Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: 2ixjbg3URXPJ8qmZojerHmBvA83qFPEUHeNQMgw7LHs=
Subject key identifier: 2B:B9:32:86:D2:59:EA:D8:20:8C:CA:6B:BB:13:2C:76:D1:0D:08:B4
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 019A4DE1E289A71D10B91BA0A0BD79C8E903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: GbV1Yi2uem5l4g2ZB8qB9a1x9Z1dCTrYz4IQKsOuJnE=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e2:89:a7:1d:10:b9:1b:a0:a0:bd:79:c8:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=2bb93286d259ead8208cca6bbb132c76d10d08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:ee:45:6d:2e:4a:5e:d6:05:5c:4e:d8:41:
75:b4:37:e3:91:9d:96:63:a8:1d:86:e0:ef:c3:13:
c6:66:65:f4:b9:7d:17:81:83:5f:6d:31:86:77:86:
d7:74:13:ec:8f:bc:08:b4:7b:ce:71:67:c1:80:05:
a7:a7:d1:b3:e7:b5:57:48:4c:f7:01:22:39:68:ad:
39:24:8d:b0:55:b4:dd:17:d2:b1:70:d5:64:fe:1f:
cb:cd:33:69:d2:7d:88:0b:05:61:63:c7:61:ff:b8:
13:83:9a:b5:ce:da:32:a6:8e:0b:3c:7c:f5:00:ed:
88:18:f0:01:e4:e6:1c:70:f0:60:8e:78:6c:2b:18:
78:ce:91:92:b5:d4:4f:f3:fe:0f:3c:fc:c1:9f:5c:
a7:67:92:62:5c:e9:0f:4f:39:be:94:64:01:1f:68:
b9:8c:65:0b:aa:69:15:57:1f:0f:70:67:0b:c5:81:
52:79:22:c4:2c:28:a4:48:58:d5:e7:a3:5c:c2:36:
aa:85:58:4a:86:85:ab:8b:55:7c:78:25:f2:e7:ed:
d0:f5:ff:80:e2:43:5f:6d:25:54:02:32:0e:a5:09:
ca:65:0b:0c:83:6b:ca:75:c4:e8:be:9c:a9:49:a5:
4a:a6:e3:aa:09:1e:00:61:60:f4:6b:85:2a:2e:dc:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:32:86:D2:59:EA:D8:20:8C:CA:6B:BB:13:2C:76:D1:0D:08:B4
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:47:57:37:fd:a8:7c:96:d5:37:03:7b:1b:e4:3a:5b:be:
e4:35:f4:1e:d1:a4:1a:b7:91:7b:b7:93:48:73:34:74:d3:b4:
37:df:cc:42:d5:1d:d4:35:b4:30:ea:66:8a:41:63:68:2c:3b:
3f:b6:93:1a:8d:ff:7c:0f:d9:5a:b2:ad:2e:ed:36:a4:f9:8c:
fa:16:3b:70:1a:dd:8b:d6:ed:68:5c:a3:f0:47:d1:8d:fa:74:
fb:f9:4c:3a:20:6b:4b:dc:5b:12:79:3b:b3:bc:4d:d1:e8:00:
75:ee:77:80:d5:60:91:8a:88:75:70:7c:ba:0b:63:bd:32:27:
ec:ef:5a:73:69:d3:2d:ca:ad:d5:41:4e:aa:9d:70:02:96:e2:
89:f7:35:ea:6c:13:1a:42:9e:4b:e9:86:43:38:ac:7c:42:4d:
c2:ae:4e:9c:88:7d:4d:f9:0c:03:d3:52:a7:62:a5:58:cb:4b:
8b:e1:a5:02:49:3e:2c:5b:12:5d:f0:c2:af:bd:63:d6:77:e2:
c6:58:74:ff:25:df:1a:fb:de:08:9c:c9:a0:f5:71:a3:61:32:
87:ea:c2:0e:2c:59:81:8c:b1:b7:70:43:9d:a7:42:38:9b:3a:
01:f1:87:aa:60:da:68:a1:6d:13:eb:70:49:74:33:be:52:82:
4b:68:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:32 2025 by rpki-client