Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: CTu4f8lNudvIY9ckLgLkAsDBCGsbov12X7ZrLRzE3Ys=
Subject key identifier: DB:68:B3:F2:97:72:13:59:22:4F:A7:2D:80:4B:9E:29:4D:EA:15:6E
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019763CC8D8D80C849EAE1C5096913A2F4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 01AB
Signing time: Thu 12 Jun 2025 11:00:39 +0000
Manifest this update: Thu 12 Jun 2025 11:00:39 +0000
Manifest next update: Fri 13 Jun 2025 11:00:39 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: pP9fluLqEzLDSpyLLsk4Uvek0nDY1QMHE8s4bKQrjO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:8d:8d:80:c8:49:ea:e1:c5:09:69:13:a2:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 12 11:00:39 2025 GMT
Not After : Jun 13 11:00:39 2025 GMT
Subject: CN=db68b3f297721359224fa72d804b9e294dea156e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:eb:c4:46:a2:73:a9:96:c7:42:06:6b:38:
2b:59:c1:62:b9:dc:f5:a5:53:7c:cd:dd:53:c8:d6:
c8:7a:44:bc:83:c3:a0:99:58:64:77:86:c4:63:e7:
e9:76:7c:4d:d4:10:54:37:14:25:23:95:94:06:f0:
62:47:88:a5:da:03:16:dd:5f:8a:57:51:83:f3:e1:
b8:27:c7:aa:d1:b9:56:74:55:f5:a1:55:fb:f3:3d:
9b:fd:82:c4:1d:41:ba:f7:52:0b:da:cf:f6:9d:c8:
6e:41:6f:6f:77:f6:78:de:92:0a:02:26:ce:55:f5:
d5:4b:da:5c:70:b9:2e:41:30:61:67:cb:f9:65:3b:
0d:61:32:48:20:fd:c8:3d:e6:3e:27:57:13:69:ab:
cf:0f:09:eb:c2:89:cb:51:52:56:be:64:83:fb:0e:
b0:f6:9b:5f:93:48:0d:aa:d9:69:27:36:68:4f:f2:
15:28:c9:e9:b3:ab:45:fc:5b:2f:a7:39:fe:83:1b:
f1:c9:37:e5:b8:70:62:9a:22:d0:82:f8:57:db:d1:
10:a2:1b:9e:f5:3e:ca:1b:02:33:81:4e:5b:b6:ac:
94:c8:4f:b6:bd:ef:d6:68:ff:9e:3a:1c:e5:30:8d:
52:36:10:76:17:b1:30:0e:df:a0:c1:4c:d0:60:7c:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:B3:F2:97:72:13:59:22:4F:A7:2D:80:4B:9E:29:4D:EA:15:6E
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:7f:ec:49:85:78:cf:9e:fb:3b:6e:d4:07:7a:13:67:82:
47:f7:97:d9:d3:54:d2:d9:93:b4:8a:5b:ec:58:45:37:e6:c6:
21:ad:7c:c1:24:0d:96:bd:51:df:43:95:5f:37:f4:ce:79:5b:
00:59:7b:e7:57:60:ff:60:11:37:b6:10:f7:7d:e3:03:4b:ae:
21:7a:42:1c:dd:44:0f:1c:1b:6d:13:42:01:0f:56:92:6a:97:
d8:0f:a6:4a:86:fe:26:c6:1e:45:47:86:27:e0:bd:47:a5:70:
8f:05:8e:a4:02:54:d7:b2:3c:6c:35:5f:5b:6a:62:18:e0:fb:
46:f3:a0:23:d5:f3:f4:90:80:77:d4:31:2d:09:44:64:c6:28:
92:da:05:b8:97:56:a0:87:96:45:03:d3:f4:86:a5:b2:19:8f:
23:22:01:04:d2:7a:38:e2:e4:f6:2a:be:24:25:fd:49:c1:f1:
f1:13:82:81:66:37:41:0f:5d:1c:b1:ef:8f:e3:cc:ef:74:f3:
f1:85:e6:8e:c8:46:d7:d7:3b:27:31:b2:b9:3d:c0:4a:a9:9a:
fc:89:45:95:af:bd:41:cf:c9:de:a4:61:10:a5:93:7b:6f:b4:
a4:9b:a2:9c:64:d0:72:d2:8f:66:10:4a:13:4c:61:99:30:04:
ab:2e:73:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjzI2NgMhJ6uHFCWkTovTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjUwNjEyMTEwMDM5WhcNMjUwNjEzMTEwMDM5WjAzMTEwLwYDVQQD
EyhkYjY4YjNmMjk3NzIxMzU5MjI0ZmE3MmQ4MDRiOWUyOTRkZWExNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zHrxEaic6mWx0IGazgrWcFiudz1
pVN8zd1TyNbIekS8g8OgmVhkd4bEY+fpdnxN1BBUNxQlI5WUBvBiR4il2gMW3V+K
V1GD8+G4J8eq0blWdFX1oVX78z2b/YLEHUG691IL2s/2nchuQW9vd/Z43pIKAibO
VfXVS9pccLkuQTBhZ8v5ZTsNYTJIIP3IPeY+J1cTaavPDwnrwonLUVJWvmSD+w6w
9ptfk0gNqtlpJzZoT/IVKMnps6tF/Fsvpzn+gxvxyTfluHBimiLQgvhX29EQohue
9T7KGwIzgU5btqyUyE+2ve/WaP+eOhzlMI1SNhB2F7EwDt+gwUzQYHwMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtos/KXchNZIk+nLYBLnilN6hVuMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0R/7EmF
eM+e+ztu1Ad6E2eCR/eX2dNU0tmTtIpb7FhFN+bGIa18wSQNlr1R30OVXzf0znlb
AFl751dg/2ARN7YQ933jA0uuIXpCHN1EDxwbbRNCAQ9WkmqX2A+mSob+JsYeRUeG
J+C9R6VwjwWOpAJU17I8bDVfW2piGOD7RvOgI9Xz9JCAd9QxLQlEZMYoktoFuJdW
oIeWRQPT9IalshmPIyIBBNJ6OOLk9iq+JCX9ScHx8ROCgWY3QQ9dHLHvj+PM73Tz
8YXmjshG19c7JzGyuT3ASqma/IlFla+9Qc/J3qRhEKWTe2+0pJuinGTQctKPZhBK
E0xhmTAEqy5zuw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:09:10 2025 by rpki-client