Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: KMFUKADwdRfEuNSN735596n0i6vhLPWd6wgoGQo2uBA=
Subject key identifier: B6:F2:59:71:DA:F0:03:DD:C1:B1:09:3A:7E:4F:EA:D5:52:29:B4:E2
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0199FC5829D0B24BB8639B3BF1F7FAFBD2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 1503
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: R6RqvL48qttn5hfLtZXDr71/32xVba5OiAzSBdILrxc=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:29:d0:b2:4b:b8:63:9b:3b:f1:f7:fa:fb:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=b6f25971daf003ddc1b1093a7e4fead55229b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:cc:c2:2e:95:27:3a:de:67:6c:ea:f3:4a:
01:a9:c1:9c:7b:77:f7:20:a4:69:41:96:d0:d0:e1:
ea:28:1f:5e:2f:88:62:89:c8:c0:fa:27:00:02:a3:
14:e1:e4:59:d2:21:1d:4a:c5:a1:82:99:2c:70:e4:
cc:7b:48:af:c4:7c:5a:5d:78:14:1f:99:56:b1:89:
cb:a8:a2:15:c2:53:8f:e2:8c:6d:4a:00:2c:5b:6e:
ad:44:e9:49:f7:0d:68:84:3e:42:e5:4a:01:b3:18:
99:5a:1c:57:ba:db:82:44:d2:23:9e:41:e4:fb:d1:
48:1b:16:c1:79:6f:79:77:b9:af:06:e6:9b:2c:d6:
1e:be:b9:b8:6f:02:fb:19:57:cf:5c:e0:db:cb:f0:
24:d1:63:04:cc:31:82:75:bd:58:d9:b1:f0:fb:b4:
d5:55:03:5c:db:26:31:85:54:6f:60:73:0c:50:16:
68:9d:9e:31:6b:94:8b:48:4b:06:30:f8:ac:33:ce:
3a:6d:6d:57:69:6c:85:8a:ac:51:1b:a8:6c:76:bb:
4e:8b:03:e6:73:c4:6e:b5:5c:2f:9a:11:7d:4c:fa:
50:3b:9e:17:ca:1e:3e:24:15:01:0d:1d:d8:ed:ef:
18:ed:4d:0f:26:59:8b:a0:16:9c:f0:f9:70:4f:e7:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F2:59:71:DA:F0:03:DD:C1:B1:09:3A:7E:4F:EA:D5:52:29:B4:E2
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:39:8e:e3:5b:4d:b2:06:4d:2f:34:db:00:60:25:79:74:84:
d0:d5:11:a1:59:3c:6e:5d:91:39:96:ec:70:98:99:16:86:b1:
be:e3:c8:9e:96:91:e8:a3:5d:26:2b:6a:26:3b:22:97:74:00:
5d:02:eb:80:fb:eb:94:66:55:a9:fd:05:df:75:15:f4:63:df:
90:4f:b6:21:d1:f3:d8:e9:66:f0:fa:9b:16:ec:40:cc:b4:08:
69:1e:c1:32:b7:5c:b7:e5:5c:d0:48:7d:02:b5:e9:36:74:25:
81:4e:95:3d:6d:7c:32:04:de:5f:79:95:27:27:d7:26:e9:4e:
db:6d:3b:be:2c:c8:37:7d:40:9f:70:74:34:c5:4f:b6:f8:e5:
cc:84:e9:9c:e9:07:fa:cb:47:a2:e2:17:19:c7:97:a0:da:45:
5a:ee:dd:bb:f2:dc:cf:6a:a2:3a:76:8f:83:0d:a6:36:43:11:
43:1b:b9:1a:07:a9:b6:3e:ee:07:ff:25:b2:b7:37:34:6e:32:
4e:90:29:0a:77:9c:05:29:5b:56:b3:c2:13:c2:fa:ab:f5:53:
9e:47:db:df:d5:e9:17:0f:66:4d:12:f6:5e:ce:83:76:5a:e9:
37:f5:13:fb:e1:a2:9b:3a:c3:7b:17:b4:67:18:7f:4b:3e:b3:
f3:c1:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:56 2025 by rpki-client