Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: Xu6cFUdcTMxvLK/RNJa7cdOHOMfE7ohNEFp8s7I7Mv8=
Subject key identifier: CF:AA:4A:61:4B:3D:A6:61:C7:5E:5D:C0:11:02:DD:E9:3F:34:BA:DD
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 019A4F998A3AC15143BCA6ACA0F44C8B13F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:53 +0000
Manifest this update: Tue 04 Nov 2025 16:00:53 +0000
Manifest next update: Wed 05 Nov 2025 16:00:53 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: 3s8VOfOZy0ZIC5Mtiinl00TToSvZJEpgNq81fH+h7j8=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8a:3a:c1:51:43:bc:a6:ac:a0:f4:4c:8b:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Nov 4 16:00:53 2025 GMT
Not After : Nov 5 16:00:53 2025 GMT
Subject: CN=cfaa4a614b3da661c75e5dc01102dde93f34badd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:52:44:58:4c:9d:79:a0:c4:5b:72:11:a0:
17:a0:27:64:4b:0f:eb:04:e9:92:16:19:f9:b2:de:
4e:b9:d3:d9:56:8c:47:fe:84:cc:ca:b3:25:0b:a0:
92:ab:78:b5:37:32:3a:09:9c:d3:e4:99:bb:50:a9:
53:f9:4c:09:f9:7d:15:30:a6:21:7a:d1:c7:5f:53:
e3:01:4d:99:c0:1b:00:44:74:1f:f8:48:4d:9f:e6:
3f:19:f1:be:cc:c6:74:b2:9b:aa:be:7f:fb:8a:37:
50:7d:9b:5c:67:44:11:27:e2:80:62:cc:37:02:7d:
30:08:33:6a:c0:4e:b9:c6:6d:95:70:b0:dc:d8:f4:
46:27:fc:3f:2f:14:fa:ae:77:98:64:bb:a9:bd:03:
fa:15:c9:49:e4:9b:0b:2a:c6:be:5b:4b:60:1a:79:
43:2b:d8:c2:10:f5:e0:58:08:43:46:64:db:2d:e8:
ab:af:a1:c8:fb:96:ab:4d:d5:f5:21:e6:d9:93:e2:
2e:23:0c:38:75:63:ad:50:1f:ea:6c:5f:59:a9:45:
5f:4d:10:78:74:2f:b2:dc:fa:59:f3:c5:75:1c:f6:
8a:a9:a9:90:4b:5e:bd:0b:b1:29:74:73:ec:f6:fd:
d3:6a:e9:cf:30:bb:79:c3:72:a5:83:e6:08:8d:28:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:4A:61:4B:3D:A6:61:C7:5E:5D:C0:11:02:DD:E9:3F:34:BA:DD
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c6:2c:43:3e:64:40:0c:d5:3c:74:21:8d:35:6a:22:2d:51:
29:49:9f:44:4e:e0:58:8e:49:e6:f4:a7:1b:7a:42:6b:70:c9:
e7:19:2c:81:b0:8e:bf:ba:0d:77:9b:50:33:7a:12:72:5b:33:
a1:ec:b4:4f:e5:e7:d2:ae:ef:01:96:d1:ad:ea:f2:b1:07:97:
ff:a8:7d:83:10:66:7d:24:aa:1b:2c:82:41:bf:16:f9:8f:88:
f1:fe:53:85:0c:9e:cc:79:4a:ef:e6:96:54:b4:d1:ca:ed:11:
b6:0c:c5:cc:52:77:b3:31:c7:ea:ae:c5:7d:78:de:ea:9f:37:
58:91:14:29:b3:3f:16:b5:09:8f:a1:fa:3d:69:92:3f:a9:39:
aa:11:9c:05:51:37:0a:1d:ad:57:b0:96:60:c8:89:e9:0b:5c:
48:49:be:b4:23:15:35:61:27:9a:be:51:26:16:8e:f6:1a:5b:
0e:dc:6e:ae:37:95:ca:89:a3:2a:71:ca:bf:80:bb:1e:7d:2e:
f5:a0:e7:83:6f:bb:cf:19:5c:aa:03:24:c3:73:d7:2e:c1:86:
3d:d7:c1:d2:8d:de:64:5d:18:4c:48:d7:e6:9c:32:35:32:f4:
e9:7b:55:9b:ed:cc:20:45:82:79:c1:2b:83:42:5e:1b:2e:4e:
2f:ac:e8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmYo6wVFDvKasoPRMixP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWUwY2JiZTVkMWMwYTA5NDY1MDk1ZTQ0NGZiYzFjNzkz
MmM2ODMwHhcNMjUxMTA0MTYwMDUzWhcNMjUxMTA1MTYwMDUzWjAzMTEwLwYDVQQD
EyhjZmFhNGE2MTRiM2RhNjYxYzc1ZTVkYzAxMTAyZGRlOTNmMzRiYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNFSRFhMnXmgxFtyEaAXoCdkSw/r
BOmSFhn5st5OudPZVoxH/oTMyrMlC6CSq3i1NzI6CZzT5Jm7UKlT+UwJ+X0VMKYh
etHHX1PjAU2ZwBsARHQf+EhNn+Y/GfG+zMZ0spuqvn/7ijdQfZtcZ0QRJ+KAYsw3
An0wCDNqwE65xm2VcLDc2PRGJ/w/LxT6rneYZLupvQP6FclJ5JsLKsa+W0tgGnlD
K9jCEPXgWAhDRmTbLeirr6HI+5arTdX1IebZk+IuIww4dWOtUB/qbF9ZqUVfTRB4
dC+y3PpZ88V1HPaKqamQS169C7EpdHPs9v3TaunPMLt5w3Klg+YIjSi5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+qSmFLPaZhx15dwBEC3ek/NLrdMB8GA1UdIwQY
MBaAFBEeDLvl0cCglGUJXkRPvBx5MsaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3Nzgt
ZDE1ZTUxNmRjNDVjLzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3NzgtZDE1ZTUxNmRjNDVj
LzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcYsQz5k
QAzVPHQhjTVqIi1RKUmfRE7gWI5J5vSnG3pCa3DJ5xksgbCOv7oNd5tQM3oSclsz
oey0T+Xn0q7vAZbRrerysQeX/6h9gxBmfSSqGyyCQb8W+Y+I8f5ThQyezHlK7+aW
VLTRyu0RtgzFzFJ3szHH6q7FfXje6p83WJEUKbM/FrUJj6H6PWmSP6k5qhGcBVE3
Ch2tV7CWYMiJ6QtcSEm+tCMVNWEnmr5RJhaO9hpbDtxurjeVyomjKnHKv4C7Hn0u
9aDng2+7zxlcqgMkw3PXLsGGPdfB0o3eZF0YTEjX5pwyNTL06XtVm+3MIEWCecEr
g0JeGy5OL6zoyQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:24 2025 by rpki-client