Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: rzX4Ml0ZRpaZbd5MmwOkV8rJlUlLQJVvGoeGdvKy9A0=
Subject key identifier: E3:BC:BF:93:E1:39:2E:03:35:58:AF:8A:D0:DE:CE:57:16:10:46:AD
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 019A72932EE9ED901135434CB834BED40EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: mISea/FDDIWuWuLagN+tYLyYtcXheOItCRYYmXqQejk=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2e:e9:ed:90:11:35:43:4c:b8:34:be:d4:0e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=e3bcbf93e1392e033558af8ad0dece57161046ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:25:76:b4:79:3d:be:d5:2a:e7:36:56:4e:
dc:61:b0:34:69:59:61:1a:fe:29:88:b7:51:ff:aa:
a4:31:19:5a:ec:6b:8c:d2:4e:3a:0a:5f:16:5b:d9:
36:59:9d:5e:10:58:8c:8b:e9:1a:d5:aa:f0:bd:14:
aa:f5:5d:d4:92:33:8d:7c:32:2e:d7:ed:ce:b5:8b:
c1:ec:db:09:fd:5a:31:a8:37:50:ab:c0:35:2d:b9:
e4:20:09:65:c0:8a:69:bc:9b:c9:aa:6a:39:ea:fa:
2b:48:7d:7c:b6:8f:36:a3:c9:89:43:74:b4:dd:fe:
51:69:3b:94:28:3e:80:0f:24:1b:ad:cf:3f:9c:9c:
9e:0b:2a:19:b8:a8:63:39:1c:74:cc:36:82:e1:83:
24:64:56:37:a5:32:92:68:85:40:c9:0b:8e:fe:46:
2a:29:11:fa:c0:bb:2d:d6:b7:43:3d:3f:30:28:7d:
5b:96:f0:5c:7d:f0:b4:75:68:8e:c6:ef:6b:9b:6c:
78:83:d6:93:c0:f6:b2:ad:b3:e6:2e:15:6f:61:f9:
67:80:55:ba:af:40:41:e7:01:67:88:f5:6d:67:35:
66:97:ae:ac:76:59:67:61:b0:7e:e5:27:d0:85:5f:
55:9c:d0:a3:70:5b:ae:98:53:f3:ae:4c:95:92:54:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:BF:93:E1:39:2E:03:35:58:AF:8A:D0:DE:CE:57:16:10:46:AD
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f3:50:b7:61:1e:65:c6:d1:5d:2f:dd:9b:57:28:42:b4:6d:
99:63:72:ae:c5:27:c8:67:72:58:61:95:45:4d:a4:8e:3a:44:
74:08:ab:4c:af:1f:4b:35:89:1d:d5:04:26:6d:ae:05:d0:55:
de:8e:48:d9:47:41:bc:d6:78:e6:ac:d4:68:ae:eb:ca:26:98:
bd:9e:31:ea:2c:7c:b0:93:6b:ab:37:a6:0a:64:42:de:75:56:
56:2b:e6:d9:f7:fd:eb:84:e8:71:5c:8b:21:4f:33:31:30:d0:
ef:7b:7c:dd:f6:c6:71:e9:63:d5:8b:68:02:99:28:f7:a9:31:
4c:c8:bf:f4:3a:b9:27:aa:75:af:29:0b:8e:76:22:66:35:34:
f7:c3:50:01:af:77:43:28:50:a2:e0:d6:6e:8b:92:b4:07:38:
5a:7a:9e:f4:6e:a4:ae:e5:2e:67:57:78:6a:76:dc:f3:34:fe:
c4:08:06:61:2f:68:cd:19:fa:ea:0f:b7:24:b6:3d:82:76:7c:
d0:f9:32:a7:10:70:5e:cb:77:73:b1:d8:0c:66:0a:d9:91:2f:
27:a8:83:f7:c9:97:34:39:41:6c:3c:f9:2c:76:41:fb:c0:ef:
f2:25:3d:80:d9:2b:71:0e:f6:31:3e:b0:3b:fb:25:04:8e:29:
7c:56:e6:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyky7p7ZARNUNMuDS+1A7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk
MDlkYzgwHhcNMjUxMTExMTEwMDM5WhcNMjUxMTEyMTEwMDM5WjAzMTEwLwYDVQQD
EyhlM2JjYmY5M2UxMzkyZTAzMzU1OGFmOGFkMGRlY2U1NzE2MTA0NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M4ldrR5Pb7VKuc2Vk7cYbA0aVlh
Gv4piLdR/6qkMRla7GuM0k46Cl8WW9k2WZ1eEFiMi+ka1arwvRSq9V3UkjONfDIu
1+3OtYvB7NsJ/VoxqDdQq8A1LbnkIAllwIppvJvJqmo56vorSH18to82o8mJQ3S0
3f5RaTuUKD6ADyQbrc8/nJyeCyoZuKhjORx0zDaC4YMkZFY3pTKSaIVAyQuO/kYq
KRH6wLst1rdDPT8wKH1blvBcffC0dWiOxu9rm2x4g9aTwPayrbPmLhVvYflngFW6
r0BB5wFniPVtZzVml66sdllnYbB+5SfQhV9VnNCjcFuumFPzrkyVklQLFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOO8v5PhOS4DNVivitDezlcWEEatMB8GA1UdIwQY
MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt
OTFhMzk0Njg0NjQ0LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0
LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvNQt2Ee
ZcbRXS/dm1coQrRtmWNyrsUnyGdyWGGVRU2kjjpEdAirTK8fSzWJHdUEJm2uBdBV
3o5I2UdBvNZ45qzUaK7ryiaYvZ4x6ix8sJNrqzemCmRC3nVWVivm2ff964TocVyL
IU8zMTDQ73t83fbGcelj1YtoApko96kxTMi/9Dq5J6p1rykLjnYiZjU098NQAa93
QyhQouDWbouStAc4Wnqe9G6kruUuZ1d4anbc8zT+xAgGYS9ozRn66g+3JLY9gnZ8
0PkypxBwXst3c7HYDGYK2ZEvJ6iD98mXNDlBbDz5LHZB+8Dv8iU9gNkrcQ72MT6w
O/slBI4pfFbmgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:48 2025 by rpki-client