Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: 8KaTjZbl/isI8dhn1IbyOKQPe3SvS2HEKr1FbBu13r8=
Subject key identifier: 26:7F:8C:D5:57:45:92:E6:F4:96:BF:6F:E6:B1:F4:AA:88:41:0B:CF
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 0199FCFD9BD241B1C29C587D5CD81E2E27EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 13CE
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ozYgMRKBVXoHeNvadG1abHZtp6YUUEij2AZp4qBzjH8=)
2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9b:d2:41:b1:c2:9c:58:7d:5c:d8:1e:2e:27:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=267f8cd5574592e6f496bf6fe6b1f4aa88410bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:e6:74:06:c3:94:4d:83:e6:60:84:c0:be:
90:16:23:f5:7d:e4:cd:24:72:07:90:18:8a:e5:8f:
fd:eb:21:b9:3a:d1:12:43:21:f2:e4:00:c1:15:5a:
c2:58:df:5a:4d:c8:3d:31:47:59:87:95:8e:46:22:
f3:b0:95:bd:71:29:cd:84:4b:62:ca:24:83:74:d5:
a2:9e:1c:5b:92:07:0e:35:75:c3:2f:a2:2b:1a:47:
80:7e:9d:e5:85:a0:9b:a8:02:dc:90:87:e0:ec:46:
f9:c8:4b:12:83:e4:ae:f8:a0:d4:5b:69:45:55:63:
23:28:87:67:6b:34:37:51:5c:0e:3f:c6:9f:58:93:
c7:60:6c:e3:d3:0c:b0:1a:a0:0c:ff:12:0d:1f:a2:
6a:96:26:25:b6:05:2b:11:af:08:80:df:4e:ad:c1:
d3:83:a6:75:16:81:64:75:bc:2f:64:ca:b7:56:37:
f2:03:c5:db:6d:17:62:c1:22:05:c1:64:85:39:2f:
b6:dc:6b:e3:ff:5c:81:73:08:ce:6b:41:41:56:ef:
10:e2:62:44:2f:91:6a:b1:63:20:48:7b:59:f3:1e:
d2:bc:f5:87:48:b6:f4:6d:04:7b:b3:6a:a9:9c:46:
4d:ab:40:b3:74:70:0c:b5:bc:45:b4:d2:94:e6:6d:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:8C:D5:57:45:92:E6:F4:96:BF:6F:E6:B1:F4:AA:88:41:0B:CF
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2e:86:95:97:66:55:66:0c:fa:9e:88:0b:cb:79:22:dc:b0:
f2:40:58:c6:6a:3e:fc:50:db:f0:de:fa:71:e7:9a:1e:e7:39:
5d:74:c5:3b:1c:29:d8:e9:a8:1e:35:e9:f9:02:de:b0:f8:03:
1e:98:d5:4f:df:3b:f3:85:88:54:e4:e9:ba:6a:fd:6b:9d:26:
94:8d:11:5d:07:b3:57:46:81:34:38:36:41:16:8d:bc:96:96:
62:93:6d:cb:d3:9d:c1:96:f0:d3:a2:33:16:ed:36:53:bf:65:
e4:72:16:ac:1d:34:9d:cb:ea:4f:9e:ee:67:26:f8:d3:d9:88:
2a:57:f7:f5:cc:e8:80:db:c7:7e:5d:ca:34:fb:83:b9:72:87:
d6:b9:c6:83:2f:d6:57:65:22:68:ce:41:bf:0d:3f:f1:dd:3d:
87:ed:97:69:68:94:74:98:09:e2:9c:c7:10:33:35:bd:2a:fb:
88:5b:eb:47:a4:84:49:62:59:c2:2b:3c:54:72:35:d1:62:be:
28:4a:1f:46:a7:a2:78:b0:70:bb:23:77:db:7e:f1:6f:0b:e3:
c1:3e:98:40:de:9a:ef:d3:33:23:a3:9a:c1:c2:5d:3e:20:e7:
35:12:1a:be:25:ce:e8:29:47:ef:15:b2:6e:b5:52:36:0f:96:
82:f4:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:44 2025 by rpki-client