Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: gardnXnifHaFBL0xli/Q2ed1ZfoqbBnfKqaquOsJX/M=
Subject key identifier: D8:3F:58:E4:62:B4:C2:5C:FD:69:8A:A6:08:AF:61:DC:9B:89:D2:E9
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 019A51BEDF697ED24C90FFF85CEFBA725B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 02EC
Signing time: Wed 05 Nov 2025 02:00:54 +0000
Manifest this update: Wed 05 Nov 2025 02:00:54 +0000
Manifest next update: Thu 06 Nov 2025 02:00:54 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: J35+EZyJt/4/N9LTqFwypr0kQVGFtWeusxmd4WmtSMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:df:69:7e:d2:4c:90:ff:f8:5c:ef:ba:72:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Nov 5 02:00:54 2025 GMT
Not After : Nov 6 02:00:54 2025 GMT
Subject: CN=d83f58e462b4c25cfd698aa608af61dc9b89d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:e8:23:f2:af:80:ab:a5:7d:4d:f1:7f:8d:
59:75:a3:27:f0:bc:98:33:af:fc:45:80:1f:32:11:
d8:76:75:e2:72:06:aa:02:49:62:9c:e4:47:11:6e:
34:ab:a1:b8:4d:c3:6a:00:63:ee:d6:eb:dc:ae:dd:
a8:72:b0:bf:7f:05:9f:cb:c4:8a:db:79:77:95:05:
7d:a6:47:54:23:e1:1f:00:a4:cb:e6:d2:00:1a:77:
d6:f3:b1:1f:83:b4:19:01:dc:fa:7a:69:b5:a8:83:
b3:12:a9:36:e7:f3:b1:89:87:86:ec:b7:4b:06:87:
40:54:8b:e5:04:ad:12:73:9a:a7:cf:c2:5c:5e:13:
29:7e:82:4d:ec:33:f3:be:39:fe:28:ea:f6:ba:0c:
b2:d2:30:3f:8e:84:9f:88:25:98:cd:70:f8:49:09:
f6:f2:02:b3:ca:64:f1:35:b6:fa:58:67:7e:30:3d:
78:58:e1:41:b1:fa:60:36:fb:eb:ee:e0:06:f6:db:
6d:1a:0f:ae:23:c5:63:f0:89:65:da:50:fc:2e:07:
c7:68:0f:ac:32:04:78:4f:85:71:82:f3:7d:04:42:
a2:8d:e2:8a:38:9d:35:9d:fa:81:f0:fb:80:32:0b:
c2:85:e0:49:b6:b1:ce:1d:97:40:b8:0e:3e:66:40:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:58:E4:62:B4:C2:5C:FD:69:8A:A6:08:AF:61:DC:9B:89:D2:E9
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:2e:d3:36:cc:2c:4c:9d:b9:d2:00:96:70:ed:11:c7:e4:
30:3a:11:b1:20:33:b9:0f:15:25:6e:1c:c1:34:02:fc:4c:86:
46:20:be:fd:80:0f:48:00:68:3e:92:16:de:35:0e:ea:34:b8:
4f:84:65:a8:f1:67:96:55:78:bc:e3:f1:eb:23:fc:3c:3e:28:
9b:b9:ac:a2:3e:46:c3:04:97:d0:48:a4:23:0b:6b:cb:3c:bd:
78:c2:de:ab:c4:3f:3b:1c:a4:e4:39:9e:4b:04:03:9c:57:b4:
61:c3:a6:3e:7f:93:a3:62:00:5e:bb:17:8e:47:6b:e1:f9:8e:
f1:c1:11:4f:03:95:90:02:eb:6a:b0:64:b5:ae:42:c5:3f:c2:
9d:2c:a8:2e:ea:05:fb:c1:41:7f:e7:f5:ea:1b:e7:fe:09:3a:
b8:6c:04:6f:85:d8:4f:e6:10:10:99:aa:5b:73:f7:a3:e6:85:
f6:74:58:7d:1a:ec:b9:ed:b2:12:9e:56:3a:4e:44:c0:53:1a:
6b:47:ce:e4:11:65:13:c3:dc:2f:e6:51:d6:08:d0:7b:14:d2:
53:fb:62:8e:db:65:77:ff:29:db:e4:81:bd:a2:13:9f:2f:4d:
70:d5:ef:e5:83:5b:16:81:c0:91:e9:bf:ca:17:16:4b:84:15:
ab:69:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:07 2025 by rpki-client