Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: gE6+9Oe07LvgOMjscxtwYIS17f+xjYbAkH3otzY92dw=
Subject key identifier: 2F:DB:1E:40:66:3D:BE:B9:A6:57:D8:4D:8C:CE:19:82:47:C8:7C:58
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019A4E86BD115FA8F2C596DCFB0E29E4F1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0B73
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: +DMJkt70eULPwsoiuTbhOiwinyPYDW+skeL8iyrV8co=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bd:11:5f:a8:f2:c5:96:dc:fb:0e:29:e4:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=2fdb1e40663dbeb9a657d84d8cce198247c87c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:3d:af:0f:b3:e3:78:16:18:0a:40:b0:ce:
4b:7d:bd:bc:31:dc:5f:ee:38:dc:2a:f6:f6:33:90:
1f:01:1b:ea:75:bf:dd:9a:c6:ff:78:2a:5c:88:7a:
2d:69:1a:ce:9f:dd:af:67:be:f8:0f:65:a6:04:37:
bc:4f:4c:e8:3f:e5:8f:1c:4a:38:ed:29:d9:da:1f:
c6:7d:12:98:0e:30:fd:1d:b6:60:e7:1c:47:d8:d9:
b1:20:f9:f1:b6:79:97:38:57:6a:6f:d8:ea:7b:d6:
d8:3a:e2:f6:30:7d:39:70:c5:b2:2a:09:aa:5a:7a:
f3:78:22:33:a4:dc:d7:31:22:ca:c1:6c:9b:3b:58:
04:59:d9:ca:9b:ed:a5:28:46:d2:1d:33:e6:92:bf:
fd:32:69:cf:c4:02:38:23:6d:b7:57:3a:7d:84:a5:
af:52:d2:8b:3d:a4:6e:8e:81:77:0a:45:17:a2:bd:
f2:05:27:50:e4:99:5b:98:c8:5f:11:6e:b0:16:6d:
6f:3a:cb:30:a0:55:5c:bb:0c:56:4e:17:0d:d0:3f:
6d:8d:c8:3c:cc:51:3c:c3:09:ab:32:ad:00:d3:88:
f9:b5:e6:04:d1:2e:f8:d3:4c:90:53:e5:e3:50:d0:
e4:d1:96:ee:c6:7a:07:68:ef:6e:ef:dc:06:bf:ad:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:1E:40:66:3D:BE:B9:A6:57:D8:4D:8C:CE:19:82:47:C8:7C:58
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:9a:ca:46:92:9a:d0:84:f2:93:61:b5:ad:5b:fa:09:0b:
63:24:1c:dd:6b:32:b5:c4:83:bd:c5:ed:1c:b9:c3:d3:2f:c4:
c6:7c:6a:58:2c:46:d4:51:82:67:58:d1:a2:be:38:a8:62:64:
0b:d1:9d:71:d3:5c:06:9a:a8:18:f0:4c:e3:1f:9d:0e:20:1f:
cc:38:fd:73:74:2d:4e:cb:ea:40:0e:0f:ea:df:22:4e:b4:7a:
db:2c:72:73:62:9c:56:b8:c8:b1:68:54:77:31:3c:4a:73:86:
28:51:75:2c:41:bc:e1:e3:86:25:c3:92:10:2e:a1:f7:c4:03:
dc:fe:27:2d:b1:fb:5c:a7:90:07:db:52:9f:07:bc:0f:7f:b0:
33:d8:65:da:72:68:0f:4c:6f:10:1c:8b:06:57:e4:28:b5:5e:
01:23:30:6a:f8:79:e3:ff:80:c0:1b:ef:20:e8:8f:5e:8f:83:
9d:ef:b6:cd:af:70:ec:bf:b4:52:af:1a:62:6e:06:3e:0d:a3:
73:d6:69:76:7f:e8:87:87:a4:b2:e9:9a:fc:b6:a2:69:88:97:
b3:ae:a0:d5:da:0a:84:75:2d:7e:7a:b2:99:f9:c3:0e:7b:1d:
9c:00:30:15:61:ab:ff:ed:9b:c6:d2:cc:95:dc:4d:39:0b:83:
06:da:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:57 2025 by rpki-client