Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: pbV6AL0jksgKb42H4gCffH/uQMvs7Ru47bj4VsXNgJ8=
Subject key identifier: 10:F6:EB:AC:C4:2A:77:92:3D:EE:D7:30:C2:32:4A:04:F8:BE:33:5B
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 019A4EF443CB39FC3539634DDD54EB6EE2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0B5D
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: jecufy4v9/XvDfdrKC92N3CwNIudeP8tGtNRs5ZtR1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:43:cb:39:fc:35:39:63:4d:dd:54:eb:6e:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=10f6ebacc42a77923deed730c2324a04f8be335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:4e:e4:f6:4b:e1:f8:de:9a:2b:11:f9:13:
f9:1f:75:a1:fc:30:28:a2:b5:65:cb:ac:91:83:06:
b0:73:5a:85:da:33:cb:f0:8d:2e:eb:c8:2a:51:2e:
fb:b9:0c:c7:c0:78:eb:99:4a:30:12:db:3e:58:ee:
76:c5:26:1e:22:a8:c8:e3:5a:63:da:79:e9:25:44:
79:7d:ad:56:91:5d:15:4e:29:5c:8f:e2:8a:c8:43:
fc:58:d6:bc:a4:49:f3:b0:07:a9:92:7d:be:2d:23:
94:25:d2:78:9f:b1:94:97:15:75:f7:1f:5b:83:ef:
52:0d:6a:85:43:8c:53:1e:85:c6:3d:33:9b:48:de:
e8:9c:ef:38:5e:3b:36:a9:71:38:ce:39:93:1f:c3:
2c:3b:cc:7f:94:43:13:b8:fb:9a:8b:69:a5:8f:04:
b3:88:05:65:26:fb:f7:f3:5c:fd:9c:d1:53:5e:ef:
ad:0f:1c:87:9c:72:ea:ca:ca:21:29:a0:78:0a:6f:
5f:d5:bb:b0:92:98:76:f5:5c:6d:46:68:5b:8e:fa:
86:21:bc:9d:9e:2d:f4:2b:af:62:4e:76:ed:37:3a:
3d:86:66:49:eb:2a:a7:e3:c6:bf:5c:7d:11:63:cf:
22:c6:1f:14:33:f1:ee:77:01:37:48:1f:a5:a2:06:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:EB:AC:C4:2A:77:92:3D:EE:D7:30:C2:32:4A:04:F8:BE:33:5B
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:1b:d8:06:88:2e:73:c9:ec:b3:8e:61:0f:34:0c:fc:1d:
d9:83:48:23:57:ae:aa:d0:a4:23:72:93:a2:45:fe:cf:f1:be:
8c:dd:c5:3d:8e:a3:34:ae:32:e2:4a:27:88:94:2e:23:c2:09:
90:f8:21:b8:5f:9f:89:d5:1d:f0:b1:92:09:2f:0b:b2:50:f1:
d1:3c:a7:83:03:18:fd:39:66:c9:71:12:39:32:88:b1:ee:51:
b3:61:eb:d3:5c:b4:ac:29:91:5b:7c:a7:8f:f3:93:df:58:c3:
b6:eb:c1:e3:0d:81:44:6c:7b:66:5b:1c:f8:3e:af:97:61:9c:
27:ec:c7:3f:91:cb:fc:ba:a6:f7:e5:ff:f6:2f:5f:b0:04:1c:
38:ff:d2:0a:1d:0f:7b:e0:cf:2c:d8:81:e6:c3:21:9d:ee:88:
86:58:8d:14:73:c3:6d:59:7d:27:76:c9:01:a6:29:c9:f4:ab:
f3:0a:2e:4a:4c:a2:79:30:39:6b:21:4a:4f:39:0a:5e:44:40:
37:9c:d2:6c:d6:0f:6d:91:ce:50:ff:a6:60:64:60:72:1a:93:
4e:33:56:7b:55:6e:e2:37:ec:fe:4d:b9:2e:3f:3b:ab:bb:a2:
ec:ce:e4:fe:ad:73:47:71:d7:17:a9:cb:38:40:c7:09:86:ac:
ca:26:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:23 2025 by rpki-client