Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: M0NotoioyXfiea2wqx1TvOttm36k0gljyllWTFwcpwA=
Subject key identifier: 93:BB:D4:91:9F:68:F7:71:E2:83:F8:6E:CA:71:11:89:A8:5A:9A:2E
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019A70DC8550B3FB29BCE3CACFBEDF97A985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 140A
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: 3VxKbmQtRxR3qpwj5d89x5LZTGq06/rtHp4bGXseq6g=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:85:50:b3:fb:29:bc:e3:ca:cf:be:df:97:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=93bbd4919f68f771e283f86eca711189a85a9a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:ea:6f:69:e8:88:73:8c:8b:f8:ad:13:4c:
84:27:5d:0c:9a:72:e7:e2:35:15:67:2d:5b:9f:37:
11:eb:87:4c:70:3c:8f:53:12:51:4e:fa:30:0f:c4:
1b:f1:cd:20:ab:34:cd:c3:32:06:c5:1e:16:8b:eb:
2d:24:a5:f5:1b:b9:aa:5f:1f:52:fc:b6:d9:c0:6e:
6e:6a:8d:7a:e8:5c:45:d4:7e:bd:33:7a:62:9c:7e:
d2:a7:a8:b2:ad:34:7a:5d:85:85:b4:89:ce:21:54:
f3:70:ca:89:23:11:0e:58:34:5c:7e:30:57:2a:52:
ad:0a:60:f1:ee:68:bc:a6:58:ff:08:3f:b5:48:bf:
81:b0:ef:ed:61:ea:a4:55:cc:c1:b3:65:3c:a0:29:
c0:5f:8b:7c:51:14:ce:61:aa:07:b5:1c:ec:ae:ef:
f6:20:22:97:08:94:28:ca:98:02:f5:7c:d3:df:5a:
b1:46:ce:37:80:9f:e0:cf:f6:66:a1:24:9b:e9:56:
1a:53:c8:92:64:a1:92:09:5a:15:54:59:91:1a:af:
51:b7:df:59:1c:68:59:ab:c1:ae:62:40:e6:71:83:
6d:4a:19:f5:73:b4:41:58:8a:46:d8:22:37:5c:44:
28:e8:b9:a1:80:2b:35:98:02:a4:6b:0e:23:cc:96:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:D4:91:9F:68:F7:71:E2:83:F8:6E:CA:71:11:89:A8:5A:9A:2E
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e8:10:c3:4b:68:e6:42:ad:7d:3f:c0:71:04:e0:2e:a7:fa:
1e:36:35:eb:58:eb:96:dc:ea:22:c0:7a:0b:30:e7:22:7d:2e:
e0:fb:29:04:a8:f4:3b:78:80:1a:24:b7:cd:af:e9:2f:c2:d2:
1c:33:72:96:42:e5:86:08:6a:8e:36:62:4d:8a:53:b2:48:b7:
aa:45:7c:92:6e:f8:58:dd:8a:a7:ba:61:fc:af:e2:ae:94:f4:
68:8d:e1:68:25:02:de:3f:01:9a:e2:be:b3:8d:84:7b:dd:11:
d9:a0:1b:86:14:f4:1c:af:d0:84:36:8b:f9:1b:5f:a9:7d:35:
63:73:f2:d5:aa:b2:c2:78:7f:a0:1f:ca:ff:fd:fa:d9:01:0c:
6b:cb:2d:bc:a6:fa:5a:76:5f:7d:70:bb:9f:21:85:1a:7c:b2:
63:34:84:98:3c:d4:4a:e7:14:4d:dc:7d:ae:2b:a6:2c:43:e6:
91:66:9e:ef:69:af:97:80:2a:a7:b9:90:80:91:86:a8:60:9c:
ec:90:03:20:59:e1:07:c4:b0:44:29:90:5e:b3:fd:52:d8:23:
fc:a1:ee:1e:cd:ea:f1:04:99:fe:af:9c:15:84:ae:96:26:4e:
d4:a2:49:78:3e:2f:6b:75:f7:2f:a4:64:ef:fe:aa:51:6a:4a:
65:cc:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:59:05 2025 by rpki-client