Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: BfmwekHBUnvcAliLrE8d79j0f2+xgihIrsfUiII7480=
Subject key identifier: BF:40:01:8B:AC:37:A6:65:42:C7:C3:D5:AC:05:B2:76:E4:82:FA:D9
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 019A71B79AE2868B4ABCFB8EEB5DD254DF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0B6F
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: Jn4+oijaJBASc5LpWp2ewkq7CdH58MxVvOLucBdkPa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9a:e2:86:8b:4a:bc:fb:8e:eb:5d:d2:54:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=bf40018bac37a66542c7c3d5ac05b276e482fad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:2d:88:2c:bc:75:1a:d9:0d:10:cf:a1:e4:
50:23:6b:fa:7a:5d:c3:58:4e:7c:bf:2d:ae:d9:ec:
3d:2c:f6:d2:49:7f:6e:91:09:d7:c8:f7:89:e4:f4:
81:f1:67:69:5c:e2:e7:aa:da:af:0d:fe:89:ec:29:
89:0e:5e:88:93:6b:dd:02:f4:54:26:20:bf:c6:47:
61:ce:32:9d:b4:d1:76:56:4b:6c:87:ca:04:98:b7:
4e:0f:bd:87:ca:cb:3f:1c:3a:31:d0:65:d3:56:ea:
de:1b:cb:10:a1:37:1c:62:2c:58:12:67:6a:ed:e4:
f3:e3:d8:f2:67:de:f7:13:20:6b:82:8e:fd:5c:48:
9a:ac:64:9a:9b:2d:53:34:55:9e:df:f7:40:c6:93:
fb:ea:4c:4a:ea:87:28:23:34:5e:d5:36:32:cf:5d:
7c:48:fc:2c:d2:19:34:2c:20:cd:9c:f9:07:2c:b4:
ad:fe:37:9f:18:1e:4e:1d:64:6f:bf:b2:0e:99:9c:
3d:20:f1:a8:9c:61:60:54:e5:e5:41:d5:86:9f:a5:
82:e4:1b:64:85:db:af:6f:12:21:95:e7:92:41:fb:
c5:fa:2d:d4:42:f5:11:96:3a:ec:a5:f2:14:b3:31:
5b:c2:0d:0d:2e:5f:fe:a8:af:0f:70:70:46:6a:74:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:01:8B:AC:37:A6:65:42:C7:C3:D5:AC:05:B2:76:E4:82:FA:D9
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:16:49:b6:4b:39:a8:a4:50:ba:3d:c1:9f:c4:ba:2e:4c:
dd:b9:41:1e:b0:c4:85:b7:01:92:ce:24:92:cd:41:45:56:07:
2b:f4:2e:18:e5:35:29:ff:ff:92:42:d8:5e:ca:6a:0f:e5:65:
d6:ac:fd:2e:9c:32:ca:80:77:0f:ec:ae:6a:76:13:f7:69:1e:
6e:41:ab:11:6b:82:a9:b1:33:42:63:69:34:bb:1b:c9:32:bc:
e3:fa:40:cd:8f:98:e1:49:df:f7:4a:82:10:60:10:89:27:1b:
4a:a3:ad:82:f1:44:9e:51:9b:d0:2c:86:01:7f:20:9c:94:b0:
0f:c7:6c:e6:fc:bd:36:17:6d:ac:a6:18:2b:8f:db:a5:17:97:
dd:98:8c:ba:8c:49:07:14:87:7d:18:0e:e2:5e:6c:96:ef:52:
ed:0f:71:49:23:cc:7e:55:35:6a:7d:07:d6:8a:dd:1e:29:97:
73:c3:e4:64:cc:f2:33:a9:29:69:e6:1d:37:c5:3c:e7:49:85:
20:2b:93:4f:38:7c:df:26:4e:41:02:99:39:9f:5c:64:98:79:
2e:b3:4d:df:6a:03:0d:2d:4b:cc:33:c5:d2:4d:8c:b2:78:fe:
a2:c9:22:29:c4:e0:73:9b:fc:f0:7e:a3:dd:1a:3f:af:24:f2:
15:cb:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client