Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: fZPmf3rf94QnremaqpTjGbLV2RvxvSm8140KFXelK6g=
Subject key identifier: 92:92:17:AF:64:69:5D:D9:06:72:E5:43:C4:50:94:7D:24:97:78:3E
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01975D25D60E024A8292423E0F1C6971CA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 060A
Signing time: Wed 11 Jun 2025 04:00:49 +0000
Manifest this update: Wed 11 Jun 2025 04:00:49 +0000
Manifest next update: Thu 12 Jun 2025 04:00:49 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: KxYRD77U+7Nw4YaicEd6ZP7owvoKGFgFq5ScQEqjXE0=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:d6:0e:02:4a:82:92:42:3e:0f:1c:69:71:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 11 04:00:49 2025 GMT
Not After : Jun 12 04:00:49 2025 GMT
Subject: CN=929217af64695dd90672e543c450947d2497783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:37:6a:2a:44:f0:95:f7:50:56:73:51:92:
f7:ec:08:19:df:ab:05:34:93:58:b3:7a:fb:c1:af:
4f:81:f2:34:83:19:19:c7:8a:81:82:9a:cd:d5:fa:
e8:78:56:01:92:8c:c2:d1:7a:de:06:9c:41:ab:dc:
69:f9:c6:1a:7d:62:2e:9d:04:55:f8:25:cf:17:ed:
a4:a7:5c:e9:56:18:df:1c:ed:bc:6c:38:e8:9d:70:
61:e1:1d:00:55:fe:10:d9:fb:83:79:b1:52:f0:77:
c9:d0:37:cf:5a:4c:7f:02:f6:77:3c:ba:00:5a:b7:
fb:36:51:ad:e7:c3:e1:f0:00:64:ac:30:55:c5:32:
f7:a9:5e:c7:80:44:17:4c:c0:6c:02:4a:e7:c8:e4:
48:9d:94:b1:a0:6e:1e:88:77:60:0a:70:74:35:89:
56:20:76:0d:cd:02:36:14:20:c5:e8:26:60:73:f2:
bd:40:f9:5e:85:68:b8:3d:f8:99:87:f0:c9:8f:0c:
78:cb:8d:34:de:62:56:39:30:77:40:d9:3b:bc:36:
df:a5:fd:a8:a3:a9:2d:73:98:f6:47:65:7d:36:04:
8c:04:75:3d:34:e3:03:44:2c:4e:0e:37:40:cf:2d:
4b:a7:72:84:51:e9:78:8f:7b:c0:50:9c:21:29:55:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:92:17:AF:64:69:5D:D9:06:72:E5:43:C4:50:94:7D:24:97:78:3E
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d1:db:6e:89:4c:ba:9c:57:24:00:60:d8:64:a7:41:1b:e3:
b0:04:c4:65:4a:db:1c:0c:fb:7b:53:59:2c:4a:05:6d:4d:82:
1f:43:22:82:d8:3d:e6:ef:ee:a0:07:f2:65:8b:3d:a1:ac:c3:
83:f4:7d:25:0d:56:ab:51:f0:47:0e:d3:c3:2d:7f:83:64:5c:
35:71:4c:a4:ee:57:94:55:4a:19:fe:b8:39:fa:6c:02:93:a0:
a7:61:13:f4:df:b7:dc:97:26:d3:86:5f:1f:c6:b3:26:66:1f:
15:28:f4:f3:82:77:92:cd:6a:37:5e:2a:c3:5d:d0:53:a8:1f:
6c:fc:a3:a5:09:42:89:7d:f7:8a:e7:62:e1:b9:77:2e:95:ce:
1d:d1:9d:ee:64:1a:2d:cf:15:0a:80:3f:4f:82:9f:cf:f8:5c:
67:37:00:47:22:34:a1:1a:ee:7d:43:51:5a:36:4f:51:09:95:
24:97:c9:70:62:c3:12:06:6f:71:94:32:e7:2d:dd:f0:b2:f3:
20:5f:2e:a3:db:bf:96:b0:3d:64:a5:f2:43:d2:66:f4:a8:f6:
5c:a0:78:ee:c0:f1:fd:71:a2:d0:99:20:4e:a2:e9:39:47:9e:
57:f9:02:07:a9:b8:fe:0b:6b:64:cc:a8:96:94:ac:9b:52:60:
80:3e:f2:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddJdYOAkqCkkI+DxxpccqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk
OGFlM2YwHhcNMjUwNjExMDQwMDQ5WhcNMjUwNjEyMDQwMDQ5WjAzMTEwLwYDVQQD
Eyg5MjkyMTdhZjY0Njk1ZGQ5MDY3MmU1NDNjNDUwOTQ3ZDI0OTc3ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUA3aipE8JX3UFZzUZL37AgZ36sF
NJNYs3r7wa9PgfI0gxkZx4qBgprN1froeFYBkozC0XreBpxBq9xp+cYafWIunQRV
+CXPF+2kp1zpVhjfHO28bDjonXBh4R0AVf4Q2fuDebFS8HfJ0DfPWkx/AvZ3PLoA
Wrf7NlGt58Ph8ABkrDBVxTL3qV7HgEQXTMBsAkrnyORInZSxoG4eiHdgCnB0NYlW
IHYNzQI2FCDF6CZgc/K9QPlehWi4PfiZh/DJjwx4y4003mJWOTB3QNk7vDbfpf2o
o6ktc5j2R2V9NgSMBHU9NOMDRCxODjdAzy1Lp3KEUel4j3vAUJwhKVUpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKSF69kaV3ZBnLlQ8RQlH0kl3g+MB8GA1UdIwQY
MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt
ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi
LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9HbbolM
upxXJABg2GSnQRvjsATEZUrbHAz7e1NZLEoFbU2CH0Migtg95u/uoAfyZYs9oazD
g/R9JQ1Wq1HwRw7Twy1/g2RcNXFMpO5XlFVKGf64OfpsApOgp2ET9N+33Jcm04Zf
H8azJmYfFSj084J3ks1qN14qw13QU6gfbPyjpQlCiX33iudi4bl3LpXOHdGd7mQa
Lc8VCoA/T4Kfz/hcZzcARyI0oRrufUNRWjZPUQmVJJfJcGLDEgZvcZQy5y3d8LLz
IF8uo9u/lrA9ZKXyQ9Jm9Kj2XKB47sDx/XGi0JkgTqLpOUeeV/kCB6m4/gtrZMyo
lpSsm1JggD7yKA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:28:47 2025 by rpki-client