Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: lhJjFCaKWTu0kg7JHvWDriWnLbNng8nRpXkrVgGXGQ0=
Subject key identifier: 4F:B4:11:98:DF:EE:DA:76:99:0E:28:5C:90:C4:1A:EC:3E:7C:B9:A6
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 0199FD348C4D500E8019FFB1FCF7876DDEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: 029A
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: QOzol5WKvAOZB6bwWFdZhpPCyEwMxAMn1Saxtiu8h8M=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:4d:50:0e:80:19:ff:b1:fc:f7:87:6d:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=4fb41198dfeeda76990e285c90c41aec3e7cb9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:cf:69:27:91:7b:e6:3a:85:c6:f8:d0:23:
01:27:26:26:0a:22:f0:0c:98:e5:84:ab:24:85:48:
c4:c2:f6:4c:37:fc:4b:b4:10:bb:2a:52:d6:43:e7:
4e:8e:af:26:f4:01:59:6b:44:98:d9:0b:bc:25:e6:
08:66:75:e1:1e:7e:2e:bb:99:eb:40:f8:fa:55:2a:
d9:00:09:b7:78:af:6f:53:12:a7:3e:f7:33:68:cd:
24:e2:b5:b8:d2:6b:78:0d:d2:3f:32:30:1d:27:b5:
6b:b3:06:b3:6c:d5:33:00:cf:ea:f1:7b:83:28:bc:
b7:02:0c:9e:f6:82:6a:12:58:28:0d:46:59:2f:08:
70:9e:3a:ce:5f:d8:0a:f3:da:33:07:c6:30:b7:ef:
f1:e9:08:88:4b:75:bb:11:b1:81:38:eb:36:a2:77:
51:53:5f:65:01:ca:2e:22:26:0d:a9:27:35:7d:f8:
da:d8:69:ff:08:67:a9:77:ba:bc:23:6a:7c:eb:60:
51:12:64:53:a1:4b:e6:94:89:06:d4:db:30:2f:28:
cc:6d:71:10:45:2d:43:bc:bf:d4:b1:4a:fb:d9:86:
a7:6d:f7:fc:80:0c:a6:37:62:23:07:e4:5f:e7:2b:
20:de:56:cb:b4:8b:c3:6d:e0:a9:a5:93:a4:c9:fe:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:11:98:DF:EE:DA:76:99:0E:28:5C:90:C4:1A:EC:3E:7C:B9:A6
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:78:f6:42:fd:84:b0:1f:f0:06:9c:55:e1:66:25:0f:d1:
11:bc:97:d4:a8:a7:5b:29:f5:d7:4b:36:fb:46:dc:0d:d8:15:
5d:1c:27:60:71:40:a4:95:8c:4f:2c:99:f0:b3:6b:82:bd:0c:
b9:3f:28:31:12:a3:33:6d:71:fa:83:9f:04:1d:ab:1d:49:48:
f7:7d:6a:d0:f3:87:0e:0e:bb:2b:f6:60:7c:64:da:5f:ad:d4:
df:b4:f2:46:44:52:98:2a:5a:30:1d:4f:13:21:5d:b3:0b:00:
c2:a5:82:6e:16:64:1c:33:53:1f:81:1b:55:28:a3:9b:ff:d1:
6e:18:ba:1d:f2:89:0d:47:ef:77:6d:ce:12:d4:8b:8c:53:90:
5c:94:8b:00:71:16:a6:11:50:45:9c:79:08:aa:91:a0:b7:72:
97:2a:f6:3f:c0:12:5a:3d:98:99:79:c2:a9:72:95:a7:11:3f:
c3:11:6d:c2:c5:c2:67:d3:1e:11:e2:2e:03:c6:73:1d:96:07:
79:0a:2c:da:09:9b:e1:bb:a4:4b:0b:b6:6b:53:93:3e:18:80:
5b:f1:51:c9:78:3a:58:c8:df:ec:9a:43:4c:43:69:69:4b:3a:
bf:75:4c:73:f1:79:1e:80:82:f7:90:4b:5a:6a:53:62:50:e1:
37:7a:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:12 2025 by rpki-client