
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: vwKIgyPDpJ52zULcj46emLujhOJtCcmJREeQrCIHyEE=
Subject key identifier: 61:3F:AE:3D:0A:51:F2:CA:6E:D5:25:CF:FE:A7:B0:B3:A2:78:E2:79
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 0199FBEAAED9F09489F7492E173183553D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 0B32
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: PZ98VH+DS0/vadp8wNihqzQewPTRPwwteBL4Z2SSVKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ae:d9:f0:94:89:f7:49:2e:17:31:83:55:3d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=613fae3d0a51f2ca6ed525cffea7b0b3a278e279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:1a:2c:f5:4b:d1:9f:14:57:7c:9e:24:3b:
cc:ab:2a:bb:83:a7:d5:f2:c2:82:00:e2:b1:ca:0f:
a5:e0:f8:ad:65:24:26:80:c1:fc:a3:65:2c:8b:6e:
9e:5e:5e:c8:3b:a2:e2:59:21:8c:60:1c:e9:4b:af:
64:7e:74:c8:96:b7:61:48:1a:32:2e:b9:b5:34:a1:
20:91:7d:7a:de:43:33:fa:ab:4e:9d:fa:0b:b1:2e:
53:96:9e:18:b2:3f:06:01:17:a5:5c:32:43:69:04:
bd:9a:ec:34:4b:1e:5e:c3:cb:77:b3:d2:b6:6b:3a:
d3:db:34:c4:cd:30:4a:b0:b1:69:56:63:47:85:18:
e9:d0:5f:63:d2:34:b3:3d:ba:13:29:07:a2:45:69:
36:60:f7:da:2f:94:cc:44:55:94:19:52:78:8a:fb:
38:36:3e:d0:ba:17:71:a2:c6:13:e5:11:ea:11:73:
bb:75:10:b1:9c:a1:cd:1a:0d:78:ee:98:ff:1c:23:
c1:9f:b5:ba:03:13:33:e4:c3:03:9d:10:2b:f1:fa:
85:a6:f8:fc:ad:8b:77:d7:ff:ed:c8:fb:42:ac:44:
ee:ab:1b:23:ba:34:e6:28:ce:14:64:cc:3e:9a:f2:
20:77:2c:15:75:07:10:c5:9d:ee:43:fd:1b:63:3e:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:AE:3D:0A:51:F2:CA:6E:D5:25:CF:FE:A7:B0:B3:A2:78:E2:79
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:fa:ad:74:4e:6f:5d:43:28:38:b1:88:af:26:e4:6d:ed:
80:4c:8d:13:9a:33:7f:ff:4c:eb:e8:6c:22:6c:2d:14:fc:ca:
a8:16:b5:18:5c:d9:d4:2e:3a:64:8b:38:b7:61:c7:b7:1b:4d:
3d:f1:5a:b7:3b:2f:de:be:19:0d:f4:69:b1:1f:5c:90:c4:03:
a2:a9:d6:82:83:7b:81:7a:cd:31:dd:b8:70:88:47:a7:a0:66:
50:8f:40:e4:14:59:0d:cf:e1:73:9e:79:de:92:d0:f1:c7:6a:
a2:0f:c3:99:00:16:3f:7c:a7:01:8c:5d:53:16:19:d7:6d:78:
90:3d:d6:3d:70:af:a1:68:77:c2:cf:91:80:45:84:9c:6e:63:
cf:dd:28:2f:ed:da:8c:1c:8a:41:56:76:19:55:fd:18:16:40:
c9:51:6a:c8:11:40:d0:9c:59:2f:e0:f5:8b:5e:35:4c:62:de:
8a:c8:80:e6:d9:04:90:dc:7d:c3:85:30:a3:9f:b5:0c:11:b4:
36:e4:bd:68:1e:4e:a3:b7:09:f6:ac:93:62:0d:b6:02:81:a2:
89:7f:e7:7c:71:15:bc:c6:bb:05:9b:fe:49:d6:c5:7a:f7:ce:
36:76:47:71:80:a9:bd:77:48:13:68:23:8c:65:f1:4e:e0:1c:
21:00:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:31 2025 by rpki-client