Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: Cx4ZAxk1ywbdBxZXlZlt2RBVnOocXbX2m9zSMbOmR4U=
Subject key identifier: E0:65:38:B5:DF:DC:ED:91:DD:F3:0D:C1:A4:27:A3:DD:F8:74:B7:6C
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 019A50070796A90C59627243390198D25FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 09AC
Signing time: Tue 04 Nov 2025 18:00:29 +0000
Manifest this update: Tue 04 Nov 2025 18:00:29 +0000
Manifest next update: Wed 05 Nov 2025 18:00:29 +0000
Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: AgAzy9VNSsa0XR4TYAn7hNTduriFCWW1MRYbz5zawIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:07:96:a9:0c:59:62:72:43:39:01:98:d2:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Nov 4 18:00:29 2025 GMT
Not After : Nov 5 18:00:29 2025 GMT
Subject: CN=e06538b5dfdced91ddf30dc1a427a3ddf874b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:85:cc:66:fa:a1:f4:ab:c6:a6:3d:f3:91:
50:fd:20:50:ec:0e:3f:c1:47:e3:91:ea:57:ab:d0:
0c:25:62:31:e8:dc:38:eb:13:61:28:ef:d4:9d:0f:
50:60:2d:f5:38:ac:6a:ab:67:9f:b6:a6:3b:3c:d4:
2a:29:7b:74:58:36:47:34:90:43:08:08:d8:94:42:
09:af:43:dc:fb:ac:9d:b6:c9:32:2f:3a:e7:e8:67:
ff:01:f5:c1:e2:87:1f:1f:5b:dd:21:0c:ce:50:c0:
f3:0c:fa:8b:94:c5:1d:98:83:70:5b:fa:66:9f:57:
73:ed:6c:3f:12:0d:e7:f2:0b:f6:8f:38:cc:e0:41:
ed:87:fc:f0:42:c7:b9:77:e3:7f:47:22:a8:d1:12:
61:d6:a8:29:0d:01:1e:94:44:6a:57:d3:ef:17:f3:
53:9b:12:b1:de:2c:79:f1:37:6b:ae:72:83:d4:f0:
39:89:78:bc:1c:c0:f8:43:fa:5f:46:b4:c5:ea:94:
a7:be:9b:9f:1e:00:44:9e:f2:a9:91:0c:f9:8e:06:
21:98:33:d4:68:24:1b:26:4a:ed:03:d9:ad:82:66:
a5:68:56:2c:ae:6d:8f:09:11:74:1d:61:8c:1a:28:
d8:c5:40:9c:8c:d2:5e:50:26:e8:8f:bc:4e:c2:a5:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:38:B5:DF:DC:ED:91:DD:F3:0D:C1:A4:27:A3:DD:F8:74:B7:6C
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:73:f7:8a:52:05:ab:75:34:02:81:39:cb:04:58:26:de:9c:
c1:12:72:f8:bf:94:5c:79:60:5f:09:66:cb:b6:df:4e:7d:48:
60:a3:fd:ab:3f:2d:42:cf:cb:d3:35:46:21:a0:3c:8c:c5:4a:
78:af:9a:c1:d5:54:b8:c9:61:00:67:ab:f6:b1:2a:bb:69:a1:
7c:af:f5:0f:5a:0c:db:bf:fa:d7:a9:32:eb:48:5c:18:aa:92:
65:89:84:b6:5e:35:d4:55:8f:82:ca:9f:5a:0f:88:fc:9d:4d:
70:de:f3:84:c2:47:1c:cf:1d:6d:df:c1:78:31:55:d1:5b:ac:
98:61:1c:9c:4c:c5:a1:05:cc:68:0b:a1:4d:28:42:54:af:73:
04:1f:52:5f:ea:73:e3:a1:f6:a0:7a:9b:cb:4a:22:a6:91:61:
54:21:0d:71:2d:ef:7d:66:ae:af:69:25:6d:68:a6:34:b5:3d:
32:9a:0c:17:a2:40:3e:f9:4e:37:69:9d:5e:ac:6a:44:c9:2b:
b0:dd:90:cf:7d:e6:6a:f2:8a:10:79:d9:fd:a1:fd:e2:aa:82:
a2:55:84:36:5d:88:8d:8a:45:2f:88:d4:61:6e:80:35:31:69:
a1:a7:ba:9d:dc:ef:58:bf:f7:e9:5a:d8:2a:3b:9b:b7:ac:2f:
a8:5c:20:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBweWqQxZYnJDOQGY0l/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjUxMTA0MTgwMDI5WhcNMjUxMTA1MTgwMDI5WjAzMTEwLwYDVQQD
EyhlMDY1MzhiNWRmZGNlZDkxZGRmMzBkYzFhNDI3YTNkZGY4NzRiNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGFzGb6ofSrxqY985FQ/SBQ7A4/
wUfjkepXq9AMJWIx6Nw46xNhKO/UnQ9QYC31OKxqq2eftqY7PNQqKXt0WDZHNJBD
CAjYlEIJr0Pc+6ydtskyLzrn6Gf/AfXB4ocfH1vdIQzOUMDzDPqLlMUdmINwW/pm
n1dz7Ww/Eg3n8gv2jzjM4EHth/zwQse5d+N/RyKo0RJh1qgpDQEelERqV9PvF/NT
mxKx3ix58TdrrnKD1PA5iXi8HMD4Q/pfRrTF6pSnvpufHgBEnvKpkQz5jgYhmDPU
aCQbJkrtA9mtgmalaFYsrm2PCRF0HWGMGijYxUCcjNJeUCboj7xOwqWrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBlOLXf3O2R3fMNwaQno934dLdsMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnP3ilIF
q3U0AoE5ywRYJt6cwRJy+L+UXHlgXwlmy7bfTn1IYKP9qz8tQs/L0zVGIaA8jMVK
eK+awdVUuMlhAGer9rEqu2mhfK/1D1oM27/616ky60hcGKqSZYmEtl411FWPgsqf
Wg+I/J1NcN7zhMJHHM8dbd/BeDFV0VusmGEcnEzFoQXMaAuhTShCVK9zBB9SX+pz
46H2oHqby0oippFhVCENcS3vfWaur2klbWimNLU9MpoMF6JAPvlON2mdXqxqRMkr
sN2Qz33mavKKEHnZ/aH94qqColWENl2IjYpFL4jUYW6ANTFpoae6ndzvWL/36VrY
Kjubt6wvqFwgcw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:31 2025 by rpki-client