Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: rMMfmZbuPk/90WGY3HBZamBW4M4ZuaiMSR5jmNncao8=
Subject key identifier: F4:9A:1E:10:BE:EC:4A:BF:72:A6:BE:9F:3C:F9:A4:DB:34:20:3C:E3
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 019799DEFCB061CBAF1CC6EB5907B11312FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 01C7
Signing time: Sun 22 Jun 2025 23:00:17 +0000
Manifest this update: Sun 22 Jun 2025 23:00:17 +0000
Manifest next update: Mon 23 Jun 2025 23:00:17 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: /e1ic+VKyMj0ro7+JGZqRl1vww1DKv9dT4vA42u5TYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:de:fc:b0:61:cb:af:1c:c6:eb:59:07:b1:13:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Jun 22 23:00:17 2025 GMT
Not After : Jun 23 23:00:17 2025 GMT
Subject: CN=f49a1e10beec4abf72a6be9f3cf9a4db34203ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:d5:34:96:d6:3e:e2:6c:bb:a0:d9:44:d4:
54:db:62:ef:bd:df:5f:6a:43:bd:6b:6c:89:42:9d:
d8:6d:53:e7:2b:ee:9c:1b:9e:e0:bc:27:67:ab:cd:
79:52:96:9f:db:f3:74:6a:92:17:2b:09:2d:b9:dd:
24:43:11:3d:c3:8e:21:7b:50:6c:fe:8f:8d:a5:ec:
40:8a:ed:70:07:7a:3a:b7:5a:bd:35:cb:c0:d2:81:
29:cc:24:8e:b8:c2:64:8f:68:ec:ec:da:a4:c1:b9:
a6:f2:53:70:64:14:8a:00:64:3c:97:89:14:29:cc:
8f:e6:5e:91:93:d6:87:57:85:31:44:b0:a3:fe:70:
91:15:2a:fe:0a:54:5f:fe:98:cf:a7:1e:f0:81:a1:
4f:c3:00:bb:68:f8:57:a8:e9:8c:a0:f3:bf:c4:28:
a1:66:75:32:46:4f:46:59:f6:07:02:b1:2e:f4:0e:
2d:cc:cb:72:3e:7f:5c:7c:16:a2:53:04:96:c5:11:
56:2c:27:3c:16:d7:98:57:fc:a7:2b:88:81:76:65:
74:67:94:c2:83:47:3a:eb:2d:d0:d5:d5:10:fb:86:
de:4a:31:34:e5:22:57:a3:d8:c7:b4:85:1d:0b:1e:
a5:12:84:79:05:47:e1:3b:eb:30:f9:e0:1d:f1:b4:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:1E:10:BE:EC:4A:BF:72:A6:BE:9F:3C:F9:A4:DB:34:20:3C:E3
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:52:3b:e9:83:8d:f3:33:96:ef:02:87:3e:ed:8d:52:51:
46:17:95:43:20:53:65:4e:6b:ef:8f:73:d2:5c:91:12:ed:45:
09:4f:3c:1b:78:46:a8:c2:6f:34:24:c2:63:10:18:14:99:ac:
59:e1:dc:ba:f9:a2:f7:7a:52:f0:4c:62:60:84:5d:d2:23:a5:
27:86:54:3f:b2:32:14:3d:59:7e:5d:90:6c:23:37:8b:62:fc:
33:c2:78:3e:ea:e7:d4:7f:8f:87:e0:da:2d:37:be:9e:e6:6e:
07:05:10:04:c2:f3:2b:9c:35:0b:b5:95:d1:7b:40:f0:b7:bb:
fd:0c:f1:91:a6:0d:95:c9:37:ed:8f:52:19:27:87:a8:80:ea:
df:37:dd:e2:05:ea:98:d3:84:06:fa:13:ae:9f:1f:e3:31:8e:
35:27:74:d1:04:ec:32:8e:97:bd:84:9d:c7:ab:39:a3:b7:b4:
d7:5e:a6:a7:66:e5:2c:d2:73:61:ce:e2:69:3a:9e:94:32:64:
b3:6e:9d:9b:76:1f:e9:78:b4:1e:64:bb:a7:b0:04:f1:fc:9a:
c1:c3:06:65:03:02:12:dd:b7:f8:50:a2:1b:00:28:70:c8:43:
d9:0c:36:0a:0f:98:ef:4b:50:8d:40:c0:bd:c4:29:76:1d:72:
40:73:b5:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeZ3vywYcuvHMbrWQexExL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm
MDIwZmMwHhcNMjUwNjIyMjMwMDE3WhcNMjUwNjIzMjMwMDE3WjAzMTEwLwYDVQQD
EyhmNDlhMWUxMGJlZWM0YWJmNzJhNmJlOWYzY2Y5YTRkYjM0MjAzY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZrVNJbWPuJsu6DZRNRU22Lvvd9f
akO9a2yJQp3YbVPnK+6cG57gvCdnq815Upaf2/N0apIXKwktud0kQxE9w44he1Bs
/o+NpexAiu1wB3o6t1q9NcvA0oEpzCSOuMJkj2js7Nqkwbmm8lNwZBSKAGQ8l4kU
KcyP5l6Rk9aHV4UxRLCj/nCRFSr+ClRf/pjPpx7wgaFPwwC7aPhXqOmMoPO/xCih
ZnUyRk9GWfYHArEu9A4tzMtyPn9cfBaiUwSWxRFWLCc8FteYV/ynK4iBdmV0Z5TC
g0c66y3Q1dUQ+4beSjE05SJXo9jHtIUdCx6lEoR5BUfhO+sw+eAd8bSzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSaHhC+7Eq/cqa+nzz5pNs0IDzjMB8GA1UdIwQY
MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8dSO+mD
jfMzlu8Chz7tjVJRRheVQyBTZU5r749z0lyREu1FCU88G3hGqMJvNCTCYxAYFJms
WeHcuvmi93pS8ExiYIRd0iOlJ4ZUP7IyFD1Zfl2QbCM3i2L8M8J4Purn1H+Ph+Da
LTe+nuZuBwUQBMLzK5w1C7WV0XtA8Le7/QzxkaYNlck37Y9SGSeHqIDq3zfd4gXq
mNOEBvoTrp8f4zGONSd00QTsMo6XvYSdx6s5o7e0116mp2blLNJzYc7iaTqelDJk
s26dm3Yf6Xi0HmS7p7AE8fyawcMGZQMCEt23+FCiGwAocMhD2Qw2Cg+Y70tQjUDA
vcQpdh1yQHO1Sw==
-----END CERTIFICATE-----
Generated at Mon Jun 23 04:34:32 2025 by rpki-client