Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: h9hGPfYxozGegYoRrhmllQpdqcqBQRPrQzEfFmaqSuc=
Subject key identifier: BC:68:2D:12:B3:44:EE:E1:3A:06:86:2B:E3:0A:2E:47:C8:FF:96:97
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 019A71135C2268EAA69EECCDE61518234726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 16DA
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: LL8HxeuZlh2Utj/7tLV8u8lkjCmRXWWnW11QJzPiQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5c:22:68:ea:a6:9e:ec:cd:e6:15:18:23:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=bc682d12b344eee13a06862be30a2e47c8ff9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c1:52:1f:e9:36:4d:0d:7a:c3:62:a2:df:36:
3b:99:3d:29:d7:a0:92:60:ea:7a:df:20:b9:b5:78:
ab:00:79:93:d4:2f:8a:37:1d:f4:f6:c9:f3:71:f2:
1d:77:cb:b5:8b:0a:ae:9c:76:87:02:5d:aa:a1:56:
65:59:65:61:45:09:43:4a:4a:78:c6:c3:b5:43:70:
76:ef:63:bd:ea:ab:c8:eb:1d:ec:e1:c4:50:fa:57:
8d:a8:de:7a:42:16:10:e8:9f:89:a7:05:74:b8:80:
ac:39:1e:2d:a7:04:a4:8f:70:13:7a:25:b0:77:07:
b6:24:56:a1:fd:99:68:5b:e5:6f:f3:15:92:dd:71:
ef:1a:25:e1:45:e8:85:4f:b3:4a:33:e9:b8:75:e2:
1f:5f:77:85:97:f1:34:ff:d0:fe:04:6e:59:39:03:
ff:be:53:d7:d9:3b:38:86:03:ff:1c:16:6f:24:dc:
25:61:af:bc:e5:e7:f7:95:9e:d4:97:c8:93:1e:c0:
ba:0d:08:e3:f8:87:d8:48:42:58:69:75:b3:95:5b:
c1:05:59:30:82:c3:d8:b7:d7:df:bb:1b:0b:3e:04:
51:42:7d:e0:2e:7a:e2:f5:02:26:c7:a6:07:a3:4d:
5a:8b:0e:69:9c:25:52:95:10:02:84:8a:36:31:2b:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:2D:12:B3:44:EE:E1:3A:06:86:2B:E3:0A:2E:47:C8:FF:96:97
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:08:5f:88:43:bd:88:73:ef:eb:62:ee:67:4d:11:b5:bc:3f:
ab:6e:7b:78:f8:90:06:1b:6b:55:cf:5c:91:0d:91:ce:df:e9:
fc:e4:26:42:00:5a:8f:d6:5e:ba:dc:0c:84:61:89:ea:37:b3:
b0:f6:3d:6c:88:fc:14:13:89:2f:29:67:99:34:85:c3:1e:a7:
d2:d5:32:f7:39:95:d9:29:32:a7:b6:43:a0:bc:4f:04:6a:6b:
a7:1a:19:9e:19:02:42:94:40:42:8c:f0:e9:27:56:88:24:32:
62:c7:fc:a8:86:3c:09:43:93:06:d5:bd:9d:b7:e7:b8:39:bf:
30:70:dd:3f:6a:f5:b2:1e:65:c0:e3:72:49:27:de:c5:2b:dc:
05:f9:0b:86:d0:ba:fa:d3:45:3a:07:6d:67:c4:0e:c7:63:3b:
a4:4a:43:2a:a9:5b:3b:39:23:2b:44:34:08:8d:3a:dd:4b:4c:
f0:1f:58:24:de:0d:46:64:fc:f0:79:72:bc:cb:45:71:54:96:
b2:2b:27:94:86:c0:df:5b:d3:e8:ea:c4:37:f1:66:ab:76:0e:
50:d0:88:c8:b0:4c:5f:5c:4c:b3:a1:5b:83:70:9a:58:d0:f1:
0a:1b:df:9c:a2:57:79:16:bc:24:b2:64:67:43:2b:c9:d3:7b:
0e:57:ba:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1wiaOqmnuzN5hUYI0cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjc0YjAxMzA3ZjljM2ZhNzU2MTk2Mzg0MTczMTE1ZTY2
ZTZjNTUwHhcNMjUxMTExMDQwMTI1WhcNMjUxMTEyMDQwMTI1WjAzMTEwLwYDVQQD
EyhiYzY4MmQxMmIzNDRlZWUxM2EwNjg2MmJlMzBhMmU0N2M4ZmY5Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MFSH+k2TQ16w2Ki3zY7mT0p16CS
YOp63yC5tXirAHmT1C+KNx309snzcfIdd8u1iwqunHaHAl2qoVZlWWVhRQlDSkp4
xsO1Q3B272O96qvI6x3s4cRQ+leNqN56QhYQ6J+JpwV0uICsOR4tpwSkj3ATeiWw
dwe2JFah/ZloW+Vv8xWS3XHvGiXhReiFT7NKM+m4deIfX3eFl/E0/9D+BG5ZOQP/
vlPX2Ts4hgP/HBZvJNwlYa+85ef3lZ7Ul8iTHsC6DQjj+IfYSEJYaXWzlVvBBVkw
gsPYt9ffuxsLPgRRQn3gLnri9QImx6YHo01aiw5pnCVSlRAChIo2MStoBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxoLRKzRO7hOgaGK+MKLkfI/5aXMB8GA1UdIwQY
MBaAFHq3SwEwf5w/p1YZY4QXMRXmbmxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAt
OWY1Zjc4MzUyNjAwLzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAtOWY1Zjc4MzUyNjAw
LzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQhfiEO9
iHPv62LuZ00Rtbw/q257ePiQBhtrVc9ckQ2Rzt/p/OQmQgBaj9ZeutwMhGGJ6jez
sPY9bIj8FBOJLylnmTSFwx6n0tUy9zmV2Skyp7ZDoLxPBGprpxoZnhkCQpRAQozw
6SdWiCQyYsf8qIY8CUOTBtW9nbfnuDm/MHDdP2r1sh5lwONySSfexSvcBfkLhtC6
+tNFOgdtZ8QOx2M7pEpDKqlbOzkjK0Q0CI063UtM8B9YJN4NRmT88HlyvMtFcVSW
sisnlIbA31vT6OrEN/Fmq3YOUNCIyLBMX1xMs6Fbg3CaWNDxChvfnKJXeRa8JLJk
Z0MrydN7Dle6gw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:54 2025 by rpki-client