Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: ES+Tg5Lf9VguVFq6itbXIKXgPZTvUKxIJYKHwNoX6ek=
Subject key identifier: 65:33:BA:E4:5D:23:FC:EC:B9:2F:44:5E:23:3D:93:5E:24:9D:6F:EF
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0198A15FAC984639D22961CA67955AEC1607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 131A
Signing time: Wed 13 Aug 2025 03:00:58 +0000
Manifest this update: Wed 13 Aug 2025 03:00:58 +0000
Manifest next update: Thu 14 Aug 2025 03:00:58 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ppAxgUYDOZNWEbjqmYf2PQ5k3LmYZ82JdNsK4MWrN4w=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:ac:98:46:39:d2:29:61:ca:67:95:5a:ec:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Aug 13 03:00:58 2025 GMT
Not After : Aug 14 03:00:58 2025 GMT
Subject: CN=6533bae45d23fcecb92f445e233d935e249d6fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:58:18:2d:01:63:42:a1:3b:92:68:53:20:
58:f2:9a:49:09:f8:11:dd:2d:75:db:50:7b:47:e9:
5e:43:e2:eb:2f:b7:7d:bf:13:1d:0c:64:e9:e7:ae:
b6:17:78:9d:cc:fc:28:de:41:c1:eb:6a:d4:43:6d:
55:a1:05:37:13:10:b4:df:65:ca:8f:fe:20:78:53:
3e:f8:47:99:22:51:2a:16:00:be:5b:5d:b1:cb:7c:
1d:d2:b3:ae:09:fa:8d:9f:65:b0:3b:59:6e:39:58:
b3:08:6b:17:bc:ee:51:e6:ce:a0:b3:dc:14:71:6a:
72:f6:d7:02:5b:5a:ad:33:1b:67:b2:a6:e2:4d:0a:
05:35:a7:a4:28:d6:8e:c3:a8:59:98:04:eb:2b:7f:
dd:44:59:53:11:50:01:f3:a4:a0:1f:0a:de:10:d9:
1a:4d:ab:e9:09:dd:5b:3d:80:6a:87:21:44:70:11:
d2:3c:5e:c8:1f:12:dd:0e:bd:51:06:07:79:49:d5:
4a:a9:46:df:4d:6a:23:8e:5b:5f:8c:90:f9:7e:10:
21:d7:48:46:c2:77:51:ed:98:a5:7c:55:39:20:88:
8d:41:7b:3d:66:14:3b:aa:91:8b:60:d4:30:6e:42:
15:5b:06:e4:5f:7f:7d:05:20:93:f9:bc:74:a7:fe:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:BA:E4:5D:23:FC:EC:B9:2F:44:5E:23:3D:93:5E:24:9D:6F:EF
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:3d:80:fb:51:aa:3a:9b:53:dd:d8:47:ee:52:bc:0a:ae:
9a:b9:72:be:54:86:cb:ff:37:b4:3d:ac:2f:e4:d4:cf:ff:04:
4d:34:7a:c9:ba:c1:31:a0:eb:cc:26:6b:6d:32:5d:17:fe:ea:
c1:69:74:4c:57:5d:ef:19:40:d3:52:2b:49:28:56:16:33:d9:
b4:12:9e:fd:58:3a:d2:5a:95:81:92:ad:6d:3f:b3:c6:be:3b:
74:a8:11:07:4f:b0:05:3b:76:9d:6a:d6:51:71:6e:42:07:18:
f8:85:e7:4f:dc:7e:ba:93:db:00:a6:f1:79:29:60:07:4e:ad:
99:e2:91:e1:c6:75:88:23:2a:a0:ab:0a:0b:9e:ae:0e:25:6d:
4c:2c:10:8c:52:c0:e6:30:b8:dc:d8:ca:2e:29:4c:32:a7:c4:
a3:4e:10:c2:35:77:1d:62:cf:7e:27:0f:72:14:c9:1e:0e:81:
4f:a8:68:82:1b:2b:9e:b7:34:96:df:84:4a:70:2a:78:96:be:
d3:c7:a2:bf:82:51:b1:29:83:c9:2a:a7:e7:4f:d4:e7:08:07:
85:c8:ee:eb:d5:0b:d3:8d:87:71:8b:bd:8b:88:d1:40:5c:b3:
b2:18:b2:82:17:f6:80:a8:0d:db:01:3f:a1:68:ac:d7:93:07:
4e:d5:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:27:22 2025 by rpki-client