Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json)
Hash identifier: OGzY9REIdmO0STG2Bfc6uWnnKQWkPGgDZUMlgFMgTFQ=
Subject key identifier: 12:9F:11:6F:7F:1A:00:AB:AE:68:BA:AF:06:60:C6:2B:A1:F8:67:C0
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial: 0197470BD6561EABD23FFADBA7ABB44C7DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
Manifest number: 139C
Signing time: Fri 06 Jun 2025 21:00:47 +0000
Manifest this update: Fri 06 Jun 2025 21:00:47 +0000
Manifest next update: Sat 07 Jun 2025 21:00:47 +0000
Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: 4UUMnb950AR9jj4KX544OCdJFUjHH/DebzDq9tISF8k=)
2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d6:56:1e:ab:d2:3f:fa:db:a7:ab:b4:4c:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
Validity
Not Before: Jun 6 21:00:47 2025 GMT
Not After : Jun 7 21:00:47 2025 GMT
Subject: CN=129f116f7f1a00abae68baaf0660c62ba1f867c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:53:5d:85:6c:10:d5:40:2b:83:ec:b3:7c:
d9:b4:a6:2a:5a:9f:03:47:86:9e:86:2a:e4:73:62:
65:c5:97:d8:dd:6a:0c:8b:50:06:2f:f4:91:5d:b0:
e2:4c:23:ba:ed:0b:2a:b3:ef:ee:b4:b5:9a:57:9a:
15:a5:d2:10:cb:a7:09:9e:17:6f:78:06:97:12:03:
ca:e2:c1:47:9d:b6:ed:09:19:4d:95:35:0e:75:ba:
20:68:a9:63:de:d1:28:97:88:d2:ee:cd:3b:8d:d9:
ee:33:70:2a:15:f0:33:51:6d:b7:81:58:fb:12:e6:
58:a6:eb:90:01:5f:78:47:68:29:12:68:d3:2b:60:
4f:29:1d:30:ae:cc:fa:08:a6:a8:3b:a0:f7:25:fa:
78:0c:00:de:9e:ab:cd:82:fd:cd:0b:79:6a:11:9d:
68:02:8d:d2:5e:4b:d9:68:a1:a2:c2:b3:7c:5e:df:
2a:0f:24:0f:87:d3:63:93:bc:12:da:71:f0:20:88:
92:5d:24:ec:42:85:8c:9d:5f:7a:3f:75:7c:c9:07:
0a:fa:be:f4:97:db:67:98:59:53:81:96:fb:53:93:
a5:1c:08:ef:a3:b0:85:9b:46:b9:62:b7:c8:2d:ea:
af:ca:e7:a3:e2:d3:3d:3d:a3:78:71:ec:8b:1c:fd:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:11:6F:7F:1A:00:AB:AE:68:BA:AF:06:60:C6:2B:A1:F8:67:C0
X509v3 Authority Key Identifier:
keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:7b:0d:d7:45:05:0f:1d:86:ba:fd:0b:9d:33:41:b9:a8:
00:f2:52:05:d3:23:44:30:48:54:86:18:40:f8:13:80:bb:d2:
0e:d2:da:d4:ae:bc:47:4d:c6:ac:e7:06:12:b6:b9:60:d1:ee:
91:67:9b:76:f4:fa:43:77:24:91:4c:b8:e8:ab:17:0b:4a:27:
f4:bd:cc:b6:d7:8d:fb:66:73:57:1c:4b:51:c4:60:d4:bb:2d:
df:a1:8f:fa:13:91:44:c8:76:76:01:a7:55:de:3b:51:fa:b4:
79:b2:51:68:bf:9e:95:e2:67:96:da:04:0f:77:03:7d:fe:41:
ea:1c:bc:13:3b:44:a1:8a:72:44:36:b6:59:ef:6e:e3:72:5a:
5a:ea:9a:65:d1:ea:ec:99:37:1e:d9:55:23:74:83:0f:17:21:
af:5e:d6:ab:e0:e0:c8:81:04:a1:8a:d6:31:92:55:10:ba:c6:
5e:83:1c:03:64:6a:99:5a:31:2b:0c:5d:56:04:b1:69:cf:7d:
a2:be:1f:1a:8d:a3:a1:7d:65:ec:6a:86:69:58:e1:9a:10:bb:
de:de:45:70:78:2f:8d:e1:86:5b:0e:2b:0d:8c:bf:c1:02:0c:
f8:d5:f4:cb:2e:7d:0f:0d:73:dd:c0:a0:ee:66:8f:f9:6d:ed:
df:e5:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:29 2025 by rpki-client