:18:62:10:5a:8a:cd:69:48:18:9d:b5:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: May 11 06:00:47 2025 GMT
Not After : May 12 06:00:47 2025 GMT
Subject: CN=d808deb55d5b2decb6e30f2da00580787c648cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:67:52:5a:2e:9c:c5:df:c6:bd:bd:f4:df:
cc:ee:0e:be:dc:f5:e1:e1:9c:bd:1a:aa:47:12:33:
d6:28:b1:4f:eb:41:f9:42:37:7e:b1:c2:74:e8:03:
36:47:e1:85:2b:16:6b:ef:47:6c:1e:be:7e:cc:ea:
91:03:18:76:6f:66:26:6f:7f:74:4c:38:39:99:35:
5a:19:a6:17:bd:c3:fa:a1:f6:54:eb:8f:a0:4d:81:
5c:1f:ff:40:9b:bd:9b:a3:b5:82:24:92:1a:7f:01:
ff:c6:53:3c:c1:70:c1:7c:4e:0f:3e:6d:d7:32:04:
c0:9a:70:3a:51:2b:61:a8:0a:20:21:9d:05:36:b7:
02:18:00:6a:57:b4:07:b3:ee:56:21:3a:49:d5:44:
38:8d:e3:6e:ab:17:56:4b:c0:9e:d4:dc:39:66:f8:
c5:3e:4a:bd:a5:44:1b:31:1c:dd:24:41:be:eb:30:
2f:53:1a:dc:5b:43:ef:10:75:cf:83:18:55:a6:ef:
ec:ba:cf:f6:0a:67:d5:1e:cf:c7:65:fb:ac:49:5d:
3a:b3:67:16:10:11:bf:e4:1d:77:dc:28:8b:61:87:
41:52:9e:80:97:e3:4f:f9:f3:e4:46:80:60:e2:71:
59:ed:8b:fc:93:36:d4:10:3a:af:72:4d:0b:37:d5:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:DE:B5:5D:5B:2D:EC:B6:E3:0F:2D:A0:05:80:78:7C:64:8C:F8
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:f4:85:43:d9:f3:68:9e:14:79:aa:20:e0:b7:6e:d5:5a:
d9:59:7e:d5:2f:0f:fc:8b:8b:1a:ef:b0:96:6b:0f:44:38:81:
50:c5:35:9c:69:1a:ae:a6:a2:b1:c1:2e:3b:93:4e:54:43:5b:
f6:ff:76:f1:45:7a:1d:2f:1a:e7:32:92:ef:c2:34:4b:62:4c:
07:43:74:a5:b2:74:14:a5:94:fd:17:6d:d5:8b:73:c8:21:20:
08:51:9c:d4:42:17:e6:7c:86:20:09:69:70:b1:2d:6b:82:ab:
bb:0e:9b:a0:02:94:f5:1c:87:c2:16:8b:b5:ad:cb:2c:5d:85:
d9:58:55:ff:b3:00:73:b5:e9:2a:c6:b2:66:39:38:85:11:8d:
31:36:88:e2:33:03:c5:ae:00:f4:c4:83:f6:72:cf:51:df:3f:
b3:79:3e:1b:60:03:e5:9e:eb:f3:6f:6f:f0:43:a4:e2:29:87:
49:da:bd:d4:65:3b:cf:ce:c5:24:56:ae:06:65:5a:5d:5b:bd:
0f:ce:2a:d5:d7:37:e1:ca:7a:25:21:1f:66:4b:25:3d:1d:9d:
5b:4b:56:3c:15:f2:3f:c2:43:d8:6d:38:88:e5:4d:cc:e0:7f:
ea:ae:90:b9:9c:ee:00:af:da:aa:b8:79:15:e1:2b:d3:d6:60:
93:fa:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:28:59 2025 by rpki-client