Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: XR1GMccZ8/kh0ZF/jWkAVPsGpRRjVJPe9gwwqdLevjY=
Subject key identifier: 7B:A5:37:5F:61:91:C0:B5:AE:DB:67:6B:CE:2B:4A:F2:FB:9D:74:8F
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019A706E40C27926C50523D2EB1501D4FE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 01:01:04 +0000
Manifest this update: Tue 11 Nov 2025 01:01:04 +0000
Manifest next update: Wed 12 Nov 2025 01:01:04 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: F62tTVQqVxv4P+FqlUKFmInwtveeH2zWKz2I2jePpao=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:40:c2:79:26:c5:05:23:d2:eb:15:01:d4:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Nov 11 01:01:04 2025 GMT
Not After : Nov 12 01:01:04 2025 GMT
Subject: CN=7ba5375f6191c0b5aedb676bce2b4af2fb9d748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:ae:d8:a0:20:d0:70:8a:02:0f:83:09:76:
38:6a:22:60:9b:79:cb:c3:b1:8f:0d:45:6c:c0:7d:
64:c9:47:18:15:ca:2a:31:8d:41:ca:6d:58:8d:0f:
eb:ca:64:90:3c:37:65:2c:f5:64:13:db:64:9f:09:
96:dd:ba:69:3c:a4:32:d4:bf:a6:84:d2:c1:d3:3b:
72:2d:54:d8:d2:af:59:48:c8:f1:bb:f3:71:a0:36:
fb:78:be:56:b7:89:21:34:7a:84:28:07:b0:72:ee:
d8:b4:da:b3:17:0b:1b:7f:4a:61:f1:20:2e:34:65:
c3:3e:88:1a:1c:ca:c9:14:c8:44:3f:4a:a9:37:df:
e1:5d:a5:71:a2:b2:30:ab:a4:8e:ad:93:c6:26:a2:
ff:d4:38:c6:2f:13:28:a7:73:2a:8b:65:1f:e7:15:
39:2c:fb:c6:a4:b6:9e:75:26:80:8d:79:b2:65:7c:
c4:e7:ea:15:e3:fa:e9:1f:53:8a:22:be:d5:40:de:
f8:94:ab:9e:3f:13:61:5b:2a:a5:75:0d:b9:72:5a:
12:aa:af:4a:fd:0a:d3:a4:fc:1d:52:f2:9e:7e:d6:
55:6c:a3:a4:70:94:32:c8:d7:a1:e9:01:34:84:d4:
c9:11:4d:eb:32:56:22:9c:4f:cc:ca:c6:7f:05:1d:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:37:5F:61:91:C0:B5:AE:DB:67:6B:CE:2B:4A:F2:FB:9D:74:8F
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:7a:93:29:b5:86:ef:9d:47:12:d5:8b:dd:17:80:a6:26:
43:f3:93:0c:84:d7:12:da:7f:80:ce:e1:6b:0f:33:ae:5d:2b:
cc:c1:68:c0:04:6e:d6:1f:58:d7:21:22:93:19:b8:7c:9c:b2:
69:5b:ec:53:e3:2a:92:3c:e7:40:03:56:2c:44:37:55:98:fa:
b7:15:df:59:02:17:3c:a1:41:92:ae:79:10:30:67:b3:86:d6:
0f:71:da:d1:b3:50:fc:57:09:f0:51:97:f8:e1:49:ab:97:56:
1d:57:44:ff:94:cb:e2:d8:d0:ef:4f:82:0c:5c:20:31:65:33:
36:a7:27:4b:4e:15:d8:27:aa:7a:3c:04:1d:d2:00:9c:b0:1e:
c8:bf:c9:2c:04:28:71:74:97:dc:d2:d3:37:37:03:9a:86:1a:
99:5a:da:f2:12:d2:51:9b:bf:2a:45:93:1b:51:75:78:b6:87:
bc:a2:8e:49:17:14:67:d5:ec:2e:28:00:b9:44:3b:76:b2:b7:
1e:d9:9e:71:ad:7f:4d:1f:cf:0a:af:4a:e9:e4:70:9e:e5:b0:
73:05:70:c5:e8:78:c1:f6:24:07:62:6f:b3:ef:0e:b5:15:ec:
79:54:ec:b5:4d:04:b2:6e:e0:99:4a:45:05:83:32:2b:7d:da:
92:f6:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client