Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: K8cZyM2+FMYtx54K7Zdd+fEN52PeqJ73NsczoUH27KE=
Subject key identifier: F8:C7:E1:BB:6A:0C:96:02:46:8B:11:10:B3:98:EC:FE:F0:3C:47:08
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 019922FAD31D763E53D985372CEB958ADA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 162D
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: LW3Ct729034WsWbaxLnVCFkI2qwWI/UhfUX/KhzOxEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d3:1d:76:3e:53:d9:85:37:2c:eb:95:8a:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=f8c7e1bb6a0c9602468b1110b398ecfef03c4708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:72:cd:5c:cc:27:22:36:b5:f9:c8:d7:55:
5f:15:75:da:45:33:cc:ab:24:5a:13:fb:ee:d2:9c:
b2:e9:ad:91:48:3c:28:35:10:d1:d2:c8:d8:29:df:
1c:ac:f8:cf:6a:dc:ff:94:3c:4d:9b:24:49:94:e1:
14:9b:5f:50:9c:c8:ab:6c:e8:4f:90:dc:ec:73:6e:
fa:86:fe:f7:3e:52:06:43:12:d9:ac:ab:e5:cc:76:
dd:df:97:a2:04:94:2a:c1:0c:83:c1:cd:58:14:50:
54:80:7b:50:f9:43:b8:1c:34:28:dc:b3:5c:ec:2c:
64:2c:0a:50:aa:b3:07:55:d6:82:79:b1:06:32:81:
be:7d:cf:7e:08:61:bb:48:72:13:ca:ca:eb:ce:3f:
c5:ff:18:71:3c:5b:67:d9:f9:f1:a7:0d:b5:32:72:
45:99:a8:a9:43:be:41:fb:77:44:99:23:66:26:5f:
fa:f7:20:64:b2:a8:af:28:47:81:95:18:77:1d:bc:
91:20:58:92:c3:a5:7a:7b:0f:dc:01:b0:b1:71:fa:
95:ba:5c:b9:c1:a4:4c:67:ea:29:b4:ba:d9:4a:21:
8d:b5:a8:1d:ca:69:b2:ce:65:3d:3e:cd:74:f5:9b:
7a:73:24:c0:5a:41:25:05:06:35:c2:b5:1b:4c:19:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:E1:BB:6A:0C:96:02:46:8B:11:10:B3:98:EC:FE:F0:3C:47:08
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:24:e5:89:84:3c:53:f5:ee:52:ae:3c:bf:97:e4:71:24:
2b:cd:00:53:d0:53:23:d7:c1:52:79:95:30:3f:9c:98:1c:6f:
bf:21:c0:47:5a:2f:ea:ef:7d:23:dd:0b:92:ee:83:73:9d:fa:
7f:65:a8:1d:3b:e4:39:55:1e:55:83:55:02:23:c4:ca:e8:6d:
4c:ce:1e:fb:7e:ca:2b:36:3d:f8:f9:c7:3c:80:82:b0:f5:4c:
03:af:e3:5c:98:0c:44:2f:d2:cc:7a:0e:d9:31:5c:54:2e:3d:
05:ca:2e:91:f7:ae:31:c6:d4:62:2a:c4:20:40:77:30:34:e9:
29:48:21:57:21:ab:26:aa:5c:06:77:89:c7:df:2b:dc:f7:e2:
87:40:85:0f:84:ea:00:6d:a1:97:5f:b3:8d:e9:a4:01:eb:37:
18:93:3c:b7:f4:6f:5b:f2:97:ae:38:52:53:f4:25:63:5f:70:
3a:84:21:88:8d:5a:75:d9:83:a1:98:9d:77:8a:12:6f:54:43:
d2:0b:ef:29:04:46:94:82:14:53:2f:e0:27:48:52:28:3b:70:
42:4c:26:78:2d:a6:eb:5f:0d:41:9f:0d:90:48:08:41:5e:72:
de:d5:09:c4:b9:f2:c6:6a:2f:d3:6b:3d:8d:b7:7c:ea:bd:ff:
c9:70:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:30 2025 by rpki-client