Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: 9owz4XyQbzmPWlg3oWnX4ov2MjiMZI3Y04L5DjoMvqQ=
Subject key identifier: C0:B7:43:EE:B7:FD:DE:0A:A2:EA:87:53:D9:FA:33:57:75:ED:DE:5B
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019A2A7A00047581E891E950F6C5FF50EACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 031B
Signing time: Tue 28 Oct 2025 11:00:29 +0000
Manifest this update: Tue 28 Oct 2025 11:00:29 +0000
Manifest next update: Wed 29 Oct 2025 11:00:29 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: viUXGg7jejIbpllmvygmu2Ygw/hH+DmTzWQwI4vI+Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:00:04:75:81:e8:91:e9:50:f6:c5:ff:50:ea:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Oct 28 11:00:29 2025 GMT
Not After : Oct 29 11:00:29 2025 GMT
Subject: CN=c0b743eeb7fdde0aa2ea8753d9fa335775edde5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:86:a3:d6:02:73:66:55:29:c8:d6:e7:2a:
88:61:80:b7:40:53:f1:3f:a6:5b:7a:17:b7:70:a7:
02:87:d3:b7:5e:4b:df:62:a7:5a:10:bf:ba:fa:d2:
bc:21:d7:7c:75:d0:c3:a2:e3:6b:ad:63:86:0b:61:
1e:07:6d:7a:7d:bc:4e:02:53:12:8a:bf:d6:d5:d4:
ba:c3:a6:7a:d3:30:b5:51:c9:b0:d2:1c:05:2e:28:
91:21:a3:8d:00:db:19:5a:33:96:19:83:2a:35:09:
f9:5c:7b:33:8c:1e:b2:f6:9d:d9:fc:d3:fc:b8:fc:
7f:ea:4c:ff:41:40:2a:86:26:5a:7c:fd:7a:81:5c:
af:31:bd:2b:7a:ec:51:fe:ae:3a:02:7b:0f:1e:e5:
01:10:df:35:0f:85:a8:da:1b:fe:bc:87:26:fa:10:
ac:fc:e2:8a:d5:0c:d2:c7:97:99:be:4f:27:94:e9:
69:e5:5f:07:8b:bb:69:53:28:8a:90:fe:51:e2:91:
ef:d8:44:1f:55:55:d5:82:c3:72:24:f3:de:87:18:
58:20:eb:2a:ad:0f:df:26:9e:35:dc:8f:61:1b:63:
f1:0c:8e:7f:71:96:e8:b4:d3:29:fb:f6:0f:4a:2e:
ea:21:84:89:dc:62:9d:49:51:13:de:7c:9c:4d:2b:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:43:EE:B7:FD:DE:0A:A2:EA:87:53:D9:FA:33:57:75:ED:DE:5B
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:4c:74:03:a7:86:df:8b:a3:63:9e:87:c6:cb:6d:f1:d2:
20:50:c2:45:34:d9:b5:8e:d4:9d:08:d0:83:b1:e8:58:f2:cc:
67:38:f2:11:1b:e6:bd:39:15:15:be:2a:4c:71:0e:9d:02:1b:
3c:3e:d8:5b:4f:6a:5d:29:37:3b:6e:bd:54:e0:44:e4:e6:80:
64:b1:14:c8:69:eb:ee:28:ea:64:63:9c:e1:5a:db:a5:bf:c5:
68:ad:1c:3e:5e:85:68:ac:e1:3c:f0:d0:f0:a7:5b:93:6c:1f:
e0:1d:ab:13:16:34:cb:92:d9:37:f5:e6:4e:d0:6d:76:92:18:
ed:5a:a5:ef:5f:04:b8:08:63:d6:5e:56:72:89:c7:8d:d0:93:
48:59:1d:b3:23:67:5f:98:a8:4c:10:50:f3:43:41:03:92:0c:
77:8e:07:0d:91:9a:e6:ae:2a:73:73:14:6b:d3:14:4e:56:ec:
f0:ba:ee:ed:20:c8:e7:86:a1:d8:0f:72:58:cf:6d:e7:8c:92:
e9:e5:0a:74:da:3d:bc:f6:6f:58:73:e9:09:0c:55:74:82:e1:
93:49:ae:1d:5e:a3:75:ad:02:07:5f:97:ef:55:ea:40:78:d4:
03:dc:a3:e8:8e:21:b6:af:96:b5:d3:ed:44:f8:a9:c6:88:25:
b1:21:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:30:04 2025 by rpki-client