Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: b/Wn00RMFuJ3r8W+xw5mW7QRbnEqdWGu+C5llk6dR5M=
Subject key identifier: 6A:40:7C:77:9B:9A:E1:AD:95:2C:A4:20:E7:9B:35:1D:D9:E3:06:0F
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0198D4DFFFFC27A28C2E2F603E85D73C9F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 146A
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: 5OcDSI/Un9Nevrh1dvCtvpHwTRpKwMnrgf7XirNlQ9o=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ff:fc:27:a2:8c:2e:2f:60:3e:85:d7:3c:9f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=6a407c779b9ae1ad952ca420e79b351dd9e3060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:6b:99:ab:31:af:8e:7a:c3:96:1e:d1:f4:
e9:e2:a1:69:c1:18:32:de:a0:75:64:d3:bb:68:37:
f7:a5:32:bb:73:ff:26:7c:1d:c7:7f:29:0f:a2:2e:
8f:38:a7:19:24:6e:78:2b:02:8b:33:44:7f:c2:4d:
fd:9c:61:5e:72:35:95:7a:e5:13:a2:81:40:20:c2:
7b:fb:d4:6d:fb:c7:eb:8c:f9:87:ae:fe:83:7d:52:
d5:d2:21:6a:eb:af:5d:69:83:56:e5:80:9c:31:41:
21:3d:21:1e:4a:db:a8:f7:53:42:da:27:76:1a:1a:
d0:5e:2a:2e:24:48:a3:61:aa:20:33:5b:b9:72:0d:
cc:20:d3:68:29:a1:89:c4:20:d9:d8:8d:98:2e:3d:
69:eb:85:d0:84:2f:12:4b:89:fc:1e:de:50:cb:91:
21:0c:08:24:56:a7:7c:08:96:b3:17:78:84:37:77:
a1:35:86:6f:b7:96:9b:0f:96:71:e4:32:69:8a:90:
83:5d:2f:63:7c:e9:4d:9d:54:28:da:b3:fa:21:1f:
53:f2:4c:7b:ab:72:c2:fe:09:1e:fd:27:cb:d0:21:
1d:70:80:0c:42:59:e0:2e:7f:8b:2e:34:33:92:81:
ef:87:b0:51:9c:93:b9:b8:fc:09:53:fa:4b:07:35:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:7C:77:9B:9A:E1:AD:95:2C:A4:20:E7:9B:35:1D:D9:E3:06:0F
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:be:e8:93:b9:e0:94:72:ac:de:6d:c6:52:f0:ff:49:b3:
92:05:8c:b8:24:33:73:0e:b2:27:a5:a6:4f:ae:9b:59:15:2a:
62:97:4e:b5:ba:a4:9d:64:5c:65:a7:18:87:99:a1:d7:02:ab:
74:e4:1b:fa:a7:8d:81:eb:13:af:3b:ef:a9:8a:a5:29:99:5c:
30:8b:fd:44:9c:7f:21:53:d0:17:ea:64:9f:5c:e4:ef:08:e1:
9b:70:bc:8d:89:6d:1e:df:35:7b:f5:d5:ef:94:41:38:f9:b9:
d2:66:42:3f:28:0d:79:79:89:02:09:0a:74:61:a9:b2:67:92:
fb:78:2f:02:1b:d2:f6:dd:e9:1e:c0:30:c5:ad:08:7f:37:e0:
12:36:01:b2:e7:d6:06:9e:21:b3:4b:81:77:54:de:a2:00:cf:
85:76:52:87:63:40:23:ee:54:28:86:4a:e4:11:b3:f4:50:c5:
08:32:4c:84:90:5c:b1:1d:75:82:81:39:89:c4:85:41:ba:2e:
40:d1:00:02:3c:be:f1:8c:f0:f9:46:ab:e8:0f:3d:ca:b0:3c:
98:aa:6a:d2:b1:70:01:a4:4c:49:af:6d:95:c2:41:31:00:60:
b4:24:6d:e3:81:b1:15:bb:f6:59:a3:12:e4:b0:f1:46:0b:ec:
96:79:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:52 2025 by rpki-client