Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: HTX+yfnp+MdZhEvEmWE6BVzpEg2GrEsQg2ZTDuXsKJ0=
Subject key identifier: 64:F2:CD:32:93:2E:75:86:52:A7:C3:24:25:E0:DA:45:55:E6:7E:14
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019A711311CE31554A72A05C80783A6F8E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 02D6
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: p1L5NGwRfMJKCihB2OxrpGhHFGp3RDB4gy4hEHziXzY=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:11:ce:31:55:4a:72:a0:5c:80:78:3a:6f:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=64f2cd32932e758652a7c32425e0da4555e67e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:7f:f9:1a:b4:e9:d7:77:b1:00:d2:2b:ef:
f2:f3:1a:a4:29:3f:cf:f4:8a:55:38:5e:c2:fc:f4:
0e:bb:fd:8c:7d:b0:6d:1c:26:85:7d:de:c3:44:8d:
fa:f3:23:cc:94:78:b9:5a:94:e0:48:5f:15:73:9f:
21:26:8b:83:62:06:a1:9d:66:6f:a6:00:76:71:7e:
01:21:12:16:e7:f5:4d:2b:3b:f2:58:95:86:d5:a6:
3a:38:b2:27:82:ac:b0:8d:4c:9d:78:a8:c5:d0:1c:
45:52:96:a6:9c:84:de:97:02:8e:be:ca:a6:9f:1e:
ed:ae:84:40:21:9a:05:3c:6e:81:ba:ba:bf:32:9c:
af:2e:a9:81:8a:0f:7b:8d:59:a2:50:b2:2a:7a:f7:
b1:4f:4e:40:1a:32:0f:fa:84:e0:f0:0e:ac:a9:d2:
69:0b:89:1f:74:ef:a2:6c:06:31:6d:d8:f0:41:fe:
cf:93:58:c0:0a:37:a2:16:30:1e:42:69:79:96:84:
13:f9:e2:78:01:a6:3f:13:f6:ab:38:d4:1a:07:86:
ee:d1:10:2e:5a:ad:e3:09:ef:4c:aa:22:e6:c5:ff:
9a:1e:76:9c:07:c5:b0:01:9d:c8:d5:cc:0f:a8:3d:
b8:96:1f:23:a8:dc:6f:16:ee:ef:19:3a:71:09:d6:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:CD:32:93:2E:75:86:52:A7:C3:24:25:E0:DA:45:55:E6:7E:14
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2d:d8:2f:2e:d9:9b:1c:7e:96:74:49:12:87:a8:d6:d8:4c:
86:cb:04:b4:4e:34:aa:05:3b:be:88:f8:21:b7:e0:d3:85:cc:
56:78:21:e9:ab:aa:3c:8e:b8:45:a5:45:40:f4:dc:e0:cf:eb:
ec:2a:71:9f:09:65:3c:37:4c:c1:f2:46:62:3e:de:f0:36:ee:
16:b7:ce:95:c0:41:d4:07:7b:0f:9d:be:a7:e1:28:75:81:47:
5e:db:7e:14:67:4b:df:9f:2b:5b:7c:f4:c1:ef:7c:ac:fd:7c:
05:32:ac:fd:fa:ea:28:d5:92:e0:b8:d3:56:b8:b1:31:87:7d:
a8:26:be:08:f7:98:51:09:6c:d3:99:62:a8:c8:d9:87:2c:b7:
a7:6c:50:e5:50:e8:4b:de:7c:1c:63:4b:be:d7:23:1b:2b:72:
29:5d:3e:9f:d5:19:25:77:3a:be:b7:19:fb:03:8c:e7:08:bf:
98:8c:ce:01:9b:24:82:d1:d3:1d:84:96:f9:8b:67:26:08:fc:
55:55:1d:bf:28:8e:1e:a5:58:52:2f:1d:49:f0:e3:ee:12:75:
8a:e1:90:21:1c:ba:a5:dd:da:18:82:c5:06:a4:14:9e:2d:a4:
69:bb:81:8b:62:4c:7d:d5:b9:11:5c:13:36:01:d3:e5:c4:8c:
f1:f9:86:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExHOMVVKcqBcgHg6b44jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjUxMTExMDQwMTA2WhcNMjUxMTEyMDQwMTA2WjAzMTEwLwYDVQQD
Eyg2NGYyY2QzMjkzMmU3NTg2NTJhN2MzMjQyNWUwZGE0NTU1ZTY3ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+9/+Rq06dd3sQDSK+/y8xqkKT/P
9IpVOF7C/PQOu/2MfbBtHCaFfd7DRI368yPMlHi5WpTgSF8Vc58hJouDYgahnWZv
pgB2cX4BIRIW5/VNKzvyWJWG1aY6OLIngqywjUydeKjF0BxFUpamnITelwKOvsqm
nx7troRAIZoFPG6Burq/MpyvLqmBig97jVmiULIqevexT05AGjIP+oTg8A6sqdJp
C4kfdO+ibAYxbdjwQf7Pk1jACjeiFjAeQml5loQT+eJ4AaY/E/arONQaB4bu0RAu
Wq3jCe9MqiLmxf+aHnacB8WwAZ3I1cwPqD24lh8jqNxvFu7vGTpxCdbWZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTyzTKTLnWGUqfDJCXg2kVV5n4UMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS3YLy7Z
mxx+lnRJEoeo1thMhssEtE40qgU7voj4Ibfg04XMVngh6auqPI64RaVFQPTc4M/r
7CpxnwllPDdMwfJGYj7e8DbuFrfOlcBB1Ad7D52+p+EodYFHXtt+FGdL358rW3z0
we98rP18BTKs/frqKNWS4LjTVrixMYd9qCa+CPeYUQls05liqMjZhyy3p2xQ5VDo
S958HGNLvtcjGytyKV0+n9UZJXc6vrcZ+wOM5wi/mIzOAZskgtHTHYSW+YtnJgj8
VVUdvyiOHqVYUi8dSfDj7hJ1iuGQIRy6pd3aGILFBqQUni2kabuBi2JMfdW5EVwT
NgHT5cSM8fmG3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:12 2025 by rpki-client