Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 2vPBSWzpoqfZpbhl/sn7EmJ5cSbQG/m7Kc5gqnN1MIo=
Subject key identifier: AB:BE:20:73:07:D2:C9:2A:50:62:77:53:59:B0:FD:9A:38:11:88:1D
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01992255BE6B111E391FBC60CE676AD342A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 06F5
Signing time: Sun 07 Sep 2025 04:01:08 +0000
Manifest this update: Sun 07 Sep 2025 04:01:08 +0000
Manifest next update: Mon 08 Sep 2025 04:01:08 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 9jmGXdqYcsDsVu7geGyqzAbJ0blM0TMXSOeJ6YINBvA=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:be:6b:11:1e:39:1f:bc:60:ce:67:6a:d3:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Sep 7 04:01:08 2025 GMT
Not After : Sep 8 04:01:08 2025 GMT
Subject: CN=abbe207307d2c92a5062775359b0fd9a3811881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:96:1c:d3:e9:5c:24:f5:13:da:e8:62:df:
63:e5:61:52:60:df:ba:cb:92:72:9e:ca:13:fa:92:
50:f6:c4:0c:fb:41:d7:b2:44:cf:e0:c0:0c:3b:37:
89:5c:6f:19:b5:09:dd:2b:b7:b6:35:54:88:fe:83:
d7:df:0f:33:2e:af:1d:c0:fd:f3:82:4f:32:47:6b:
90:61:28:23:f4:74:05:54:33:0a:c6:93:b4:a1:cf:
cd:5a:49:8c:2f:b1:d9:fb:40:b3:69:cb:49:11:9a:
ab:23:1f:a5:c9:a3:bb:6f:d5:29:2a:a8:04:dc:69:
d1:ac:1c:10:2d:a6:89:bf:ac:6a:0f:1f:a8:bd:88:
8b:67:1d:c3:d8:71:d8:ab:d3:a1:29:f5:0b:dc:5a:
50:fa:a9:7d:3b:c9:6c:b9:7d:d7:36:dd:05:8b:f6:
44:de:ed:b6:a2:b9:a9:27:71:9f:7d:36:d7:49:ab:
e2:a2:e0:1a:77:38:07:3f:d1:4c:6e:17:95:67:f1:
85:16:67:43:be:6b:f9:29:b0:c1:52:77:b2:c2:7f:
7b:74:7e:ac:55:80:8e:7f:55:25:94:9f:1d:7c:6a:
f2:42:de:47:a6:ed:82:08:e8:73:ca:d5:e6:98:0d:
0d:89:05:bb:b0:6e:6e:4b:23:0a:ff:e1:8e:ba:1a:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:20:73:07:D2:C9:2A:50:62:77:53:59:B0:FD:9A:38:11:88:1D
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b7:f3:0e:38:ea:6e:f1:59:f7:92:e2:12:b0:b7:c0:30:8d:
7b:01:25:2d:29:ca:54:a8:84:f6:ea:cb:42:88:5a:ac:c0:eb:
48:04:ac:5f:e8:e7:11:bd:8f:49:12:5d:bd:6f:43:0d:51:19:
7f:22:df:b7:c4:6c:8b:08:a9:59:f2:5f:50:b4:3b:37:b2:6b:
7b:55:cb:f0:83:9c:d0:44:a9:28:84:42:a3:a6:fc:4e:24:98:
0f:6d:db:aa:ea:91:08:d3:3c:41:c3:fd:2c:10:ec:0c:cd:dd:
c5:10:4b:07:b8:c8:f3:60:c4:27:d9:13:1b:53:09:cf:85:7a:
b2:41:fc:d8:53:a4:b1:04:d0:5b:ce:4e:0e:63:71:30:28:09:
50:fe:5f:ba:4b:75:98:f9:d7:5b:5e:e1:e2:aa:30:6e:16:81:
04:54:2d:f0:ad:2c:a5:b1:46:23:a4:eb:34:f5:72:0d:57:0e:
65:9c:cc:69:ab:1f:6a:14:b2:c1:35:80:22:72:87:3d:0f:d8:
97:b9:66:6c:d4:94:f9:f6:6d:90:0f:83:71:5d:cd:04:d9:49:
bb:1c:80:6e:a4:a6:41:ca:26:b0:b6:a9:52:9c:e6:e0:85:10:
41:86:6b:8c:21:e7:fe:b8:86:d4:57:04:28:bc:7e:09:d4:e3:
9d:2b:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client