Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: f7NGZjPd43ViACt9rMSXh/+K+8tuTw1t/n623yQ5Ifo=
Subject key identifier: B0:30:E9:B8:84:7F:2C:BB:64:DE:2B:ED:A4:3B:60:4D:86:88:A7:CB
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0197B70E9935133A44206C06EDA8DE335D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 13D6
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: xh1w8g50rFQb7HAjfq9SUVTi8SJUcL508dPHz/ff9D4=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:99:35:13:3a:44:20:6c:06:ed:a8:de:33:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=b030e9b8847f2cbb64de2beda43b604d8688a7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:ca:70:1d:1e:bb:c9:14:72:b1:69:5e:8a:
58:9c:94:c2:e7:c6:a5:0b:fc:36:88:74:8c:9e:8b:
33:13:89:99:19:0f:d8:50:af:af:c0:60:1a:d9:de:
8a:5d:f4:10:ba:a9:5e:4b:45:74:f1:ae:68:6f:a2:
8e:bb:09:e3:d5:56:4b:ae:44:09:fe:ce:e5:17:38:
4c:15:0f:43:9e:e8:86:58:a6:a0:07:92:b1:f4:58:
89:c4:ab:9c:08:ce:a6:95:8a:19:e0:ed:08:a5:22:
63:56:54:60:d6:5f:02:6c:54:29:f6:26:f1:eb:ad:
84:d7:1d:31:0e:2c:e6:c4:7d:4f:06:e6:48:cd:c3:
e3:80:e3:43:1f:5f:f2:2b:ed:04:6b:8c:0e:da:6d:
9f:96:ce:f8:5f:d9:9b:f9:b6:6c:b2:93:30:2b:2f:
bf:0d:dd:e5:dc:b3:6f:03:58:d1:84:e8:6f:2a:d1:
8f:f8:3b:c8:1c:63:f2:fc:ef:c5:9d:a3:0a:b9:fc:
27:23:78:e0:fc:4e:37:51:d1:9e:bf:01:a6:73:7c:
d6:50:2d:05:ad:7f:4a:2e:85:45:a2:00:36:4e:35:
bd:54:a5:29:7b:87:74:3a:4f:d5:3a:d1:c0:c8:3a:
9b:72:a7:55:a4:14:80:01:3f:b5:f7:e1:17:99:e8:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:E9:B8:84:7F:2C:BB:64:DE:2B:ED:A4:3B:60:4D:86:88:A7:CB
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:4e:5d:9c:b9:1c:e4:66:88:6b:8f:9b:0c:ea:6b:f3:3b:
2c:39:3d:af:95:11:db:08:ba:ae:94:9a:a8:65:5d:54:12:f9:
41:d3:3a:fe:ba:fa:32:63:9a:df:90:53:0a:eb:e0:38:cd:1e:
f4:9e:47:fb:9b:ed:a9:9f:a9:97:7e:dc:6f:5b:43:04:95:a7:
ba:a4:b4:7c:cd:6b:c4:df:92:25:1b:d4:a7:88:8d:b5:14:bc:
3e:06:8f:8b:bc:d3:72:43:0f:f9:22:f5:33:27:12:2b:b9:4c:
1c:ed:4b:b4:b0:3e:6d:a9:b3:d5:84:c3:ae:13:72:08:e4:f9:
3c:7f:8a:25:d6:85:30:75:89:59:53:93:88:10:f4:bb:5c:d1:
34:2c:23:26:b4:85:7d:ca:5e:87:00:71:c0:73:e9:dc:53:48:
ec:79:0f:dd:2a:05:89:d5:0e:44:bf:94:af:9a:ae:d8:d0:a0:
c2:07:d4:a8:62:2e:1b:5f:69:2f:5f:f6:88:93:19:f4:c7:32:
bd:0e:11:9b:03:3d:75:c8:b6:74:a6:88:03:94:37:84:77:6d:
e9:06:3c:f2:5e:20:52:85:df:96:7e:6f:db:65:2a:72:c7:0a:
bb:ee:0e:f6:dd:55:75:66:c5:3a:b7:98:bd:0c:46:fb:2e:ea:
51:48:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:28 2025 by rpki-client