Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: VVzRUfTHQQvFGIE0BMn+ibLr4iYlBagCCgfU7qOYMXo=
Subject key identifier: F0:48:0F:E6:50:A7:27:A3:81:1B:4F:A5:E9:C7:30:04:91:F8:FA:D8
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 019645C59689A502D362986CEC4EE57506D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 087B
Signing time: Thu 17 Apr 2025 22:01:38 +0000
Manifest this update: Thu 17 Apr 2025 22:01:38 +0000
Manifest next update: Fri 18 Apr 2025 22:01:38 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: Ffbnsi5jRWdSrasOt7IxM7hCTumq6iqKi8xKK27JNZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:96:89:a5:02:d3:62:98:6c:ec:4e:e5:75:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Apr 17 22:01:38 2025 GMT
Not After : Apr 18 22:01:38 2025 GMT
Subject: CN=f0480fe650a727a3811b4fa5e9c7300491f8fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:26:73:4c:1f:6a:59:8b:84:a0:22:98:ed:
eb:53:53:db:b8:d6:de:fd:62:dd:04:a2:59:39:65:
7e:66:9a:ec:62:71:d2:56:fe:24:1a:bb:8f:f9:5e:
97:34:4f:40:e7:6e:e7:c3:82:68:6b:f4:0e:74:cc:
63:d2:9e:fb:99:5f:f5:89:6d:b2:9c:b9:43:51:22:
a7:19:bc:c3:1c:e8:1e:46:1c:4c:3a:a9:f8:05:81:
21:cb:30:d3:fc:a5:2f:1c:3f:bc:ed:92:bf:36:ed:
ab:78:28:6a:d7:9d:9f:0b:2b:c1:b2:4f:9c:85:73:
32:89:bb:b6:fa:ef:91:cd:56:16:a0:3f:f4:fd:c2:
13:d4:7a:aa:7a:5c:d2:0e:0e:2c:64:fe:39:47:1c:
c8:51:fe:e4:b3:0c:9d:61:e5:02:d5:a8:d7:6e:1d:
c7:80:bc:11:f7:53:4e:be:2d:5a:5b:29:82:00:a0:
3e:4e:1a:8a:a1:67:7d:e4:41:f2:07:e9:e2:a9:d8:
99:b4:64:55:ab:76:c1:7c:c7:e1:a3:aa:4d:cf:17:
df:ed:ac:ea:49:a1:13:90:70:d3:c2:0f:7d:28:83:
33:21:30:d3:7d:21:0e:75:56:6f:0a:61:3b:b0:9f:
36:45:2f:bb:7e:bb:6d:a7:78:6d:dc:dc:7f:38:fe:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:0F:E6:50:A7:27:A3:81:1B:4F:A5:E9:C7:30:04:91:F8:FA:D8
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ef:bd:80:b6:4b:c1:b1:06:20:da:69:d4:3f:64:ee:f0:60:
97:18:49:15:bb:73:ba:86:f0:f3:8c:4d:c9:7f:ad:d0:35:38:
84:c9:de:ca:e1:f9:07:69:d2:5b:06:32:99:72:bf:27:86:33:
d3:79:cc:74:6b:4c:dd:57:06:4e:cd:f3:2a:92:4f:87:86:69:
89:74:c5:ea:cf:68:b3:c4:45:42:95:45:df:62:b1:72:63:43:
77:aa:9f:c7:55:06:86:ea:15:37:0b:e1:09:03:fd:ae:d8:39:
1b:2b:12:44:b2:d4:67:f1:ee:e8:4d:4a:53:a6:7a:7e:78:13:
e5:98:92:59:5c:7b:77:8e:f6:97:8c:a9:9b:03:78:54:31:ee:
72:1f:34:1b:3d:8a:b0:85:0d:cb:9f:c0:25:e5:e2:65:ac:6e:
c1:6b:e2:81:90:6f:ba:d2:07:e7:bf:ec:1e:1c:47:ec:de:b5:
f1:53:23:3a:9c:cb:b8:2b:29:64:09:a4:f6:d3:af:f8:7a:78:
76:d6:7f:e6:58:41:9a:83:01:4a:15:8a:7d:0b:90:af:94:c6:
28:fe:c4:fa:50:da:2d:5e:5c:ca:82:b5:12:15:e6:a1:22:d7:
27:1d:e8:5a:8b:b5:98:9d:e3:9f:15:40:73:14:b9:7d:ee:00:
17:69:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:06:08 2025 by rpki-client