Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: 88tzvPjH+zGczMwW3e1aA+OG4uRLYqN5aekoufHq9K0=
Subject key identifier: 6E:C8:20:10:18:F3:22:43:F6:79:9F:3A:25:4B:24:62:80:0B:72:59
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019760CB912FC32E6A129EDB95E145B359C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 1274
Signing time: Wed 11 Jun 2025 21:00:42 +0000
Manifest this update: Wed 11 Jun 2025 21:00:42 +0000
Manifest next update: Thu 12 Jun 2025 21:00:42 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: FI0tohHaPh/efE3Kkh2KO2AUfr+cSke/bEIrvUq6n60=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:91:2f:c3:2e:6a:12:9e:db:95:e1:45:b3:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jun 11 21:00:42 2025 GMT
Not After : Jun 12 21:00:42 2025 GMT
Subject: CN=6ec8201018f32243f6799f3a254b2462800b7259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:d8:9d:57:4b:16:1b:13:42:fa:dc:5b:f2:
df:92:37:77:27:ca:da:ae:4b:71:88:00:b7:e3:e0:
14:02:58:13:6e:a6:13:35:ef:07:d1:9e:2c:f1:02:
04:b6:e7:04:e1:36:b4:ce:48:24:40:c9:ed:4a:1f:
b5:9e:80:c9:b6:c7:c0:03:7b:9e:07:9e:19:83:fa:
33:cf:86:a5:71:5d:98:2d:f6:b4:ba:50:e8:a4:df:
9d:b0:ec:0f:aa:f7:da:a5:7e:26:db:d5:e7:3b:84:
73:91:8f:f3:48:cd:b4:a1:a2:98:3e:fe:46:dc:d9:
27:26:db:7c:96:53:83:ba:9b:28:ae:1a:d9:84:fd:
ea:dc:11:93:26:bf:a7:50:ef:50:e2:b9:56:f1:3b:
d3:b5:37:ae:65:08:51:fb:a5:76:e0:d4:ee:3a:a3:
22:19:90:2b:a3:0e:e7:c9:b0:49:b5:0c:5c:15:b1:
10:7e:df:83:d7:ce:d3:9a:0d:8c:48:30:8a:ff:ef:
b6:41:ea:87:cd:09:74:8c:67:48:be:64:7c:a2:b1:
71:57:02:fd:7d:62:d5:40:09:72:0d:32:ae:32:d0:
53:4d:94:9e:ac:41:b9:47:23:9c:72:29:46:90:52:
cd:2a:a5:a5:0e:14:7a:9b:18:58:fb:67:5a:af:b0:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:20:10:18:F3:22:43:F6:79:9F:3A:25:4B:24:62:80:0B:72:59
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c1:65:52:48:ad:b2:57:32:fe:4c:1b:be:64:34:53:42:9c:
4f:71:70:7c:98:36:8d:eb:eb:2b:35:4e:ce:35:b0:43:e1:1c:
05:e0:59:e7:69:3d:75:cd:03:61:aa:79:0c:ee:6a:4b:d2:a6:
0d:a4:e6:a4:34:44:7c:4f:26:d6:25:68:6c:19:84:03:0c:33:
ad:41:e0:b2:46:b3:df:86:ef:1f:0f:c2:d0:6c:ae:e3:ed:07:
3e:1e:27:e0:91:4f:a8:be:cd:e6:33:b5:8d:bc:aa:80:7d:e5:
76:1f:d0:f9:f5:56:e0:4a:b2:6d:55:fc:68:95:b9:74:5d:1f:
c4:40:bc:d1:67:de:a2:6e:2e:be:7f:58:77:ae:1e:8d:87:47:
0c:34:94:f1:18:b1:37:40:39:20:38:82:1a:bd:33:70:ba:96:
76:36:8d:53:4e:e5:45:91:d5:5b:e6:d2:bd:d3:94:5a:f0:82:
88:51:91:3e:51:04:f3:fd:51:c8:ce:84:79:a2:52:2c:f4:75:
e5:5c:33:d0:39:d2:45:59:0a:87:8b:0a:a2:90:17:d5:04:61:
21:83:85:36:3a:be:ac:f8:86:82:5d:be:d2:79:0a:85:40:80:
de:03:72:8f:9e:8e:39:b2:08:5e:6e:2f:46:18:d9:8a:d3:5f:
45:19:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:12:15 2025 by rpki-client