Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: IDMD4cV6moqFqFzdF0BWDQMg/b/6BAWOwwj5YUmDagM=
Subject key identifier: AF:97:DF:14:BC:5E:AB:8D:C8:D4:8D:DA:F9:48:7F:56:00:F9:E0:08
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019630BE471C3332A529B26ADBF3CBA56A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 010C
Signing time: Sun 13 Apr 2025 20:01:38 +0000
Manifest this update: Sun 13 Apr 2025 20:01:38 +0000
Manifest next update: Mon 14 Apr 2025 20:01:38 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: tYfaGnDrO3l/pM7uE9IUhdD89t9QyFX2gOZ8UtKJRg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:be:47:1c:33:32:a5:29:b2:6a:db:f3:cb:a5:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Apr 13 20:01:38 2025 GMT
Not After : Apr 14 20:01:38 2025 GMT
Subject: CN=af97df14bc5eab8dc8d48ddaf9487f5600f9e008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:13:71:32:29:2b:78:f5:da:60:3a:e7:3d:
bc:8d:33:3c:cc:a7:25:5f:f4:23:26:d8:b3:35:0e:
0f:b8:b0:85:54:66:83:e3:1f:e9:52:22:c0:48:7b:
c1:62:72:fa:35:8c:73:e2:88:bc:e1:b2:58:42:1e:
27:5d:52:f3:0f:c9:65:be:86:ae:03:9e:26:df:ce:
e0:94:45:bd:b3:3f:28:7f:d1:3a:7a:f5:6b:8e:90:
97:76:ea:19:83:67:fd:04:fc:dd:4d:d1:d3:a8:40:
49:50:04:9a:d0:ee:58:58:1a:e8:c9:a7:43:9f:73:
16:77:e8:16:2b:59:41:5e:07:3c:a0:d8:65:a7:34:
ed:b0:fc:c1:da:3d:a8:99:cd:d5:ae:10:6f:e1:b0:
fe:fe:65:24:10:75:f7:85:8a:d0:1e:e6:31:d6:9c:
e0:3c:55:51:39:fe:47:87:fd:09:e2:52:25:f3:83:
42:fa:2a:89:b1:a4:fc:20:f8:f6:a2:d6:8d:05:7e:
41:64:a2:8b:fc:e3:62:2a:5c:09:e4:3e:43:8c:b7:
e4:ee:a5:47:bf:bb:95:6a:f4:f3:8a:9c:b2:17:5d:
58:6c:44:e7:96:56:4a:c2:92:56:ae:94:76:19:e7:
e6:26:25:a2:9d:da:2c:93:9d:c2:12:54:33:e7:d8:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:DF:14:BC:5E:AB:8D:C8:D4:8D:DA:F9:48:7F:56:00:F9:E0:08
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:76:c8:13:fa:7d:3c:59:1f:3a:7b:1c:4f:ec:e4:ac:b5:
90:59:56:1c:32:c6:6b:cf:60:54:09:1e:17:29:c4:f0:0d:ca:
ae:3f:66:94:2f:61:de:c8:a1:e8:6c:1e:f8:c3:ea:d7:9d:7d:
48:9e:2d:10:bc:86:18:b6:f1:e8:81:6a:10:14:28:75:4a:2a:
fd:2b:dd:6a:3f:45:f3:f2:6e:ca:76:78:8c:3c:91:36:bd:07:
d5:e0:e6:ac:d0:12:45:f2:66:91:84:57:88:7f:94:5f:f3:0d:
28:d1:d6:76:c2:6e:bb:94:95:33:b4:2b:fb:89:79:96:5d:d2:
a9:fe:99:40:60:89:9a:02:23:07:fd:f3:17:50:cc:de:b2:e2:
52:45:f2:9c:05:4d:85:eb:73:63:e6:7a:52:22:bf:21:f6:2e:
6f:30:6b:44:e7:e4:1f:ac:7c:7c:d6:88:00:8c:84:ed:ae:a9:
31:91:e9:13:f1:68:6b:ba:85:db:59:4b:33:10:15:8b:92:5c:
53:c7:67:b7:eb:c5:3e:97:b2:cd:f5:f5:66:3a:4f:c1:05:d2:
06:ab:b8:5d:b9:8d:48:4d:99:76:04:82:fe:b9:01:72:cc:3c:
06:c5:d0:bc:be:df:52:ed:ae:37:3f:14:1b:7c:db:ac:f6:14:
d1:d7:88:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYwvkccMzKlKbJq2/PLpWp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjUwNDEzMjAwMTM4WhcNMjUwNDE0MjAwMTM4WjAzMTEwLwYDVQQD
EyhhZjk3ZGYxNGJjNWVhYjhkYzhkNDhkZGFmOTQ4N2Y1NjAwZjllMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGgTcTIpK3j12mA65z28jTM8zKcl
X/QjJtizNQ4PuLCFVGaD4x/pUiLASHvBYnL6NYxz4oi84bJYQh4nXVLzD8llvoau
A54m387glEW9sz8of9E6evVrjpCXduoZg2f9BPzdTdHTqEBJUASa0O5YWBroyadD
n3MWd+gWK1lBXgc8oNhlpzTtsPzB2j2omc3VrhBv4bD+/mUkEHX3hYrQHuYx1pzg
PFVROf5Hh/0J4lIl84NC+iqJsaT8IPj2otaNBX5BZKKL/ONiKlwJ5D5DjLfk7qVH
v7uVavTzipyyF11YbETnllZKwpJWrpR2GefmJiWindosk53CElQz59i8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+X3xS8XquNyNSN2vlIf1YA+eAIMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/x2yBP6
fTxZHzp7HE/s5Ky1kFlWHDLGa89gVAkeFynE8A3Krj9mlC9h3sih6Gwe+MPq1519
SJ4tELyGGLbx6IFqEBQodUoq/Svdaj9F8/JuynZ4jDyRNr0H1eDmrNASRfJmkYRX
iH+UX/MNKNHWdsJuu5SVM7Qr+4l5ll3Sqf6ZQGCJmgIjB/3zF1DM3rLiUkXynAVN
hetzY+Z6UiK/IfYubzBrROfkH6x8fNaIAIyE7a6pMZHpE/Foa7qF21lLMxAVi5Jc
U8dnt+vFPpeyzfX1ZjpPwQXSBqu4XbmNSE2ZdgSC/rkBcsw8BsXQvL7fUu2uNz8U
G3zbrPYU0deI+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:07:29 2025 by rpki-client