Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: 60WwEurtRco7UqqS846C2YhX544yp/yISERXHWQ0l54=
Subject key identifier: D2:65:4F:9F:4D:B7:12:4E:41:74:DA:A3:5B:27:0B:BE:BF:C5:92:57
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0197572385E4E9F5C5D35F67D8FABF0DF5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 126F
Signing time: Tue 10 Jun 2025 00:00:35 +0000
Manifest this update: Tue 10 Jun 2025 00:00:35 +0000
Manifest next update: Wed 11 Jun 2025 00:00:35 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: bGVf6d040/ImxIPgMQ/43/+hv6kMcrPzJ5oxJ42uXz0=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:85:e4:e9:f5:c5:d3:5f:67:d8:fa:bf:0d:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jun 10 00:00:35 2025 GMT
Not After : Jun 11 00:00:35 2025 GMT
Subject: CN=d2654f9f4db7124e4174daa35b270bbebfc59257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:27:3a:9b:93:9f:9b:47:66:ef:18:f5:98:
41:7d:4c:21:e9:f4:11:e0:a2:e0:72:e6:33:9b:f7:
88:53:bc:c3:be:d1:f8:9d:65:98:c8:ae:54:cc:00:
0b:00:36:4a:a0:7c:e5:af:9d:de:bd:b0:da:4d:ab:
ca:3f:98:a6:64:2e:b2:83:c4:d8:42:5b:10:a6:c3:
89:94:b2:54:3b:f3:04:e0:bc:f5:fa:2e:bb:e8:16:
48:85:36:30:a5:af:6c:de:36:9e:c1:f0:50:1f:f3:
ed:41:a3:49:34:31:63:62:65:91:98:5e:9f:ea:2b:
2b:eb:5a:44:fb:2a:ed:d0:f3:12:3d:8f:21:ea:a5:
56:9f:89:8a:6d:c3:f8:a6:ec:a7:c0:d9:13:29:f3:
39:9e:d2:3d:d6:09:59:08:00:dc:31:26:27:02:d0:
9b:87:17:60:61:e1:67:5f:ec:27:7e:b8:64:19:57:
c7:f7:c6:e7:a5:4a:bb:62:88:d6:32:8e:24:52:bd:
5c:30:23:d6:07:a8:d9:90:f3:02:7a:f9:92:07:95:
fa:ea:9b:d5:99:e0:dd:08:a6:de:ca:b4:99:36:a5:
34:a2:4f:80:c1:b9:69:07:98:30:30:49:fe:0b:8f:
f4:29:7d:28:1e:48:78:35:fa:72:da:8d:1e:fd:95:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:4F:9F:4D:B7:12:4E:41:74:DA:A3:5B:27:0B:BE:BF:C5:92:57
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:87:0f:75:8f:38:c8:25:7a:b5:64:a7:bd:45:5f:64:53:
40:3f:90:e6:90:aa:65:9f:41:ed:cc:c6:b7:58:e7:f8:21:1e:
67:d3:1c:58:7b:4f:db:c7:29:f0:44:17:95:a6:63:2c:f8:e4:
75:fc:8a:1f:80:cb:3c:ae:7e:df:ff:af:6c:a0:b6:50:7d:23:
f3:1b:97:d2:fb:63:5d:31:57:44:55:ab:77:10:64:60:6c:87:
b0:64:cb:69:3f:dd:9c:3c:f1:3d:d8:0b:78:c9:0a:03:61:21:
ea:e3:0a:ea:6b:91:2f:dd:4a:b0:7c:3b:31:77:50:c5:d2:93:
7c:cd:ec:f8:09:f0:1a:b2:4d:8f:c9:4a:e7:34:5f:03:10:f0:
2d:fa:45:ee:bc:6d:73:11:4e:53:ee:99:1f:67:10:1c:4f:d8:
61:69:07:c3:ae:98:37:24:79:8d:6a:3e:ab:7d:86:b1:c8:94:
00:c8:2b:3b:46:ec:6c:8a:b1:25:f1:d1:7d:5e:2d:5b:53:21:
1f:ba:05:b0:f4:ac:c3:dc:54:71:f8:27:9e:ea:86:6d:da:cf:
99:d6:ae:c3:44:88:5a:04:53:08:49:f7:45:e0:8e:1e:8a:92:
24:97:55:42:3d:3e:11:71:38:5e:b6:c0:e4:e0:24:93:39:62:
5c:65:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:01:18 2025 by rpki-client