Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: 3vwpiQ2RNT68ctvQvk5ZT3kPzqvMvu45brpNZCRG0XY=
Subject key identifier: 2F:E6:EE:1C:81:88:F8:CE:61:FB:01:96:B7:35:3A:50:93:95:20:4B
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 0197711B3FED2BD51135826098D2C620365F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0916
Signing time: Sun 15 Jun 2025 01:01:40 +0000
Manifest this update: Sun 15 Jun 2025 01:01:40 +0000
Manifest next update: Mon 16 Jun 2025 01:01:40 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: V98uX82uwyGLFFwYwZbOS1XbDXxXmTsmbOwu8pK2Kco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:3f:ed:2b:d5:11:35:82:60:98:d2:c6:20:36:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Jun 15 01:01:40 2025 GMT
Not After : Jun 16 01:01:40 2025 GMT
Subject: CN=2fe6ee1c8188f8ce61fb0196b7353a509395204b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:19:92:e6:03:04:86:95:66:8c:7a:d2:5b:
7d:96:f1:76:dc:d4:dd:1e:34:ee:02:6c:dc:95:f1:
51:03:b9:b1:96:b9:e6:c3:6f:2e:61:74:01:b7:ad:
c6:5b:66:7f:61:dd:54:44:b0:b6:00:31:87:b2:13:
87:44:6a:8e:aa:cc:d8:a1:61:1e:06:7b:8e:cb:12:
e3:fb:d7:f9:7e:68:91:70:6b:d3:95:fa:61:cc:fe:
1e:95:6c:67:81:ea:4c:29:50:f5:9f:fd:ed:43:bf:
a2:50:32:7b:cf:eb:e6:ed:4f:11:fc:3c:ea:a9:ea:
04:83:c9:c4:0b:4a:02:dc:09:db:2d:81:41:f6:99:
5e:e9:73:15:f6:19:43:2d:21:20:90:90:f6:14:8a:
8b:75:76:fe:35:25:90:22:b8:fe:65:01:64:f5:b4:
ec:f6:69:6b:05:a2:a5:85:2f:19:35:c4:13:75:c4:
8b:d3:6a:22:08:fc:e3:01:93:65:8e:5f:c4:b3:8f:
d6:da:76:f2:67:75:65:2a:c4:ef:8a:30:c8:b6:e8:
f2:1f:d6:a3:bf:71:f4:23:9c:58:89:1d:d0:62:c8:
86:32:6b:92:85:da:d2:02:04:4a:09:ce:b7:8e:2b:
2a:b0:2f:af:79:a5:28:cc:70:60:04:0f:c0:cf:17:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:EE:1C:81:88:F8:CE:61:FB:01:96:B7:35:3A:50:93:95:20:4B
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:e6:9e:63:16:52:8a:db:12:2c:77:d7:68:86:d4:62:4b:
ab:d1:fc:16:c1:1e:7d:7a:cb:8c:e6:03:d6:fc:74:21:a5:24:
10:f3:63:b3:79:2b:99:a4:2b:48:32:34:19:73:3c:25:b0:5c:
17:c4:23:55:46:e7:c0:53:12:41:3a:c8:90:68:ed:e2:62:4c:
0f:b6:be:57:f6:93:0a:2b:c3:35:74:57:64:d9:bf:e4:b1:b1:
06:45:56:48:15:95:0e:d4:bd:82:3f:74:9e:d9:95:bc:68:0d:
6b:dd:37:e1:51:c2:54:42:6e:a1:57:af:e0:8a:5e:79:82:ff:
cd:a5:33:39:16:96:57:c2:bf:ab:0e:f7:6d:17:e4:d1:4d:0d:
ec:69:6f:0a:ca:e1:7a:a2:b6:52:57:20:90:7d:13:5a:0b:ec:
eb:5a:8b:7e:d7:78:fb:3a:bf:59:f5:37:bc:bf:aa:2f:5e:d5:
50:85:27:c0:7c:85:9c:0a:a4:51:cd:35:54:76:d4:a5:ba:36:
77:70:f6:42:8f:e3:79:5d:a8:b2:cc:d7:cc:78:4b:81:54:92:
94:5f:d7:0a:06:df:d8:63:a2:87:2c:82:83:11:1a:f7:60:43:
34:a1:a9:48:c4:40:24:12:60:f0:00:d9:7b:4b:aa:b1:c7:71:
ea:16:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:33 2025 by rpki-client