Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: 5bdU1N6sR0k0mGFsFwEttGr8foK1/DYShONPPpErc5A=
Subject key identifier: 6E:A8:8E:8B:5D:7A:C9:AA:46:58:8C:AC:B3:D0:A9:75:5E:2F:75:2F
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 01968992C94295A82F6D181EA371A216D952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 013A
Signing time: Thu 01 May 2025 02:00:20 +0000
Manifest this update: Thu 01 May 2025 02:00:20 +0000
Manifest next update: Fri 02 May 2025 02:00:20 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: sYcFNGgs1IKe+uzPepfW7Su3zv3tptkUVIiqdxNeWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:c9:42:95:a8:2f:6d:18:1e:a3:71:a2:16:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: May 1 02:00:20 2025 GMT
Not After : May 2 02:00:20 2025 GMT
Subject: CN=6ea88e8b5d7ac9aa46588cacb3d0a9755e2f752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:cb:f3:49:da:2d:18:82:8d:04:e6:6a:23:
85:d5:81:aa:fe:cd:00:cd:2a:95:3d:0c:27:bf:04:
f3:13:b7:06:b8:86:43:f1:23:21:77:26:a6:25:c8:
c2:98:94:55:69:cb:cd:71:f7:83:ea:68:9c:31:a6:
eb:1b:a1:d7:60:2c:e3:91:f9:f0:b3:d5:bb:4f:ec:
27:1d:2a:14:68:c4:8f:34:6a:5f:ac:d3:f1:76:8b:
38:60:ff:ca:98:94:9c:01:62:ed:a2:27:6b:46:3a:
71:52:d3:55:25:61:7e:09:8f:2b:28:79:59:2f:69:
6e:65:4f:de:1f:85:35:e1:c3:57:d8:c1:f3:65:dc:
7c:45:03:42:74:8d:ca:c0:6a:10:10:88:0a:be:6f:
70:58:40:95:e5:85:9b:5d:28:58:1f:5f:34:3a:fe:
ca:ac:b4:45:67:12:f4:b7:b3:d1:a8:6d:8d:9b:7e:
d3:36:c5:2f:17:ea:ac:6d:e0:af:37:f0:41:b8:4f:
c0:8d:2d:2f:05:67:89:f7:82:15:7a:be:d8:c5:2a:
0e:2d:69:d7:1d:bd:7d:9e:a4:6a:00:91:f7:a8:41:
41:3b:17:5e:1f:4c:37:13:d8:56:12:eb:55:58:32:
58:00:af:65:2a:88:19:d9:a6:77:82:dd:84:ac:e8:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A8:8E:8B:5D:7A:C9:AA:46:58:8C:AC:B3:D0:A9:75:5E:2F:75:2F
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:5b:24:b5:65:dd:dd:40:84:ec:6f:3d:27:39:59:19:60:
f7:bf:ab:5b:37:6d:4e:50:2c:09:7d:d2:aa:b2:98:47:8d:50:
83:a9:03:b5:29:cf:5a:06:e1:46:cd:f0:13:5b:6d:2a:8a:09:
8c:5f:54:8c:88:3d:47:a0:73:af:d6:19:33:2f:98:00:51:f9:
7e:58:7a:ec:ef:9a:27:51:90:61:16:1b:44:b6:b5:6f:6b:75:
c1:7f:92:16:4b:ce:18:d7:a5:d1:3b:76:bd:fb:9a:36:29:7b:
5c:82:7a:d2:e3:cc:e0:88:7c:44:fc:fb:d5:3e:f4:40:f3:d9:
e1:aa:60:43:4d:80:68:ac:bc:56:a4:1d:2c:03:ea:0d:e2:cc:
5e:83:1c:01:f5:54:ca:36:e3:b0:f9:7d:21:f2:69:5e:8c:16:
77:8b:f3:0d:94:b8:0f:a0:61:9f:3a:72:7b:2f:47:a6:9e:dd:
9e:92:a5:58:d9:42:f3:66:24:40:db:fe:6a:0d:fd:4e:cf:c8:
37:8d:f5:1a:9e:02:2f:3f:e3:7b:28:d4:19:d3:0e:d6:46:a8:
b6:e7:af:da:25:79:de:af:cf:0d:08:0f:c2:13:be:25:f2:1b:
c8:bc:f6:fd:30:c5:13:f1:f9:c6:7c:c3:87:b9:f5:f5:97:cf:
70:db:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:23 2025 by rpki-client