Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: Dm5qDFdwWgM/hl1CkcxyuFGx0nZ1MAsIchDpja8pyJo=
Subject key identifier: BC:4A:80:4A:49:D2:C0:91:CA:39:30:14:53:64:7D:08:BB:87:E1:9A
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 019A503E490C2CCAFEFE35084CA39835D4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 16C9
Signing time: Tue 04 Nov 2025 19:00:50 +0000
Manifest this update: Tue 04 Nov 2025 19:00:50 +0000
Manifest next update: Wed 05 Nov 2025 19:00:50 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: ULYGqzxRXD7v6PudvHrdsY3zVtBEUFBTt8YE+Z+dUfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:49:0c:2c:ca:fe:fe:35:08:4c:a3:98:35:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Nov 4 19:00:50 2025 GMT
Not After : Nov 5 19:00:50 2025 GMT
Subject: CN=bc4a804a49d2c091ca39301453647d08bb87e19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:3e:5d:26:37:46:0e:a5:24:cb:e3:ff:8f:
04:f5:75:47:cd:34:ef:75:fa:74:02:28:63:75:f6:
54:39:0b:a5:f4:5a:b1:6e:c7:a3:7d:12:1b:bb:c0:
7b:27:7f:77:62:1d:7a:72:cf:73:f3:b4:1b:32:4e:
de:e0:8b:61:75:21:e4:9e:36:ba:92:a0:d1:0d:c7:
c5:70:12:b0:c6:d4:be:24:11:59:5c:1a:a6:ad:5a:
1d:9d:47:8d:6e:92:b5:93:85:6d:6b:9e:d9:58:cc:
33:0d:be:63:47:19:de:40:88:de:42:08:31:0b:7d:
db:d1:99:c7:83:8c:0c:08:6f:8e:7f:52:56:3c:b2:
22:27:1c:ff:a7:5c:ac:64:d1:08:94:fb:5d:f9:13:
1e:99:2d:7e:ae:7a:ba:6b:28:13:79:2d:c1:39:e0:
46:13:9b:fe:dc:e5:51:b7:2e:b1:c2:b2:94:60:be:
18:ca:f7:f5:b4:1f:d4:6b:12:0b:85:36:82:ab:33:
52:ad:95:f5:dc:5a:88:75:ac:e1:d0:86:b5:ee:d4:
89:03:06:c2:43:51:55:fd:ce:88:12:b4:32:b7:db:
51:05:6a:8b:3a:3f:8f:6a:65:20:be:69:56:91:55:
28:b4:29:a4:4b:05:36:32:bc:f1:e0:00:88:22:d3:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:80:4A:49:D2:C0:91:CA:39:30:14:53:64:7D:08:BB:87:E1:9A
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:95:1d:c1:69:eb:02:b6:26:76:43:77:56:71:39:76:5c:
a9:45:3a:d9:f1:f4:bb:40:eb:3a:6b:8b:8e:83:72:04:85:b5:
42:b9:04:9c:28:22:4f:68:98:62:89:36:e7:7d:74:86:17:38:
e9:0c:bf:01:6a:94:ba:25:2a:e9:47:2f:ff:34:07:32:0e:f1:
b6:9e:f4:5e:77:bf:c8:7f:6c:72:f2:d6:1d:20:39:9d:c0:85:
f6:57:4d:c2:20:57:60:ab:9c:45:83:ac:d5:2c:fa:f9:21:0b:
5e:10:02:0f:0b:47:5d:39:91:7c:64:62:5a:65:18:d3:20:b4:
c3:4c:8d:8f:d1:76:0b:25:0e:49:3e:d5:40:2b:8b:0c:c7:be:
b7:66:6f:8b:58:05:84:d6:2e:fb:c6:a3:ce:56:9c:6c:f0:30:
be:8f:8f:7f:90:f8:df:e6:50:e6:be:1f:fa:c4:39:35:a4:60:
7e:f9:ef:e9:d3:58:be:e9:3d:e5:3f:c2:1e:86:66:21:38:f7:
1f:c4:61:57:9b:61:63:8f:24:f3:4d:f0:7a:59:d5:f0:84:c0:
1e:3f:8c:26:b9:5b:7e:60:9b:8d:3b:eb:24:74:c9:c3:16:d4:
7f:07:f7:1e:d6:73:32:5b:d2:6a:90:eb:c4:84:79:a2:92:3a:
92:57:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:59 2025 by rpki-client