Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: R+X4kOBrp2mLhgdeNRW5QUtsnxSpchdgsyUMRiux6d8=
Subject key identifier: 43:82:3D:5E:8F:40:86:3F:D3:BF:0A:F4:86:9C:EF:D4:18:C4:5B:7E
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 01989FA87F48EEB0F3781069A4B15CF7DDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 06B1
Signing time: Tue 12 Aug 2025 19:01:16 +0000
Manifest this update: Tue 12 Aug 2025 19:01:16 +0000
Manifest next update: Wed 13 Aug 2025 19:01:16 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: KSZNF93Fn54PbIKsmlijV4QEKFOxVl7FEQNKr3qCxnY=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:7f:48:ee:b0:f3:78:10:69:a4:b1:5c:f7:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Aug 12 19:01:16 2025 GMT
Not After : Aug 13 19:01:16 2025 GMT
Subject: CN=43823d5e8f40863fd3bf0af4869cefd418c45b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:47:35:c1:ad:ed:b2:f6:f4:f7:ce:2f:61:
7e:30:5f:0a:41:95:0c:b9:d6:f1:4f:46:d9:90:a1:
50:c5:80:bf:ad:74:36:03:6b:e5:03:bc:a7:f1:ad:
b0:1e:e1:ec:83:4b:15:9d:2a:30:38:68:6f:02:26:
66:7e:4a:4e:3c:f6:84:38:fe:6c:d4:57:73:cd:43:
fe:4b:61:c8:4d:3c:f6:3e:a0:5f:80:47:13:35:9a:
63:e8:c8:d5:c6:31:45:5c:a3:b2:09:60:0c:34:e8:
56:a3:a5:01:22:5b:3c:40:b0:fd:81:8a:89:83:be:
30:90:29:d8:07:b2:e1:a6:57:4a:ce:a4:30:e5:79:
d1:97:c9:83:45:34:d7:80:b4:93:06:79:37:bd:3e:
24:00:bb:99:79:79:56:a4:ba:b8:9c:47:14:33:00:
18:cc:51:a9:c8:98:b1:24:64:a8:d9:81:cd:97:fe:
a8:4c:2e:a5:e6:31:81:92:1a:ae:63:90:34:b1:e8:
65:09:10:42:73:95:6d:b1:ed:f3:55:0f:b7:b5:7f:
d4:e8:7f:e6:56:38:2b:23:4c:9c:c3:5c:56:3e:dc:
fa:7b:4e:5c:1e:30:de:ca:b7:64:30:36:0e:3a:74:
b0:00:99:cc:6d:ed:e6:4c:d2:a2:d5:73:a7:1d:f6:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:82:3D:5E:8F:40:86:3F:D3:BF:0A:F4:86:9C:EF:D4:18:C4:5B:7E
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:39:17:87:e9:53:58:f9:f1:3d:8e:ff:74:d2:b3:4d:82:ad:
0f:a7:36:23:39:3a:36:df:4d:e1:c7:97:1c:4a:c7:9f:13:45:
30:8e:11:91:26:26:ed:f6:e0:70:89:fc:9d:b4:59:98:93:22:
27:56:20:12:d6:5e:43:ad:35:e1:1d:5b:69:9b:4a:4a:7a:97:
0c:ac:64:2d:a9:e4:b6:60:ee:85:ce:b6:7f:86:aa:c0:e0:bf:
fe:7b:50:95:22:ea:7d:76:fc:9c:64:34:49:f3:7e:f1:3f:f6:
87:af:79:16:b8:f3:68:f6:58:9d:68:09:1b:61:b9:a3:d0:bc:
bd:0a:67:3a:a7:7e:be:a5:41:b2:b5:60:23:f7:71:7b:98:85:
b1:1d:dd:98:6f:66:1f:ee:d3:4a:c5:b9:e1:14:31:08:01:bb:
90:fb:52:29:66:f7:97:ed:a5:d3:a1:0f:33:9e:4e:bd:34:26:
45:a2:aa:75:f5:26:fe:36:a6:f3:9c:af:03:8e:7f:3b:7d:9f:
e4:f5:d9:16:07:e9:d3:01:2a:e6:0e:39:7c:d4:22:96:de:12:
05:bc:11:b8:01:03:13:30:58:62:17:1e:5d:50:ad:53:06:54:
50:d1:a7:07:3b:b5:45:62:52:b3:29:34:2f:ee:58:8e:c4:11:
33:df:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:12 2025 by rpki-client