Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 6ZOpOaVXW5vHW6s7yJ8F9y+Ok/gQyUbuj2iPB3HObK0=
Subject key identifier: F8:18:47:51:A5:17:E6:4E:E3:EC:7F:57:4E:30:73:35:AA:30:44:DA
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 0197899047C2DCFD4ADDB0AEB8F1780F1AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0621
Signing time: Thu 19 Jun 2025 19:00:23 +0000
Manifest this update: Thu 19 Jun 2025 19:00:23 +0000
Manifest next update: Fri 20 Jun 2025 19:00:23 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 9yv/1M6oylNXzhLwAuUlerH7/Sv7AEdsflz5hEDECbI=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:90:47:c2:dc:fd:4a:dd:b0:ae:b8:f1:78:0f:1a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Jun 19 19:00:23 2025 GMT
Not After : Jun 20 19:00:23 2025 GMT
Subject: CN=f8184751a517e64ee3ec7f574e307335aa3044da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:01:d3:c2:b5:98:d8:30:6f:df:90:e2:93:
94:bb:2a:38:66:f5:e6:5c:ac:66:0b:19:31:9e:21:
62:e8:3a:90:28:f5:f0:dc:c7:7f:23:e0:16:4c:45:
7e:4f:40:b8:50:36:40:86:48:0e:7d:4d:5d:92:02:
0a:e3:7b:42:4d:78:28:b0:4d:0d:f3:fe:54:d0:b5:
d9:8a:59:63:5b:c6:a5:03:f7:fe:c5:04:d4:3d:6d:
8e:28:87:ec:2c:e5:67:1f:5f:95:9c:fb:80:17:8f:
6f:d9:7b:24:36:95:34:7f:8a:f2:96:b2:1b:59:54:
b6:cf:8b:ef:b1:08:f3:57:3e:35:a6:74:cd:1a:74:
cb:e4:15:87:29:f6:7a:24:7a:e3:e4:76:af:ac:1c:
c1:8e:58:91:03:79:08:5c:4e:b7:89:28:3e:41:5d:
32:49:ad:2c:f0:bd:4f:76:53:f2:e8:4c:b5:6a:41:
29:4a:0f:6f:e4:a6:5c:0a:fb:e8:97:60:41:4a:3b:
65:a9:5f:cc:5d:84:26:2a:4b:6c:23:18:18:86:1b:
b1:16:30:4b:25:f2:e1:5b:ef:8d:03:00:c8:d5:9a:
e2:ff:72:01:44:3b:2e:fe:88:11:69:36:af:a9:2c:
81:c4:e3:96:b5:f6:e7:b0:72:28:81:b6:4a:5a:72:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:47:51:A5:17:E6:4E:E3:EC:7F:57:4E:30:73:35:AA:30:44:DA
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:ec:b7:8e:f9:0f:88:ca:db:8b:56:d4:25:df:6c:aa:ea:
2b:cd:6d:8c:4e:00:7d:54:ae:62:e1:b9:3c:b0:da:be:3c:e1:
65:8b:96:0b:f8:49:de:b0:cd:dc:aa:a7:da:2c:37:d3:cc:40:
66:af:86:97:3d:cf:68:5a:6c:18:5a:fe:47:57:98:24:fc:95:
fe:80:11:ad:bf:7a:92:96:5a:b8:cd:39:56:f3:40:d1:75:25:
92:58:86:2a:c4:6d:95:56:8a:a2:47:36:7c:dd:4d:6d:60:7d:
ec:ac:f4:45:de:b8:04:5f:1c:38:68:38:4a:50:07:e9:36:ab:
76:c8:00:c3:9f:56:bc:8d:27:55:ce:c4:0f:73:1b:91:63:18:
c4:f7:23:79:85:0e:f3:8b:a3:13:33:47:df:77:f4:b9:1b:42:
96:0a:d7:3d:d1:5a:d1:a2:0e:b2:6d:37:6e:d8:c6:2c:4d:b0:
c3:10:fc:f5:c6:72:a4:da:b1:fc:2d:1c:52:ac:f9:22:8a:23:
64:80:17:9a:ee:04:b2:03:59:b0:59:bf:dd:17:6a:f9:34:18:
62:0d:33:4b:e4:99:ce:b5:c5:fb:9b:5a:39:dd:d1:2f:87:23:
24:59:88:83:39:15:47:5d:29:d7:f7:ce:ae:0b:f0:98:48:5f:
1c:ab:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:56:03 2025 by rpki-client