Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier: USeYnuzAeU3OsuV83z1EtU8HbHIdz+avkzJIi+Ffo6g=
Subject key identifier: 0B:64:43:F6:81:53:D6:FA:EA:8E:1D:B5:F4:14:5D:41:51:CB:DA:6B
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0199FEEC02C4E1E41AAD42578DABAA1F93F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number: 0982
Signing time: Mon 20 Oct 2025 00:01:44 +0000
Manifest this update: Mon 20 Oct 2025 00:01:44 +0000
Manifest next update: Tue 21 Oct 2025 00:01:44 +0000
Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=)
2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: txsVqPZTGCLOIHYII1/cJZvtvk7Dzqrf1L9uuvfRY4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:02:c4:e1:e4:1a:ad:42:57:8d:ab:aa:1f:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Oct 20 00:01:44 2025 GMT
Not After : Oct 21 00:01:44 2025 GMT
Subject: CN=0b6443f68153d6faea8e1db5f4145d4151cbda6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:7e:da:09:7b:57:c9:dc:4e:77:9c:ab:7f:
18:26:a9:fd:50:1a:f9:5e:1b:68:0b:e0:86:2a:7e:
f1:f5:95:4d:61:dc:46:b0:5f:60:7e:48:ee:66:3f:
71:5a:b8:55:e9:da:bc:e6:fb:53:1e:86:af:75:1f:
3c:9a:8d:19:71:be:c6:8c:7a:40:6b:f9:df:74:d3:
57:d7:be:f2:88:f3:6a:cc:71:6e:70:74:21:c3:ef:
de:f1:83:b8:cd:7d:5a:ef:16:6f:d1:6f:ee:62:d5:
ca:22:5a:32:ad:b9:b2:2b:9e:48:9b:e4:5a:af:42:
8b:6b:74:75:8e:6f:fc:cf:81:b7:a7:11:05:1e:ce:
0c:21:dd:38:df:af:3a:01:56:06:c8:f6:07:6b:27:
39:f0:ab:b4:69:c0:88:e3:9e:8c:ed:01:62:97:d9:
c2:3f:21:bc:24:b9:6d:20:a1:f9:70:3d:e0:dd:9e:
e6:83:77:79:c9:53:08:04:a0:8a:ef:74:b8:f5:d2:
04:dc:7a:8d:18:62:33:d5:40:a2:90:cc:11:fb:5e:
38:20:da:3c:49:ee:b4:23:5c:cf:0d:b9:ca:3b:f6:
3e:ad:e5:cf:f0:df:0f:38:35:7c:ef:be:4b:c9:b8:
7c:f6:80:2c:f9:85:b3:a3:e5:c3:9c:90:95:fc:92:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:43:F6:81:53:D6:FA:EA:8E:1D:B5:F4:14:5D:41:51:CB:DA:6B
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:0e:60:69:31:d8:f2:7d:fb:c6:70:5c:c8:69:54:b2:07:
c1:3d:cf:69:ce:6a:b5:cd:52:e1:4c:f5:28:b8:64:96:7a:8a:
8f:93:78:6c:d2:d9:d2:ac:13:2a:9e:a4:41:a3:f0:eb:6f:a2:
57:09:be:be:e3:c4:dc:69:87:e6:88:7a:ae:c6:81:ef:ef:68:
a1:dd:1f:39:4f:a6:11:89:d4:c0:2e:b2:5b:9f:38:17:b0:28:
9c:7b:0b:cf:76:f8:a5:78:bb:b1:04:f3:6b:2f:82:52:a7:80:
4f:be:9e:e3:44:56:af:2a:ef:ce:43:63:1a:13:89:6f:f9:df:
e8:02:db:43:0d:52:71:43:4b:9a:f9:ec:11:2f:98:0b:b1:4b:
39:b8:bf:e7:e5:13:5b:8f:a1:a5:ec:74:e1:af:84:9d:8b:61:
a4:b0:2c:7c:07:7f:7f:57:d0:c9:4a:5e:7b:bc:1a:25:28:65:
f7:c2:85:a4:22:bd:fc:c7:fd:71:42:3a:8c:1a:01:71:62:bb:
73:72:a7:85:3d:bd:09:c5:b7:24:20:c1:7a:5e:33:f8:2e:4d:
88:92:6f:32:48:b7:74:7b:66:49:fb:f3:fb:1b:fc:64:eb:6d:
fa:cd:eb:ad:dc:98:1d:16:24:20:47:64:dc:84:00:80:b9:5a:
ac:07:07:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7ALE4eQarUJXjauqH5PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjUxMDIwMDAwMTQ0WhcNMjUxMDIxMDAwMTQ0WjAzMTEwLwYDVQQD
EygwYjY0NDNmNjgxNTNkNmZhZWE4ZTFkYjVmNDE0NWQ0MTUxY2JkYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH9+2gl7V8ncTnecq38YJqn9UBr5
XhtoC+CGKn7x9ZVNYdxGsF9gfkjuZj9xWrhV6dq85vtTHoavdR88mo0Zcb7GjHpA
a/nfdNNX177yiPNqzHFucHQhw+/e8YO4zX1a7xZv0W/uYtXKIloyrbmyK55Im+Ra
r0KLa3R1jm/8z4G3pxEFHs4MId043686AVYGyPYHayc58Ku0acCI456M7QFil9nC
PyG8JLltIKH5cD3g3Z7mg3d5yVMIBKCK73S49dIE3HqNGGIz1UCikMwR+144INo8
Se60I1zPDbnKO/Y+reXP8N8PODV8775Lybh89oAs+YWzo+XDnJCV/JLnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtkQ/aBU9b66o4dtfQUXUFRy9prMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenYOYGkx
2PJ9+8ZwXMhpVLIHwT3Pac5qtc1S4Uz1KLhklnqKj5N4bNLZ0qwTKp6kQaPw62+i
Vwm+vuPE3GmH5oh6rsaB7+9ood0fOU+mEYnUwC6yW584F7AonHsLz3b4pXi7sQTz
ay+CUqeAT76e40RWryrvzkNjGhOJb/nf6ALbQw1ScUNLmvnsES+YC7FLObi/5+UT
W4+hpex04a+EnYthpLAsfAd/f1fQyUpee7waJShl98KFpCK9/Mf9cUI6jBoBcWK7
c3KnhT29CcW3JCDBel4z+C5NiJJvMki3dHtmSfvz+xv8ZOtt+s3rrdyYHRYkIEdk
3IQAgLlarAcHzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:39 2025 by rpki-client