Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: jdaBJ/fX/9B0RMm/HhWadOjJIkaIW8bHMiK5pGoi350=
Subject key identifier: F1:CA:67:1A:B6:D2:26:9A:90:11:9E:C3:23:EB:20:F6:AD:52:A3:56
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 019A722605963C97E1CFD0B99ADC27A23AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 1540
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: l64ZVO71dWMbApkrKRB8Tuk0I6D15Fl+T8oFSItTDi8=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:05:96:3c:97:e1:cf:d0:b9:9a:dc:27:a2:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=f1ca671ab6d2269a90119ec323eb20f6ad52a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:97:e3:31:2c:51:7b:2e:cf:50:b6:09:e7:
53:49:da:29:44:39:b4:10:9f:99:3b:57:f3:90:d4:
00:7b:8a:65:79:5f:20:fe:e5:fc:1f:72:57:80:fe:
30:45:5a:c1:0b:1b:d5:18:e3:dd:50:5c:61:e9:6e:
8e:2e:c8:fc:e5:a3:0e:da:10:a4:5d:75:b6:cc:8f:
0c:ef:0d:08:1d:3b:11:92:04:f3:c7:1f:e2:ad:6a:
e7:3d:4f:73:34:dd:2a:2b:4a:8f:70:23:e9:1c:45:
a3:94:f3:3d:75:7f:f0:73:8a:78:f5:65:9f:95:ac:
c1:18:ca:56:ec:a9:fe:a4:76:14:f2:38:e1:af:1c:
0f:08:d8:bb:d6:f8:8e:5c:f4:bb:64:19:c0:58:ac:
eb:09:e5:ff:a0:b0:3c:02:ff:a5:1a:13:e3:f8:52:
e6:13:c6:be:e9:3d:07:29:86:f7:97:cb:da:ce:e9:
00:93:53:bd:d7:ac:6f:1b:04:3e:e4:4f:65:30:d3:
09:62:3e:60:c9:f2:27:f8:a1:54:0a:16:eb:ef:f6:
05:06:07:7d:c0:ac:4b:cc:af:1f:37:87:1d:78:38:
97:6d:be:3b:35:50:ef:43:03:39:10:71:72:f7:09:
4b:6e:81:55:72:ec:be:07:e6:34:5b:19:78:53:95:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:67:1A:B6:D2:26:9A:90:11:9E:C3:23:EB:20:F6:AD:52:A3:56
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:91:fd:b0:5a:39:02:d4:97:17:32:e3:ee:19:a0:d9:0e:
93:4b:84:4e:fe:b3:a4:85:4b:48:de:31:0d:80:97:dd:8e:75:
33:40:c7:10:6f:48:e3:b3:82:23:b9:ce:91:18:15:ac:bd:75:
d0:52:e4:fa:00:98:12:6a:28:f7:d0:94:9c:4b:6c:96:dd:82:
50:e0:4d:15:01:ad:f4:ff:8a:81:3a:74:92:5b:77:fa:6b:53:
95:67:5a:57:bb:30:b6:7d:18:41:60:4d:19:ba:64:b4:cf:e8:
2d:30:40:f4:7c:e9:09:1c:c7:43:a9:87:74:4e:99:ba:f2:ef:
90:6c:f1:14:ec:4c:74:31:c3:7e:4d:18:e0:a2:56:3b:d4:62:
29:7a:6e:69:09:77:22:a2:d4:8f:b1:5e:bb:ca:11:1f:08:14:
42:1d:44:01:75:74:90:fe:73:56:e9:cd:33:7f:11:59:87:67:
19:6c:b5:f1:38:54:78:8b:d6:4b:ce:1f:ca:7d:cc:a4:f1:44:
4c:85:71:04:89:fc:b2:a5:09:c7:71:f3:38:62:96:19:eb:45:
6a:c9:c7:b8:eb:2a:1e:a6:ab:c6:87:b1:f4:a2:1e:bd:a0:b5:
c4:9c:dd:37:18:16:b1:d0:c3:b0:00:be:03:28:90:11:63:a8:
86:f8:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:05 2025 by rpki-client