Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: h7w5+zr3+eM8Dj+UG8ysx9YDztomd+OFsCqtdumJAuU=
Subject key identifier: EC:11:E9:53:1A:D3:92:5B:ED:E0:62:83:56:E1:6D:7E:87:D3:A7:22
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019A7225F83480550CDBCC627C6D4EA5F48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: cTqgmJVR4/aTIeAmm69JdcMnZwUSpioI5pUgffSoPjk=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f8:34:80:55:0c:db:cc:62:7c:6d:4e:a5:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=ec11e9531ad3925bede0628356e16d7e87d3a722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:af:45:01:93:e1:82:53:1d:90:66:c5:23:
89:00:9d:f4:69:df:d1:0b:6d:ce:e2:06:f8:f7:b6:
2b:76:51:04:35:3a:3f:24:a7:a3:89:20:58:7a:f9:
bb:0b:a4:59:8a:04:f5:8d:6c:4e:7b:13:9d:ce:d0:
38:3e:e0:10:25:96:3b:46:4d:1e:3c:2e:d4:f6:0b:
90:03:55:1f:41:5c:c2:b0:61:08:6c:3d:b0:5d:04:
36:e6:73:d1:8b:96:80:cb:8a:8e:1b:da:0a:fc:e4:
10:3c:a8:1d:ed:35:5b:c0:28:8d:f1:d1:e4:93:38:
a0:72:d1:88:27:fe:02:31:f4:f4:c8:3f:65:82:e5:
3c:83:3f:aa:70:8b:51:27:02:4d:6e:aa:08:4f:4d:
5a:58:af:6e:d9:29:b2:c9:86:48:36:9e:b3:b1:52:
ad:47:9b:06:2d:05:01:2f:7a:10:68:82:dd:61:60:
77:b7:0f:96:3e:40:e5:e5:4b:d5:23:7f:ef:ee:76:
25:ea:86:84:06:39:6b:ba:d9:7a:f6:57:14:7f:b8:
e7:51:6e:57:3b:3e:3c:45:dd:9f:96:51:e3:71:3e:
2e:d8:9e:43:60:14:22:1d:48:b2:54:31:f0:51:0d:
34:08:45:c5:f5:fe:c1:37:a0:a6:5a:d5:e3:5f:42:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:E9:53:1A:D3:92:5B:ED:E0:62:83:56:E1:6D:7E:87:D3:A7:22
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:a2:a0:5c:d5:5a:9e:13:f2:c4:5e:65:06:90:da:8b:39:
d3:ec:99:28:7b:74:a5:2e:8b:84:fb:b6:80:aa:d0:6f:2b:7a:
1c:51:d6:1f:d6:c7:3d:ce:b1:99:d9:b1:75:80:ff:b8:ca:f7:
cd:fc:48:54:71:de:03:6a:06:a4:60:02:21:63:31:08:49:91:
d4:0d:fd:77:50:8f:07:05:1b:a2:02:7c:27:f9:2b:57:b4:ec:
44:a1:9c:55:88:e2:fc:42:d0:53:43:0a:d7:d1:2a:ab:8c:f3:
1c:d8:31:c0:bf:a8:59:51:a4:b2:17:b3:76:f8:78:d7:60:f3:
dd:41:1f:dc:64:dc:b3:ff:6d:1e:99:81:51:b7:65:d1:b7:a0:
c3:38:aa:b4:da:7d:4b:33:75:a4:4e:3d:94:da:0e:81:d0:e3:
72:97:5c:59:0d:7b:b8:bd:ce:d8:81:81:cb:00:74:2a:b7:f0:
74:5b:6d:9e:99:37:c3:bb:64:f5:36:38:1a:32:04:99:c3:84:
c1:a2:da:0f:e9:ac:ca:24:f6:33:3c:03:d5:b0:c1:1d:e3:50:
a5:49:95:e6:36:13:3a:ca:44:c0:7c:97:9b:cc:ed:d1:72:99:
08:c9:bf:80:01:d9:58:a5:9d:81:d9:55:72:84:88:30:22:16:
1a:b2:f8:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfg0gFUM28xifG1OpfSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw
YjhlOGYwHhcNMjUxMTExMDkwMTIyWhcNMjUxMTEyMDkwMTIyWjAzMTEwLwYDVQQD
EyhlYzExZTk1MzFhZDM5MjViZWRlMDYyODM1NmUxNmQ3ZTg3ZDNhNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4OvRQGT4YJTHZBmxSOJAJ30ad/R
C23O4gb497YrdlEENTo/JKejiSBYevm7C6RZigT1jWxOexOdztA4PuAQJZY7Rk0e
PC7U9guQA1UfQVzCsGEIbD2wXQQ25nPRi5aAy4qOG9oK/OQQPKgd7TVbwCiN8dHk
kzigctGIJ/4CMfT0yD9lguU8gz+qcItRJwJNbqoIT01aWK9u2SmyyYZINp6zsVKt
R5sGLQUBL3oQaILdYWB3tw+WPkDl5UvVI3/v7nYl6oaEBjlrutl69lcUf7jnUW5X
Oz48Rd2fllHjcT4u2J5DYBQiHUiyVDHwUQ00CEXF9f7BN6CmWtXjX0KulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwR6VMa05Jb7eBig1bhbX6H06ciMB8GA1UdIwQY
MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt
MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi
LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIyioFzV
Wp4T8sReZQaQ2os50+yZKHt0pS6LhPu2gKrQbyt6HFHWH9bHPc6xmdmxdYD/uMr3
zfxIVHHeA2oGpGACIWMxCEmR1A39d1CPBwUbogJ8J/krV7TsRKGcVYji/ELQU0MK
19Eqq4zzHNgxwL+oWVGkshezdvh412Dz3UEf3GTcs/9tHpmBUbdl0begwziqtNp9
SzN1pE49lNoOgdDjcpdcWQ17uL3O2IGBywB0KrfwdFttnpk3w7tk9TY4GjIEmcOE
waLaD+msyiT2MzwD1bDBHeNQpUmV5jYTOspEwHyXm8zt0XKZCMm/gAHZWKWdgdlV
coSIMCIWGrL4xg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:05 2025 by rpki-client