Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: zKF84v87CjBsRyor+SnpG0KQCCs6Z32X4Gql+HO0pxQ=
Subject key identifier: 79:27:8E:FD:99:BC:B8:2B:27:BA:74:8F:FA:7B:21:7B:85:94:DF:54
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 01975459E7E44AD320B25DE61D80E82C575A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 01A3
Signing time: Mon 09 Jun 2025 11:01:07 +0000
Manifest this update: Mon 09 Jun 2025 11:01:07 +0000
Manifest next update: Tue 10 Jun 2025 11:01:07 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: gHrfrFbT8YNkHALBmzKyjwm1yTzuOrtnxGFQx+hdLNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:e7:e4:4a:d3:20:b2:5d:e6:1d:80:e8:2c:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 9 11:01:07 2025 GMT
Not After : Jun 10 11:01:07 2025 GMT
Subject: CN=79278efd99bcb82b27ba748ffa7b217b8594df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:ac:3f:01:6c:dd:76:69:00:c5:a6:64:11:
8e:fc:64:62:1e:ce:12:72:46:a5:85:0b:b3:71:18:
39:e4:42:c2:0c:19:04:fb:1a:f6:02:cf:42:7b:58:
4f:6f:21:43:e8:1d:e1:27:4d:6f:41:89:19:73:cc:
71:37:39:69:d3:d5:51:12:db:a0:9a:e2:1f:f5:5b:
13:34:b2:03:5b:c8:3c:fd:26:38:c3:11:f9:65:5f:
f7:72:d3:fa:ee:e0:3e:3d:d9:49:82:53:b1:cf:cd:
87:3f:60:22:2c:ed:97:5f:6f:6c:d5:5f:fa:6b:f8:
40:4e:ec:92:d0:69:83:ab:ad:f1:b8:e2:6b:98:3b:
15:31:e2:30:6e:14:4a:ac:d1:a3:1b:a0:8e:dd:25:
be:a1:c9:c9:7d:7c:6f:95:4d:ad:4b:a3:ee:54:2b:
ff:e4:9c:a6:dd:07:1e:4e:2a:ad:2c:a7:2a:cb:8d:
4f:5e:65:b4:99:88:76:6a:82:42:7c:a2:34:4c:00:
3c:9d:99:b0:7f:59:ed:67:66:e0:db:8d:71:a2:a6:
70:f9:6b:4f:03:0d:2a:10:fc:06:9c:ca:2b:29:b9:
14:ff:b9:48:63:39:8f:76:f1:be:a9:dd:55:ac:00:
9c:36:f2:1a:1d:84:8e:8f:d7:4e:d8:6f:8b:f2:25:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:8E:FD:99:BC:B8:2B:27:BA:74:8F:FA:7B:21:7B:85:94:DF:54
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:8c:cd:4b:ec:c5:af:5c:ee:9f:1e:dc:7d:a2:60:c0:b7:
d5:95:b1:32:33:c1:2b:fe:12:37:7e:78:a7:fb:79:e0:27:b4:
07:d3:db:07:33:03:45:f4:10:59:77:f2:70:eb:02:b6:32:13:
f7:20:46:71:00:8e:22:83:5f:8b:64:ee:b5:b6:2d:43:ca:5d:
59:29:33:59:5b:ab:b6:77:c0:b7:ad:d0:71:c1:eb:03:26:1f:
6d:88:ad:6b:19:e0:ae:a6:59:53:b9:2f:0a:2a:ac:0a:1a:8a:
f4:98:1c:8f:2e:a9:4e:ea:e9:cd:d2:3b:81:94:49:57:85:75:
d9:df:81:e9:38:72:3b:93:89:68:9f:c1:54:a5:ef:0b:74:6e:
7a:04:be:85:a9:e2:b8:6b:b3:7e:97:de:90:b5:40:30:30:62:
e6:1e:80:57:ba:fc:6d:15:83:01:e6:c0:ac:4b:45:dc:ea:63:
8b:c1:1b:4a:e1:42:6b:97:e5:21:0f:c5:12:1d:2a:20:75:17:
3a:0f:bd:f5:b6:7c:f7:49:61:f6:a2:c8:0f:c5:6f:6f:e5:56:
13:09:60:be:81:a1:0b:0b:11:9b:d0:16:60:bd:d9:21:ff:6a:
de:c4:c7:10:b7:84:78:74:10:01:27:c9:1b:71:2c:f6:d1:2c:
bb:6c:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:59:31 2025 by rpki-client