Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: mm78VhA8Dk/dn7uMI6em4ezlMKdWI51iXrTex9JyupI=
Subject key identifier: B2:67:C3:49:D7:1A:64:E9:05:60:7C:68:61:04:EE:F5:50:E1:AB:07
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0199221F29973B02310EA5FDEC63040CC43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 1492
Signing time: Sun 07 Sep 2025 03:01:31 +0000
Manifest this update: Sun 07 Sep 2025 03:01:31 +0000
Manifest next update: Mon 08 Sep 2025 03:01:31 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: 3/cucdEakW8MFZSFocu/UkADXXvGpUBbUcyJLEMfCko=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:29:97:3b:02:31:0e:a5:fd:ec:63:04:0c:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Sep 7 03:01:31 2025 GMT
Not After : Sep 8 03:01:31 2025 GMT
Subject: CN=b267c349d71a64e905607c686104eef550e1ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:4a:4a:a5:62:b4:bd:a3:92:2a:94:46:0a:
56:bb:00:fa:57:d5:c7:21:a1:91:12:a5:2c:31:9d:
dc:0f:fd:67:ef:3f:f9:23:5a:99:c8:b2:c6:ea:80:
69:a4:2d:db:ad:43:42:8b:34:a2:d4:d6:5e:91:cf:
57:10:b3:01:24:15:4c:8b:d4:7d:4a:12:58:37:1c:
c0:d2:f3:c4:3a:1d:8d:f0:4d:e6:0a:f1:4c:45:cf:
e3:bd:fe:d4:96:6d:cf:81:aa:65:89:1d:6c:07:2e:
18:bf:25:23:6a:ef:04:52:99:0c:59:7e:63:a6:dc:
ab:fc:3a:5d:2b:05:92:41:20:bb:81:b6:55:7b:1a:
4f:81:c5:c5:7b:80:8f:99:3e:29:d9:ca:90:38:19:
f7:ac:15:5b:d9:4f:6e:a6:15:3e:35:62:01:be:f7:
b2:3e:40:c3:ea:06:d1:69:ee:0a:b8:68:18:69:42:
6d:a1:1a:42:2e:55:10:43:67:29:11:89:55:c0:e4:
e8:b2:33:96:9d:5d:5a:8f:bd:4f:80:f8:a1:55:a2:
e6:b1:a8:ff:48:56:e8:57:8d:76:be:de:27:67:07:
2d:02:4f:8e:5f:4f:cc:13:1f:12:14:7b:c5:7c:1e:
f2:73:01:ec:e6:60:3f:03:42:7c:67:4e:be:50:77:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:C3:49:D7:1A:64:E9:05:60:7C:68:61:04:EE:F5:50:E1:AB:07
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:86:f9:02:87:c8:b0:16:54:cc:48:6e:64:0a:6e:f5:53:
ee:1c:66:ce:04:ad:8e:f3:8c:54:ab:5e:b1:56:b1:fb:b6:90:
50:a3:f1:e9:e3:9c:95:4c:fc:32:1a:8a:b0:0c:6d:fc:b5:77:
30:c4:5e:ee:12:b1:df:5a:63:35:90:c3:86:4a:d4:73:9f:35:
8f:c5:1a:1c:e9:55:e4:06:d7:4a:9a:11:2b:7f:1c:13:65:91:
f8:0e:c5:82:c5:0d:74:51:8c:fb:e5:58:8c:90:13:45:bb:2c:
e3:6e:f2:1c:68:7a:18:a3:9c:38:3e:bf:9d:38:73:bf:bf:21:
b1:d3:37:51:73:bc:88:32:bb:64:de:d6:4b:a8:1e:2a:2d:b0:
5a:21:0b:c9:5c:a4:cc:bd:ba:a6:ee:ec:ec:17:ae:d0:6d:a0:
f7:50:4a:25:c4:44:d1:ab:87:a0:2b:e2:75:ab:9b:f0:3f:75:
e1:04:65:7e:c5:a9:f8:29:7e:16:00:85:00:6e:71:71:c3:90:
c5:f9:86:dd:03:1a:61:b3:72:2b:67:6c:0f:5b:fd:5f:8c:bf:
78:d9:83:18:d6:7b:e7:8a:53:88:20:81:5b:39:2b:9d:1b:39:
b4:11:a5:73:e2:ad:e5:71:38:d6:96:de:a1:26:e2:55:a9:6d:
3b:3e:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:10 2025 by rpki-client