Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: qTSBoePRj7vwNquWW7FwlRsLXtKUwkPoSDcckygr4L8=
Subject key identifier: 16:F8:D0:2E:78:5D:84:3C:EE:30:A1:4A:A9:C1:96:67:5E:13:4B:20
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01975CEEBCF55406DCEEE9ABAAA6A7DB012D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1272
Signing time: Wed 11 Jun 2025 03:00:39 +0000
Manifest this update: Wed 11 Jun 2025 03:00:39 +0000
Manifest next update: Thu 12 Jun 2025 03:00:39 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ip6TRXgXRcjOY3LkuS9ulOAjSh7xLoN907EwbHmhfvo=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:bc:f5:54:06:dc:ee:e9:ab:aa:a6:a7:db:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jun 11 03:00:39 2025 GMT
Not After : Jun 12 03:00:39 2025 GMT
Subject: CN=16f8d02e785d843cee30a14aa9c196675e134b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:8a:89:e3:a0:cd:a9:bb:7f:17:ac:b6:60:
a7:55:11:0c:e3:b9:2a:4a:a1:b6:b1:2a:4a:5a:fd:
36:18:95:d5:b7:37:d7:36:95:f1:57:72:a9:e9:a2:
48:10:65:38:d5:cf:dc:7d:1e:f5:57:5d:08:a0:25:
e9:3c:71:76:fc:0c:4f:82:32:73:b5:c6:cc:18:9b:
e1:61:4e:e8:6d:bd:9f:58:e7:54:16:7a:05:57:2c:
0c:c2:96:80:bf:f7:ba:0c:3a:73:52:d7:31:00:8e:
c0:73:5a:7b:87:b9:0a:c1:08:5a:b1:9c:a6:4c:90:
26:f4:ce:ed:66:c3:f4:e4:d0:a3:1c:d1:52:09:8a:
f9:43:4d:6a:54:c0:3e:9d:9d:2a:db:5d:8a:05:58:
25:be:97:e9:4a:0d:19:74:23:d4:24:a3:bf:a9:59:
6b:ed:15:d1:64:fc:af:10:59:94:b0:11:da:17:6f:
7e:a1:20:13:27:83:86:e8:1f:59:86:e7:dc:4b:ac:
f5:c5:cf:08:e8:ee:43:d0:83:25:d0:a9:b8:ce:de:
1e:29:77:c9:93:7f:19:25:13:27:aa:0e:d5:d9:17:
50:fe:66:2b:2e:71:b0:46:41:88:41:fb:55:69:18:
b2:41:10:0f:a7:cb:c0:98:eb:65:a1:2c:3c:3c:45:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:D0:2E:78:5D:84:3C:EE:30:A1:4A:A9:C1:96:67:5E:13:4B:20
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9c:0d:66:95:9f:b1:6c:63:8e:f9:27:51:4b:ac:4c:a7:36:
0b:07:94:d3:64:2c:b8:27:88:4e:4f:e7:24:10:dd:3b:3a:a5:
69:d7:56:7c:fc:20:44:53:d0:96:b4:d8:9c:e0:03:db:94:0e:
39:e5:2f:72:73:bf:b4:f7:95:d2:c5:72:86:a9:38:6f:49:be:
e8:57:93:ee:0e:8e:3c:19:4f:39:e0:24:71:be:a9:b8:c4:e7:
f2:47:99:47:88:21:0a:79:4f:b1:1b:f1:4b:12:a6:01:fe:e0:
21:18:12:b6:cb:17:33:b3:65:43:4e:19:17:03:6e:c5:5d:10:
26:84:1c:ab:22:ea:b1:0c:ce:d2:12:b9:45:e0:14:d0:44:b2:
c6:d1:fb:ff:1a:6d:ca:07:e3:a2:9e:b2:08:af:42:d1:24:23:
6d:72:ea:3e:f6:c4:88:96:40:6c:46:e2:d3:7a:78:09:95:57:
48:9a:76:ee:a2:2b:59:57:6c:a0:6e:d5:04:cd:5a:d7:58:68:
34:7e:3f:92:d4:4a:55:dc:a1:a5:bb:db:ce:81:a1:b7:23:e0:
de:da:b4:4a:e8:a1:9e:a9:94:07:11:ff:4a:fe:a4:db:eb:f0:
8c:01:95:f5:2b:89:7d:cf:bd:e4:e9:28:42:54:15:40:45:d1:
41:96:18:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdc7rz1VAbc7umrqqan2wEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjUwNjExMDMwMDM5WhcNMjUwNjEyMDMwMDM5WjAzMTEwLwYDVQQD
EygxNmY4ZDAyZTc4NWQ4NDNjZWUzMGExNGFhOWMxOTY2NzVlMTM0YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwWKieOgzam7fxestmCnVREM47kq
SqG2sSpKWv02GJXVtzfXNpXxV3Kp6aJIEGU41c/cfR71V10IoCXpPHF2/AxPgjJz
tcbMGJvhYU7obb2fWOdUFnoFVywMwpaAv/e6DDpzUtcxAI7Ac1p7h7kKwQhasZym
TJAm9M7tZsP05NCjHNFSCYr5Q01qVMA+nZ0q212KBVglvpfpSg0ZdCPUJKO/qVlr
7RXRZPyvEFmUsBHaF29+oSATJ4OG6B9ZhufcS6z1xc8I6O5D0IMl0Km4zt4eKXfJ
k38ZJRMnqg7V2RdQ/mYrLnGwRkGIQftVaRiyQRAPp8vAmOtloSw8PEVd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb40C54XYQ87jChSqnBlmdeE0sgMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJwNZpWf
sWxjjvknUUusTKc2CweU02QsuCeITk/nJBDdOzqladdWfPwgRFPQlrTYnOAD25QO
OeUvcnO/tPeV0sVyhqk4b0m+6FeT7g6OPBlPOeAkcb6puMTn8keZR4ghCnlPsRvx
SxKmAf7gIRgStssXM7NlQ04ZFwNuxV0QJoQcqyLqsQzO0hK5ReAU0ESyxtH7/xpt
ygfjop6yCK9C0SQjbXLqPvbEiJZAbEbi03p4CZVXSJp27qIrWVdsoG7VBM1a11ho
NH4/ktRKVdyhpbvbzoGhtyPg3tq0SuihnqmUBxH/Sv6k2+vwjAGV9SuJfc+95Oko
QlQVQEXRQZYYoA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 10:34:06 2025 by rpki-client