Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: rWunY/PWm5vxexZtEU/VcFzuY3dgpVxnp8BjeR/1hRw=
Subject key identifier: 13:68:1B:4D:90:9C:0D:00:B5:FD:66:59:5C:18:A5:3B:2C:52:FD:AA
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 019A71B79EB15598A809E178178CA140602B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0AA4
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: CRTNmx9toulZ1Jeimo7biDzNI57WwS9LCA+Wyig+0GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:b1:55:98:a8:09:e1:78:17:8c:a1:40:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=13681b4d909c0d00b5fd66595c18a53b2c52fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:43:12:57:41:1f:14:b8:e9:0d:7f:7b:92:
8e:73:85:19:b1:76:b3:d2:4a:62:78:4a:9b:74:1c:
53:7c:bc:f2:c0:76:c2:29:c9:43:7c:00:6c:01:63:
4b:ff:00:40:8c:df:90:c6:3b:23:cc:ba:27:a1:55:
9b:fe:eb:8c:aa:fe:29:09:f2:5a:4e:c4:d7:8e:13:
be:b6:4a:39:19:ab:fd:0f:aa:09:50:db:22:a9:53:
22:bc:fb:58:5a:96:a2:f9:b2:55:a4:27:43:7e:3b:
e4:bc:13:e1:62:4f:1b:6c:8d:2b:f0:5f:e0:05:33:
7f:94:3f:e4:7c:69:4d:c0:11:f1:19:8a:c3:67:9c:
03:cc:84:08:aa:cd:0c:72:e3:c8:af:1b:ca:52:9c:
57:44:96:45:00:5e:62:77:0c:70:f0:f2:8d:82:72:
ba:01:b4:9c:fc:30:be:df:d0:c9:5a:25:ba:c9:38:
33:0f:61:7f:a5:0c:50:5f:2f:7f:99:e2:f0:bd:14:
c4:b2:22:66:8e:6f:b7:2a:bd:78:33:56:94:d5:52:
a6:14:e2:42:23:15:ca:92:6c:9a:20:b9:f1:51:c9:
e5:d6:f5:0d:65:d3:7e:b8:72:6b:31:c6:99:e0:37:
79:5c:ee:5b:05:c4:4a:8c:d8:8f:14:dd:ab:e0:07:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:1B:4D:90:9C:0D:00:B5:FD:66:59:5C:18:A5:3B:2C:52:FD:AA
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:87:f2:09:a6:61:8c:a9:4f:84:84:65:7e:6f:b3:92:ed:1d:
31:15:85:77:b9:66:0c:e2:7c:ba:0d:60:ac:72:dc:41:9c:21:
1c:cc:ea:e4:86:4e:8a:2c:01:33:cd:2c:42:35:6b:44:1c:d3:
92:2e:d2:03:59:c7:55:8f:93:7f:d3:1d:fd:23:ca:39:d9:f8:
11:f6:37:87:bd:48:83:68:14:1e:61:2b:a2:af:05:8f:fa:60:
b1:4f:f5:98:9c:c0:42:bf:74:f1:be:ea:08:cb:e0:e4:61:ea:
34:a1:d4:94:13:94:1a:49:ff:40:a5:5f:3e:bc:bd:93:59:bf:
df:db:94:2c:b3:a4:e2:89:52:51:ac:2e:3d:93:1c:b0:73:37:
ea:9b:d9:c3:32:89:07:ad:17:4f:91:9f:42:bc:ba:11:d1:f1:
a6:fb:85:a6:da:d6:b2:34:44:b4:51:88:95:ca:02:ff:cd:0e:
5e:45:60:ef:24:07:15:04:32:99:54:6d:98:a4:9f:21:e6:a1:
03:73:97:e8:2b:86:c8:4e:39:4b:19:13:ac:78:6c:d5:62:76:
33:9f:ad:a3:35:50:af:a4:71:96:ec:9e:02:18:e9:3d:31:ca:
4f:7c:da:13:99:0c:66:52:50:81:6c:01:6d:d3:a9:40:0d:3d:
92:f3:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:11 2025 by rpki-client