Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: sxRn0Id7XdR/zMj3eYQEh5IcdnKFDnrL8HVXggSxGdg=
Subject key identifier: B7:02:44:C8:2C:53:94:35:AC:5D:8E:D9:DF:DA:2D:64:1A:98:CD:6E
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01975F14366BC39BB54DBA692698313BDB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 060B
Signing time: Wed 11 Jun 2025 13:00:49 +0000
Manifest this update: Wed 11 Jun 2025 13:00:49 +0000
Manifest next update: Thu 12 Jun 2025 13:00:49 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 4lVBbMmxdxIT68mMpNq+KUrhRznOvWbclA9RkbmXNXY=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:36:6b:c3:9b:b5:4d:ba:69:26:98:31:3b:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 11 13:00:49 2025 GMT
Not After : Jun 12 13:00:49 2025 GMT
Subject: CN=b70244c82c539435ac5d8ed9dfda2d641a98cd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:d7:64:69:e0:97:c4:64:1f:fd:43:6b:77:
58:53:b9:1e:4a:b1:f8:26:3c:3a:aa:a9:81:e1:bc:
bf:32:0b:0b:25:06:34:75:33:79:b8:e1:1a:f9:0f:
da:11:89:04:15:69:e6:80:37:2a:ba:e6:74:f2:e9:
0e:ba:0b:79:04:7b:e8:7b:0f:6e:df:b2:14:f1:eb:
4f:4c:ae:ba:c3:0a:d6:49:65:fd:0d:ff:b0:eb:9f:
1a:bb:fa:23:be:5b:dc:e1:bd:31:bd:50:a0:94:50:
54:3b:dc:45:c6:bc:95:bd:2e:1b:39:65:81:f7:b0:
6f:bb:ca:38:29:41:22:29:07:18:01:35:6a:d6:91:
5d:2b:9d:ea:59:b2:fe:f7:04:6d:80:e6:ac:e5:0f:
b1:ce:ef:8f:25:aa:1a:0d:82:ac:42:f2:ea:26:9d:
e4:6c:91:46:69:89:93:97:a0:bc:e6:a3:91:0d:28:
55:49:9d:1d:97:56:a4:d1:50:38:01:0e:fa:ae:7c:
b7:77:bb:cb:55:47:fc:c0:69:ad:55:d4:1c:ee:eb:
ef:2c:8c:b2:c0:22:5f:df:4f:56:a5:d2:d6:29:a9:
8b:d9:4b:64:dd:2c:11:a0:8f:8b:05:e4:d9:ec:1a:
f5:ed:cc:e3:23:f1:1b:d5:66:53:ec:0f:75:9b:5d:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:44:C8:2C:53:94:35:AC:5D:8E:D9:DF:DA:2D:64:1A:98:CD:6E
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:88:fa:b8:0c:f6:b1:8b:13:fc:8b:9e:16:25:7d:60:fb:
7b:26:4c:28:a4:d4:51:3b:e9:03:0c:77:3c:ed:34:ba:7b:d5:
f0:bb:61:6d:04:24:69:8f:30:43:d2:2e:f0:db:c1:c7:ea:e6:
3c:b2:76:b7:cf:b3:93:41:b4:f2:ce:98:5d:9b:c4:4a:81:57:
47:9c:fd:0d:91:84:36:d0:ec:3f:60:7d:c7:e1:bc:f6:f3:b0:
41:ac:21:1b:54:71:57:67:17:5b:5d:5f:ad:84:34:a8:a0:75:
a0:3b:d1:8a:50:c7:0e:5a:62:dc:f3:7b:7a:f2:c3:d3:e3:fc:
0f:79:41:0f:88:b4:a7:82:89:2e:15:c6:5e:55:76:26:e2:c3:
46:97:cc:cd:51:cb:70:7e:d9:04:bc:36:7d:9f:09:e7:9b:e9:
b4:5f:57:30:cf:44:2f:a5:3a:e1:9d:00:2c:a5:eb:95:51:c1:
36:65:7d:03:f7:78:dd:1a:b5:d4:d0:cb:b1:50:35:6f:e1:68:
ec:73:ca:50:39:f6:d2:f5:ec:60:d0:01:2b:77:1d:51:3d:3e:
d5:1a:e5:4b:eb:db:ae:fe:0e:38:2b:cb:0a:c8:ce:ef:2a:80:
2d:89:2d:ce:b6:bb:94:a3:09:b5:f8:22:e4:fe:ff:f6:da:ce:
6e:27:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:37 2025 by rpki-client