
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: Z98l+i4sx3eDR5m7D9O+dSfeEZupCctwBKauzWmo+eQ=
Subject key identifier: B9:7E:FD:60:7E:58:61:99:F0:0F:D9:B1:45:61:D9:11:95:CD:91:EF
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 019921B10ACD1959F937FDFDC76FE863B5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0AC1
Signing time: Sun 07 Sep 2025 01:01:14 +0000
Manifest this update: Sun 07 Sep 2025 01:01:14 +0000
Manifest next update: Mon 08 Sep 2025 01:01:14 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: wMNa42DNg7ztOAwIb8ZHWnO/VKhuTqWEVxmUcmu5HFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0a:cd:19:59:f9:37:fd:fd:c7:6f:e8:63:b5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Sep 7 01:01:14 2025 GMT
Not After : Sep 8 01:01:14 2025 GMT
Subject: CN=b97efd607e586199f00fd9b14561d91195cd91ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:31:53:85:5d:e1:d1:bc:bc:24:49:57:8f:
d2:d3:7e:28:3a:bb:fc:72:ec:25:ed:34:66:c1:c4:
2a:e0:5f:7e:0f:22:aa:26:94:40:24:4a:96:a8:f4:
44:e5:4b:07:f7:2a:33:c4:4a:61:e8:70:41:3d:00:
72:ce:51:2e:e1:e4:26:9d:48:61:a2:6a:3d:5c:c6:
00:1f:07:33:04:e9:9c:41:81:be:e3:50:48:d0:82:
02:0b:0a:81:03:05:2c:b2:92:ed:ec:90:21:c0:a8:
a4:e2:5b:56:d0:1d:5c:6c:6a:d7:77:be:6a:bf:09:
01:d4:3b:63:18:df:a7:f0:3f:0b:93:6f:c1:9a:d6:
d1:89:1e:84:3f:59:29:76:d8:10:97:0b:c4:6b:a2:
e8:11:75:f9:59:91:3c:1b:48:26:59:2c:10:d2:3b:
81:3a:dc:c9:01:03:e4:8f:30:48:f1:94:f2:a0:ed:
b5:53:31:ef:04:66:ce:aa:35:34:45:5d:cb:2d:b7:
c9:7b:51:5b:48:4d:9f:eb:30:ed:8a:85:a7:d0:29:
91:eb:e8:61:b0:f3:32:da:0e:d7:b7:f2:b5:ec:f9:
b6:3e:0b:42:7a:83:5d:4b:2c:54:91:01:ef:34:53:
4d:0c:7d:96:7e:7f:06:ff:e5:19:1a:c2:b1:65:00:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:FD:60:7E:58:61:99:F0:0F:D9:B1:45:61:D9:11:95:CD:91:EF
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:e0:a7:63:70:0a:a9:13:50:3c:ef:3a:60:7e:7f:c4:ae:
98:14:ee:77:c7:3a:95:12:f2:64:88:10:4f:25:3c:cc:30:81:
f6:93:93:e8:f4:1f:9a:cc:e9:d1:54:1f:83:6c:a8:f6:c2:cc:
3a:0e:4e:fd:0e:5f:e1:2c:89:57:ee:c5:83:0c:6d:43:99:54:
a5:9f:3f:1b:17:61:79:64:0b:9c:90:90:48:df:33:d2:a0:35:
d9:7f:9a:6e:ec:2c:b7:65:c3:bf:86:99:12:f4:35:4e:91:eb:
b3:fa:73:48:ee:62:e5:17:02:c9:b0:96:2b:d9:74:aa:c9:91:
10:96:f8:ba:95:09:0b:fe:15:0a:dd:e3:24:97:a6:9e:34:35:
53:a8:02:ce:7f:4e:71:16:c6:2a:75:d7:1c:e4:51:d6:6b:93:
bb:cb:f5:40:98:a9:78:2d:3b:c6:68:55:3b:57:15:62:7b:6e:
cf:b2:97:3e:e6:0a:3e:96:36:98:90:2b:52:f9:74:5b:71:53:
1d:f6:8a:16:d0:b3:a9:c7:52:81:f8:a4:5d:0e:a9:21:23:9d:
98:f2:39:04:47:e8:98:63:5e:6f:e9:bd:93:08:02:4c:5f:3f:
0f:7e:ad:9c:98:15:1e:14:01:f3:7d:db:6d:56:2f:37:b4:e5:
e4:06:bb:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsQrNGVn5N/39x2/oY7XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmI5NmQ0NzYzN2Q0N2M3MTYxNWI2MGRhMWY2OTFjNGE2
ZjBiNzAwHhcNMjUwOTA3MDEwMTE0WhcNMjUwOTA4MDEwMTE0WjAzMTEwLwYDVQQD
EyhiOTdlZmQ2MDdlNTg2MTk5ZjAwZmQ5YjE0NTYxZDkxMTk1Y2Q5MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1awxU4Vd4dG8vCRJV4/S034oOrv8
cuwl7TRmwcQq4F9+DyKqJpRAJEqWqPRE5UsH9yozxEph6HBBPQByzlEu4eQmnUhh
omo9XMYAHwczBOmcQYG+41BI0IICCwqBAwUsspLt7JAhwKik4ltW0B1cbGrXd75q
vwkB1DtjGN+n8D8Lk2/BmtbRiR6EP1kpdtgQlwvEa6LoEXX5WZE8G0gmWSwQ0juB
OtzJAQPkjzBI8ZTyoO21UzHvBGbOqjU0RV3LLbfJe1FbSE2f6zDtioWn0CmR6+hh
sPMy2g7Xt/K17Pm2PgtCeoNdSyxUkQHvNFNNDH2Wfn8G/+UZGsKxZQASnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl+/WB+WGGZ8A/ZsUVh2RGVzZHvMB8GA1UdIwQY
MBaAFHq7ltR2N9R8cWFbYNofaRxKbwtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMt
NjJhMTlhMzg3NTViLzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMtNjJhMTlhMzg3NTVi
LzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHvgp2Nw
CqkTUDzvOmB+f8SumBTud8c6lRLyZIgQTyU8zDCB9pOT6PQfmszp0VQfg2yo9sLM
Og5O/Q5f4SyJV+7FgwxtQ5lUpZ8/GxdheWQLnJCQSN8z0qA12X+abuwst2XDv4aZ
EvQ1TpHrs/pzSO5i5RcCybCWK9l0qsmREJb4upUJC/4VCt3jJJemnjQ1U6gCzn9O
cRbGKnXXHORR1muTu8v1QJipeC07xmhVO1cVYntuz7KXPuYKPpY2mJArUvl0W3FT
HfaKFtCzqcdSgfikXQ6pISOdmPI5BEfomGNeb+m9kwgCTF8/D36tnJgVHhQB833b
bVYvN7Tl5Aa7Lw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:12 2025 by rpki-client