Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: QMBNz6QumoV0APKodD7Pe9FNyc2tYrwKY9rreVNX530=
Subject key identifier: 88:43:9D:EF:08:2F:F3:F3:8F:01:E0:73:B2:EF:1F:9E:2B:18:EB:9D
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 019657946D44EFC2F085793A24D1E058AA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 1320
Signing time: Mon 21 Apr 2025 09:01:07 +0000
Manifest this update: Mon 21 Apr 2025 09:01:07 +0000
Manifest next update: Tue 22 Apr 2025 09:01:07 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: 3wp3oVWTE95dzNsYtInsqrXWD1e6ZmN093D83+Zcq0c=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:6d:44:ef:c2:f0:85:79:3a:24:d1:e0:58:aa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Apr 21 09:01:07 2025 GMT
Not After : Apr 22 09:01:07 2025 GMT
Subject: CN=88439def082ff3f38f01e073b2ef1f9e2b18eb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:4f:db:9f:8a:d0:4b:b0:ba:19:79:11:3f:
eb:66:b4:99:56:52:93:18:a2:ca:e8:42:75:d6:d2:
b6:bf:58:65:07:e3:d0:3d:09:bb:dc:fa:11:a5:3f:
47:88:6a:20:21:f6:58:1c:3a:be:d9:22:fb:96:41:
11:0e:bf:4c:e2:73:9b:47:91:33:af:16:68:d8:09:
17:59:cc:61:58:37:03:fe:bc:0f:a6:06:6b:71:f1:
27:2d:fb:b9:84:15:2f:c1:64:65:8e:e4:34:8c:ca:
13:99:f2:f7:95:91:f0:5f:a0:05:43:15:cb:5e:5a:
64:e5:d4:30:1c:f3:f9:d3:b8:4a:5d:15:88:42:18:
82:b9:4b:a5:aa:b3:ff:64:7d:b7:08:e9:64:6f:c1:
31:25:04:9a:1e:d1:ae:b8:05:bc:59:ca:66:35:dd:
8b:59:10:25:2e:98:89:69:87:d8:97:75:f4:f9:98:
8c:53:5d:b0:a6:81:85:89:f5:94:6d:b0:3e:fc:92:
ed:01:44:8d:25:9f:68:7a:d5:a4:d1:aa:97:cc:2c:
ef:d1:8a:43:22:63:02:0a:a7:ee:41:17:4e:fd:fd:
c5:54:8e:1c:5f:c1:0d:d4:19:8a:09:af:e8:04:0d:
62:5a:12:d7:a6:ab:c0:17:31:a7:cf:c6:b6:99:f4:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:9D:EF:08:2F:F3:F3:8F:01:E0:73:B2:EF:1F:9E:2B:18:EB:9D
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6e:c2:5f:26:3d:7a:c3:49:bf:33:84:a8:93:26:ce:c1:b5:
00:60:ff:93:74:c0:e3:d0:04:9c:a3:3e:e4:0d:c4:ae:98:b7:
c5:01:4a:ce:7c:b4:71:08:23:16:61:97:8f:aa:2d:44:c7:a7:
bd:38:18:fe:69:46:1a:8f:02:35:a0:61:89:c2:91:2b:1a:89:
d5:65:67:b6:f5:c2:b0:f0:f4:b9:a0:e7:a6:5d:9d:a2:e9:c2:
08:3d:21:44:40:38:40:4d:19:7f:15:f2:86:00:65:af:1c:52:
c0:ca:88:e1:4e:5a:7a:95:cb:bd:a4:05:13:97:a6:16:56:63:
a4:6c:71:d1:d6:ad:b1:9d:90:5c:d9:8a:a3:c6:22:19:51:f6:
c3:ed:7c:3a:83:b9:f0:93:17:5c:b9:00:b0:55:f9:43:4d:bb:
1f:2a:5d:20:f5:30:79:e3:fb:d9:bc:a7:7c:0c:94:16:c2:d7:
93:8b:f8:17:95:d2:e9:19:b7:5b:ea:2e:fe:4b:c4:28:2e:d3:
d7:8a:2b:f2:0e:c3:38:dd:8b:cf:71:34:41:3b:67:96:48:23:
b4:74:8d:5b:0c:d5:3e:f1:ba:ee:3e:07:d0:eb:6f:ba:cf:93:
ca:dc:3c:9b:d1:66:3d:e7:c1:9b:14:41:6e:73:5e:be:41:1c:
d9:7a:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:59 2025 by rpki-client