Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: KuUWlB+bOy9EB8QlNzg4yJBuxCWii0MIe0OnMoq73s4=
Subject key identifier: 1E:B3:50:79:C3:0C:D0:1B:B2:2D:FF:1F:A8:7C:30:A4:77:E7:84:F0
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 019880C207F56A24E55CBBCF516B5420A1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 01D5
Signing time: Wed 06 Aug 2025 19:00:56 +0000
Manifest this update: Wed 06 Aug 2025 19:00:56 +0000
Manifest next update: Thu 07 Aug 2025 19:00:56 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: Ti2k20ySrES/uCg2LSW3YCUF4S3WxHhioRc8MQwq7r4=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:07:f5:6a:24:e5:5c:bb:cf:51:6b:54:20:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Aug 6 19:00:56 2025 GMT
Not After : Aug 7 19:00:56 2025 GMT
Subject: CN=1eb35079c30cd01bb22dff1fa87c30a477e784f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:c6:a4:95:a6:1d:57:4b:f1:c6:b8:41:49:
36:e9:4e:38:ce:fb:d0:3e:ba:bc:52:61:1d:15:28:
83:c8:9a:bc:b9:d0:68:75:07:fb:e9:17:d1:ea:1d:
ae:79:b6:2a:21:d1:23:1f:2b:a9:86:58:f8:71:c2:
00:17:5c:67:ff:c3:89:55:bb:3c:c4:db:80:f4:b4:
2a:fa:8d:42:8a:3c:3a:96:d4:41:1f:4e:05:ae:51:
65:78:b5:67:4c:03:21:09:22:66:09:be:11:93:c7:
15:1d:8c:4a:7d:bf:c3:ad:d1:0e:88:83:0d:8a:c6:
4a:42:0f:4a:d9:ba:70:76:f0:56:2b:aa:23:99:3a:
d6:3b:39:8b:5b:cb:d5:e7:22:ef:b9:c9:6d:af:3a:
b6:05:a0:0e:82:d5:9a:45:ce:78:72:46:dd:31:08:
d9:51:f8:ec:19:cc:a2:7f:f3:f0:93:8e:82:c0:0b:
e7:a0:0b:fa:b5:0a:d2:00:50:61:7e:2b:6f:30:74:
4b:c2:5e:ed:55:74:24:a8:5e:51:f9:46:cb:47:2b:
43:25:7c:30:23:d9:58:d9:20:40:55:55:15:4c:71:
e5:b4:2c:45:4d:1a:ab:db:92:0b:31:6e:af:8b:78:
ba:de:b6:ca:36:47:c8:3e:03:01:b2:03:b5:6e:24:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B3:50:79:C3:0C:D0:1B:B2:2D:FF:1F:A8:7C:30:A4:77:E7:84:F0
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:cf:82:e1:7f:82:aa:2c:2c:56:5a:a4:59:f0:b3:35:92:
32:9b:69:ad:69:03:31:a2:f9:00:d7:cb:f1:a8:d4:52:62:1b:
8e:cc:e1:73:d6:9a:6b:ed:a1:47:8e:9d:50:58:e8:eb:b7:72:
02:e4:30:92:fb:b5:14:49:8d:2d:91:8f:a9:ea:90:8b:ac:ca:
44:c4:46:49:de:94:74:7f:75:5b:da:6b:4e:fb:57:9b:fc:d1:
03:eb:4d:22:90:8b:68:69:31:52:16:e3:49:8b:58:df:bb:07:
72:88:00:58:20:ee:3c:04:3a:2b:e4:56:4d:05:44:96:a8:6b:
60:e1:64:60:f6:e3:64:69:7f:c7:f2:fe:7a:a2:fe:e7:64:30:
78:0f:58:0d:b2:9c:79:2e:24:56:df:d8:d4:db:9a:03:6f:8e:
2a:4a:d6:ae:f7:89:b2:29:32:62:9b:0c:6a:be:6b:4d:c0:68:
46:4a:3d:c5:51:5b:38:e3:7d:fa:3c:6a:5a:ab:3f:01:c7:b9:
02:cf:63:22:16:68:ba:9f:30:9c:e1:ae:88:74:fa:36:9c:61:
d3:91:34:55:ed:a5:01:0f:f1:15:8e:9a:24:b5:58:a1:23:55:
56:27:c3:f5:26:9d:aa:13:f9:b6:66:e0:c1:3f:45:60:5e:6e:
3a:2c:3e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwgf1aiTlXLvPUWtUIKH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1
ZDNjM2QwHhcNMjUwODA2MTkwMDU2WhcNMjUwODA3MTkwMDU2WjAzMTEwLwYDVQQD
EygxZWIzNTA3OWMzMGNkMDFiYjIyZGZmMWZhODdjMzBhNDc3ZTc4NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMbGpJWmHVdL8ca4QUk26U44zvvQ
Prq8UmEdFSiDyJq8udBodQf76RfR6h2uebYqIdEjHyuphlj4ccIAF1xn/8OJVbs8
xNuA9LQq+o1Cijw6ltRBH04FrlFleLVnTAMhCSJmCb4Rk8cVHYxKfb/DrdEOiIMN
isZKQg9K2bpwdvBWK6ojmTrWOzmLW8vV5yLvucltrzq2BaAOgtWaRc54ckbdMQjZ
UfjsGcyif/Pwk46CwAvnoAv6tQrSAFBhfitvMHRLwl7tVXQkqF5R+UbLRytDJXww
I9lY2SBAVVUVTHHltCxFTRqr25ILMW6vi3i63rbKNkfIPgMBsgO1biRGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6zUHnDDNAbsi3/H6h8MKR354TwMB8GA1UdIwQY
MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt
MzdiZmNiODBmNjE4LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4
LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxbPguF/
gqosLFZapFnwszWSMptprWkDMaL5ANfL8ajUUmIbjszhc9aaa+2hR46dUFjo67dy
AuQwkvu1FEmNLZGPqeqQi6zKRMRGSd6UdH91W9prTvtXm/zRA+tNIpCLaGkxUhbj
SYtY37sHcogAWCDuPAQ6K+RWTQVElqhrYOFkYPbjZGl/x/L+eqL+52QweA9YDbKc
eS4kVt/Y1NuaA2+OKkrWrveJsikyYpsMar5rTcBoRko9xVFbOON9+jxqWqs/Ace5
As9jIhZoup8wnOGuiHT6Npxh05E0Ve2lAQ/xFY6aJLVYoSNVVifD9SadqhP5tmbg
wT9FYF5uOiw+tw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:15 2025 by rpki-client