Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: H3dIJYFz97sM3PIV7Pn5bVAGwUQtTARe/RuwALw6As0=
Subject key identifier: AC:A3:59:D7:B2:7D:0B:87:77:65:18:83:A1:9E:AF:B6:EF:D3:AA:9A
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 019A4E190950AD7AE2DF66113FC881BA563F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 13F8
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ekyXMXB8dI+FeT34z79kL96YMVD+xjFGc6ABDGht/UQ=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:09:50:ad:7a:e2:df:66:11:3f:c8:81:ba:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=aca359d7b27d0b8777651883a19eafb6efd3aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:f3:a7:c5:56:12:07:0d:d7:42:69:8d:f8:
23:5c:c5:81:63:fd:68:77:ae:14:6f:77:69:5f:86:
dd:b1:41:83:45:07:76:11:51:0c:14:cb:96:c9:ca:
e7:81:6d:ae:ab:c9:b8:9c:a0:bf:d1:83:b3:0a:4f:
ec:0f:70:60:de:d7:6f:97:93:8c:48:26:0b:f7:2e:
8e:7b:26:b3:16:e2:8d:49:f0:3b:17:d5:3e:64:61:
81:a8:12:fd:26:b1:29:03:24:82:cd:2f:3d:e6:12:
f1:d3:9f:bd:0c:fb:21:97:93:f5:19:8c:a3:ca:56:
e2:91:d9:ed:57:84:81:62:92:0a:35:a5:b9:c7:5a:
4b:e3:6e:95:8b:9f:e9:7d:44:23:f8:ec:ca:cf:14:
4d:db:c1:13:0a:93:3f:80:93:78:21:70:6c:90:e6:
98:46:5c:8f:79:c0:03:a4:64:92:7c:ac:9e:b7:37:
32:9d:a3:ec:69:81:de:27:af:f2:93:ba:1e:8f:4c:
d6:0a:fd:ea:49:d9:7a:7f:d8:1a:76:c5:ce:2c:66:
07:1c:6e:fd:6c:cc:61:43:86:2c:41:4e:58:61:16:
02:30:a0:1c:c4:ee:00:20:3d:55:40:37:04:69:3c:
a1:c0:97:21:e7:ff:f4:d6:ef:13:9a:81:38:4e:2e:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:59:D7:B2:7D:0B:87:77:65:18:83:A1:9E:AF:B6:EF:D3:AA:9A
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:ec:f1:df:61:3b:f4:80:be:92:e3:86:64:fd:62:58:73:
2e:2c:68:d0:1e:36:50:58:53:3f:b8:70:5e:37:3b:35:20:eb:
fd:27:eb:cf:d2:3b:d8:bf:b3:c1:be:db:7e:91:9b:6a:9d:fe:
82:cd:50:81:fb:36:d7:f2:86:82:21:c0:a4:db:c5:fd:e5:f4:
08:e8:3a:6e:93:ea:af:68:43:68:4e:bf:b5:f1:73:f5:49:36:
05:9b:b4:c2:bc:88:6e:23:55:ca:57:07:cf:83:53:78:ae:bf:
5b:83:b1:1c:62:e4:71:a8:03:cc:73:27:4c:1d:5e:10:48:1e:
2a:8a:79:a1:35:5f:0d:44:79:26:a0:20:0a:c9:40:b6:e7:5c:
59:f6:d0:aa:2e:b4:fd:ea:6f:ce:24:e0:d4:32:1f:83:f7:51:
bf:1e:48:de:f4:81:00:9b:2b:53:6e:88:49:3d:fc:48:93:b8:
56:52:d8:03:f2:2a:24:be:19:52:f8:1f:5e:cb:20:8c:2c:08:
a5:3b:e5:eb:71:72:be:92:a2:9a:e4:a2:3c:98:35:55:a9:4a:
36:e0:7e:7a:02:6e:29:18:5b:0f:6b:3b:c8:fc:2f:b2:85:b4:
c3:44:ae:27:55:67:bf:b1:e4:9e:64:9f:38:94:f1:7e:56:f4:
19:a9:91:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQlQrXri32YRP8iBulY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjUxMTA0MDkwMDU0WhcNMjUxMTA1MDkwMDU0WjAzMTEwLwYDVQQD
EyhhY2EzNTlkN2IyN2QwYjg3Nzc2NTE4ODNhMTllYWZiNmVmZDNhYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6rzp8VWEgcN10JpjfgjXMWBY/1o
d64Ub3dpX4bdsUGDRQd2EVEMFMuWycrngW2uq8m4nKC/0YOzCk/sD3Bg3tdvl5OM
SCYL9y6OeyazFuKNSfA7F9U+ZGGBqBL9JrEpAySCzS895hLx05+9DPshl5P1GYyj
ylbikdntV4SBYpIKNaW5x1pL426Vi5/pfUQj+OzKzxRN28ETCpM/gJN4IXBskOaY
RlyPecADpGSSfKyetzcynaPsaYHeJ6/yk7oej0zWCv3qSdl6f9gadsXOLGYHHG79
bMxhQ4YsQU5YYRYCMKAcxO4AID1VQDcEaTyhwJch5//01u8TmoE4Ti4wPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyjWdeyfQuHd2UYg6Ger7bv06qaMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldjs8d9h
O/SAvpLjhmT9YlhzLixo0B42UFhTP7hwXjc7NSDr/Sfrz9I72L+zwb7bfpGbap3+
gs1Qgfs21/KGgiHApNvF/eX0COg6bpPqr2hDaE6/tfFz9Uk2BZu0wryIbiNVylcH
z4NTeK6/W4OxHGLkcagDzHMnTB1eEEgeKop5oTVfDUR5JqAgCslAtudcWfbQqi60
/epvziTg1DIfg/dRvx5I3vSBAJsrU26IST38SJO4VlLYA/IqJL4ZUvgfXssgjCwI
pTvl63FyvpKimuSiPJg1ValKNuB+egJuKRhbD2s7yPwvsoW0w0SuJ1Vnv7HknmSf
OJTxflb0GamRXw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:00 2025 by rpki-client