Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: aVbw+kOQwnBxuhCvPk+XhGp4X1uBpNEdUUc9hSBfxTI=
Subject key identifier: 6B:4C:2B:D0:DE:A0:02:A5:2B:EC:0B:8B:12:04:DD:66:D5:BC:9A:33
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019A725C8307F7C28114B5F37356FA74EEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 0AAF
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=)
2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: ASrL2FuWg7gaauF3m4g5vO0iK7ENYvVgeVPsezvC+V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:83:07:f7:c2:81:14:b5:f3:73:56:fa:74:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=6b4c2bd0dea002a52bec0b8b1204dd66d5bc9a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:f8:58:76:c4:8b:0d:e6:54:01:2e:2d:1e:
6a:1e:db:b5:d2:b3:ec:b1:76:39:35:e7:48:cd:21:
8e:6c:65:53:22:c4:f2:45:9d:5e:36:af:b8:fd:04:
be:4f:74:8b:f9:a2:bf:78:60:88:36:b7:8d:cb:da:
c5:4f:61:6d:89:f4:f2:b1:84:0f:bc:4f:f4:94:0f:
64:07:f5:4e:20:23:fc:ca:ad:c2:d8:52:27:3d:29:
f4:19:bf:69:26:ab:41:65:69:39:8a:e7:75:46:a1:
31:e1:35:a5:c8:70:94:8e:8f:aa:03:80:54:96:f1:
66:3e:ca:e3:f2:4e:17:5b:ed:65:49:df:70:f7:04:
d7:17:57:89:00:25:4d:58:89:c4:0f:bd:27:24:c5:
6f:66:f5:47:18:cd:db:2e:26:36:8d:75:d7:a0:f1:
2a:e2:63:d0:c7:cf:65:01:66:8a:b9:6a:ae:db:d6:
76:c6:7e:37:a8:40:04:af:8d:de:fe:8b:ec:4f:2c:
d7:9b:c3:35:33:fa:33:27:2e:71:b5:fd:8a:1d:3b:
8b:3a:3e:fd:7b:1f:95:b3:b9:a0:a5:21:2c:f2:98:
42:46:49:33:9c:d7:49:1a:ef:20:d6:d5:ee:93:e1:
f2:9e:7c:d3:f2:40:00:e1:f1:70:2d:b7:43:91:d5:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:2B:D0:DE:A0:02:A5:2B:EC:0B:8B:12:04:DD:66:D5:BC:9A:33
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:37:2f:1c:e1:2a:80:e7:e4:48:47:f3:8b:84:56:6a:32:
cd:cc:ff:d2:88:53:de:33:c1:c1:6a:b6:a8:ed:76:ee:4e:7f:
6e:32:7d:9f:b3:6a:16:42:58:34:7e:aa:e7:f3:9d:c3:61:15:
f5:44:81:e1:d1:ba:40:76:0d:b2:f0:80:0c:e5:69:16:04:76:
9b:44:88:d6:a5:b4:e5:4f:c2:48:82:7d:11:e7:93:cf:bb:8f:
2a:e3:03:73:01:04:d5:d5:8f:49:c3:ae:fe:5d:a5:fa:86:6c:
8f:c6:66:9d:51:c0:ec:c1:3f:84:e0:ee:36:90:7e:18:ce:0a:
99:18:35:62:f1:ec:d2:4d:de:fe:9d:95:fd:b3:68:a1:fc:43:
72:af:be:44:18:d4:cd:b8:2b:24:c5:2f:37:c2:89:4f:64:ff:
52:96:69:85:94:ec:47:e7:bc:39:73:3b:73:53:28:ee:4b:5e:
7e:7b:bd:92:e4:95:59:6a:de:f2:04:48:aa:08:f8:23:0f:16:
2f:9c:1c:6b:43:5f:fe:cf:25:39:0f:79:b7:ee:c7:c7:20:e3:
3a:53:1e:88:28:76:dd:8b:ed:92:bf:50:2e:63:df:0b:2e:f6:
6c:a8:0e:e9:24:88:30:63:a8:9b:50:ab:7f:6a:a0:d4:59:d1:
dd:13:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:04 2025 by rpki-client