Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: G/GJgTTzgK94yjqGn751bKnPwzKvzUwW1LFqYuE3Im4=
Subject key identifier: 6C:88:3D:D6:E8:18:DA:AD:40:33:BD:A4:A0:B8:40:55:B7:D2:FC:8C
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0198A083AEF96ED171979B0F3F0D541C9408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 024F
Signing time: Tue 12 Aug 2025 23:00:41 +0000
Manifest this update: Tue 12 Aug 2025 23:00:41 +0000
Manifest next update: Wed 13 Aug 2025 23:00:41 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: EewoNWwwAtoBmjwodrP8FPUQ0z72Gs2nFZ19F0sHeJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:ae:f9:6e:d1:71:97:9b:0f:3f:0d:54:1c:94:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Aug 12 23:00:41 2025 GMT
Not After : Aug 13 23:00:41 2025 GMT
Subject: CN=6c883dd6e818daad4033bda4a0b84055b7d2fc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:80:a5:64:41:9e:89:a7:7a:47:db:6e:07:
94:ff:04:3b:d1:85:f6:55:f3:08:29:9b:e0:4f:2f:
a2:bb:6b:f7:f7:0b:47:bd:a8:c3:a0:31:a7:c2:e2:
20:3f:b4:d6:8d:e2:0e:78:8b:c1:b8:76:9f:ba:61:
9c:a4:8d:77:e7:69:36:eb:e2:a5:08:69:66:9d:13:
0b:5b:6b:ec:93:91:89:e2:2d:d7:13:03:41:57:c7:
53:66:ba:e1:fc:dc:9e:6d:d2:b5:ef:5c:0c:78:58:
6b:93:6d:d4:47:50:2c:9f:1f:ae:57:08:52:a9:91:
eb:7a:e1:a1:b7:34:a8:1f:76:4a:99:9f:8e:de:49:
f2:30:72:e1:f3:e6:0e:2d:db:b5:fb:78:30:31:11:
b8:03:58:da:4a:09:59:be:27:27:23:94:59:1b:00:
7d:e4:7d:c4:9b:e4:8a:de:f2:31:ad:3f:47:53:3e:
9c:79:1a:87:55:76:7c:7c:63:6f:44:e3:b7:db:38:
d8:b9:3f:9e:41:31:4e:34:49:55:70:80:e6:b8:30:
80:fe:7f:4b:02:3e:9c:5c:08:d9:07:11:0d:f3:ac:
de:e3:50:f2:45:8f:15:0c:a5:df:8f:ca:bb:8a:a7:
e1:9b:54:47:22:10:fe:c7:56:79:79:1f:9f:64:0d:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:3D:D6:E8:18:DA:AD:40:33:BD:A4:A0:B8:40:55:B7:D2:FC:8C
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:5c:89:35:08:d6:58:f9:f6:8d:b3:18:9e:93:1c:91:c2:
ca:0e:25:b5:d6:ff:da:79:49:d3:dd:6c:d1:25:4a:81:cf:08:
d8:1a:88:9a:11:09:6c:63:98:6e:34:0b:34:bd:6a:1c:0b:48:
3c:1d:40:0a:2d:b4:49:36:a0:c4:9c:dd:ae:37:27:a1:f7:62:
18:6b:4c:6d:25:ea:ae:42:47:81:fa:41:56:18:d8:37:4e:8e:
1e:d6:21:6a:fe:cb:83:ae:0f:f0:7c:df:77:00:5d:1d:63:62:
6b:68:31:45:bc:e4:d0:b5:06:4a:bb:45:b0:9d:4d:52:ab:92:
3b:91:96:40:ff:84:52:d2:da:bd:a1:09:b8:0d:a1:ca:95:67:
ad:ed:85:60:7f:8a:c2:12:64:0a:b5:c1:3c:80:49:e4:fb:5b:
d6:39:b1:ed:c3:67:b6:83:b1:6a:1f:28:d9:04:15:73:60:9f:
de:24:8e:fc:ed:4a:72:b8:02:1e:86:32:a1:74:47:33:0d:04:
28:30:e6:40:5b:d8:41:68:89:72:1e:ab:8c:74:69:4d:bc:a5:
0a:c6:02:46:56:ed:33:96:48:81:3b:3b:13:18:34:90:ed:bc:
8b:c8:03:4d:a6:c0:9b:a7:c0:1e:57:d4:8f:7e:f2:9f:f0:9d:
c2:11:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:26 2025 by rpki-client