Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: +8A1yZxfjSunHKB7oF+Lq6TYJZQgGFWv4ixcAvblGwM=
Subject key identifier: B9:08:95:CB:AD:86:4D:9B:8C:A4:34:82:71:2A:03:B7:D9:FE:DA:35
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019923D5F27361999788EB7522EA42CC00E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 0293
Signing time: Sun 07 Sep 2025 11:00:47 +0000
Manifest this update: Sun 07 Sep 2025 11:00:47 +0000
Manifest next update: Mon 08 Sep 2025 11:00:47 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: kqodsTeddb5edvxBt3zGzbFSFGJCqsDxyU0a4pVm8sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:f2:73:61:99:97:88:eb:75:22:ea:42:cc:00:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Sep 7 11:00:47 2025 GMT
Not After : Sep 8 11:00:47 2025 GMT
Subject: CN=b90895cbad864d9b8ca43482712a03b7d9feda35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:0b:45:dc:47:aa:87:23:4e:32:c1:3c:7f:
a8:dd:92:79:1d:47:a2:44:44:a9:0e:55:2a:71:48:
f0:7b:f1:89:d4:ee:f3:67:77:36:f0:6c:32:23:92:
de:07:ab:d0:0a:56:6c:bc:b2:26:7e:e7:42:2a:c8:
b5:a8:21:e6:1f:88:be:3b:51:e9:3f:7e:a8:e1:8f:
52:7b:77:4f:17:e0:72:1f:4f:c1:89:bb:53:18:1a:
21:96:1b:9d:4a:aa:0a:ce:20:84:fa:33:d8:81:65:
f4:e7:aa:46:ba:79:b5:6e:ac:bb:35:7f:73:10:74:
20:30:f1:58:68:f1:57:2a:08:b0:7e:9c:69:df:c1:
35:8f:60:11:08:25:15:11:b0:e4:e3:81:fc:7d:50:
ee:c9:54:aa:be:79:61:d0:e4:8b:00:c3:37:bf:76:
8b:45:2a:02:f6:09:f4:d2:d7:6b:5e:b9:0b:db:2a:
ef:06:70:b8:97:fd:60:84:59:47:fb:62:d0:06:f3:
60:a0:66:9b:3b:98:c6:a4:21:3f:39:2b:ad:e6:34:
06:39:d3:3f:bf:cb:bd:8e:da:d3:63:82:7d:2b:b0:
6d:52:73:b0:ea:db:73:54:a3:26:0a:53:92:57:c6:
f6:ac:2a:46:7d:93:3b:db:c9:97:74:5b:22:d0:ae:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:95:CB:AD:86:4D:9B:8C:A4:34:82:71:2A:03:B7:D9:FE:DA:35
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:b2:9b:05:a8:0c:ad:61:74:d7:00:3c:75:4e:a6:ec:fc:
b0:c2:ff:ae:2f:32:26:a1:e6:d8:fd:4d:12:79:6e:63:1b:eb:
e3:59:68:f9:e2:1b:e9:37:d7:f4:61:bd:f9:df:c1:a4:43:c6:
a5:e5:c4:09:4a:9e:63:5f:12:58:0f:7b:02:f2:44:cb:f5:df:
70:48:32:67:3c:c1:3e:1e:4e:5e:f6:43:d3:c1:2e:ab:12:91:
ec:1a:ed:96:e2:47:27:b4:27:19:f8:1e:aa:d5:b0:8c:1d:08:
bf:1a:75:14:b3:27:c8:f5:59:80:f6:dc:61:fc:29:b7:c4:09:
bd:11:a6:4a:d9:f0:be:7a:ed:15:a1:60:f3:92:79:7d:1d:c6:
54:06:e3:95:b8:bf:aa:40:a5:ec:81:34:95:e9:44:aa:3c:d0:
2f:c2:90:66:ce:76:2e:95:92:ab:50:ab:c4:1a:ce:72:34:eb:
8f:29:17:dd:b6:f8:1f:0d:58:64:c6:83:12:f0:f3:eb:71:9a:
54:0d:64:2f:8a:a9:d1:1b:1b:5f:b5:36:e2:e3:2f:60:0b:b2:
d6:cd:95:cc:83:c4:26:c5:a7:e1:2d:37:24:92:2e:6c:61:64:
00:56:1c:ac:10:a2:1b:d4:af:d3:f1:c6:da:59:e7:2b:b9:7f:
d7:56:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:26 2025 by rpki-client