Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: 0nKcT0ETUrgz5zfQLmhU+tK7agcXC7R+WTFVbg9qnjI=
Subject key identifier: 4E:E2:F7:4B:CA:FD:D7:9B:D2:14:0B:D3:9B:1E:EF:DF:FE:50:3B:EC
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 019A1B74FA315E5C1EF8FF573531382F9EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0776
Signing time: Sat 25 Oct 2025 13:00:42 +0000
Manifest this update: Sat 25 Oct 2025 13:00:42 +0000
Manifest next update: Sun 26 Oct 2025 13:00:42 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: bwiVLFtrXntKXKEYpiI3uotlEf9cnXa16R8uNN4F1xg=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:fa:31:5e:5c:1e:f8:ff:57:35:31:38:2f:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Oct 25 13:00:42 2025 GMT
Not After : Oct 26 13:00:42 2025 GMT
Subject: CN=4ee2f74bcafdd79bd2140bd39b1eefdffe503bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:0f:60:2a:45:2f:d5:07:9f:ae:09:a1:fe:
c9:67:da:15:52:5f:3f:c9:d3:b6:d7:5b:79:4c:48:
dc:a6:c4:af:d8:8a:08:af:8a:33:bc:82:81:25:81:
12:17:29:1c:36:b7:ab:ef:a8:7b:70:f2:7f:5a:96:
42:4b:c8:98:c2:89:94:1c:e5:f8:58:f4:2c:8e:bb:
09:1c:9e:6e:54:f9:d9:c0:9b:f9:56:3a:17:94:c3:
69:06:e5:fe:ba:1f:8a:42:01:06:2a:b7:4a:c6:d3:
ba:f6:fa:ca:cf:99:cd:c2:d5:25:78:1c:96:a5:c1:
10:02:37:47:59:69:de:6e:fa:4d:b9:1c:df:8c:38:
51:67:b8:c4:16:e8:28:da:21:71:d6:dc:ac:b6:66:
28:44:d9:25:f6:f9:64:eb:1f:2b:df:2b:7f:36:ee:
a0:8d:87:c4:79:f8:6e:a0:e3:b8:49:7f:96:a3:d6:
3d:34:b6:5c:60:85:d4:6f:53:4a:89:73:b5:6e:c2:
e1:65:3d:bb:b8:3b:ea:d5:26:30:ab:1e:58:21:d1:
6f:a3:77:a1:b5:57:ef:27:7a:ce:3c:67:a9:01:4f:
b5:c3:d0:f1:9c:86:c8:c1:53:da:91:5e:76:6b:39:
73:4f:47:2e:3f:c4:0d:ba:af:50:54:01:37:86:ec:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:F7:4B:CA:FD:D7:9B:D2:14:0B:D3:9B:1E:EF:DF:FE:50:3B:EC
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:70:0b:c4:b9:4e:d5:5b:60:e4:ac:20:6c:08:d4:34:6e:
6e:ba:d0:9a:bf:89:fb:b7:67:aa:0a:80:a0:8c:03:4d:9d:c2:
f7:80:a4:2f:20:ad:4e:72:99:84:e2:2a:46:21:a7:34:7d:a4:
b7:47:e8:df:53:3f:da:ca:5d:a7:bb:31:90:43:cb:8e:2c:94:
fd:e6:af:0e:8a:5e:2a:17:f1:85:9a:d8:9b:75:ed:b4:5f:ca:
e5:bb:1b:8b:a8:be:32:2f:fd:bc:5f:14:3c:a4:42:62:1b:09:
b6:85:8b:9d:00:20:d1:99:6f:e3:ba:be:dc:81:70:56:e7:6c:
6b:8a:0e:1e:60:ab:af:c9:b5:57:8a:a8:74:eb:d6:c5:b9:3f:
43:eb:05:b0:e1:85:fe:85:4a:d0:f5:8f:8e:fa:e8:d2:37:e3:
70:ed:40:ee:08:a1:a2:ab:de:4d:db:ca:d4:2e:5c:cb:d5:08:
b8:59:79:82:29:51:b3:a6:21:4a:56:8d:5e:21:83:2a:62:65:
14:ff:b8:1a:9f:db:db:c2:1e:58:fc:c8:2a:64:23:1d:a8:65:
7b:d6:f0:82:ef:95:a4:06:d9:51:72:62:bb:f7:b5:34:d3:3c:
63:1c:ac:1a:ad:8c:bc:f7:64:93:4d:d8:b6:b8:14:ab:10:fa:
77:98:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:19:59 2025 by rpki-client