Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: sBfPHSFFVRuxbi/7NSUg2kLSXjDNeAVrub9r54tptaE=
Subject key identifier: FA:27:2E:10:A6:36:C4:56:DB:07:5F:4C:93:B5:E5:E4:E9:09:57:FF
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 0199FD343A7AA360232F04D28E382DC6C680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 118E
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: sFG6zVRd1MXGDn+rSTylpSJZEgh+Pn9URAvcpRFYYXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3a:7a:a3:60:23:2f:04:d2:8e:38:2d:c6:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=fa272e10a636c456db075f4c93b5e5e4e90957ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:12:8a:49:1e:69:16:38:88:e4:d0:56:85:
28:fa:4b:0e:1b:c7:27:f8:df:ce:5e:fb:d8:c2:c5:
2a:40:06:34:70:ec:75:12:52:b1:2c:e3:57:a9:2c:
0a:05:dd:03:07:79:00:57:23:e8:02:95:5d:03:71:
d9:09:8f:f6:ed:64:04:62:7c:d9:4a:63:57:09:52:
a4:c3:dd:a3:62:b0:44:5e:b2:c6:e9:2f:cf:d1:3c:
f7:05:72:2d:a1:49:66:2b:6b:9e:07:bd:99:46:20:
af:6e:fc:85:4f:3d:1b:25:d2:35:9a:80:3f:45:2f:
cd:87:e2:98:9d:9b:83:7a:fa:9d:a2:b7:dd:cd:e9:
d7:5b:51:a8:fe:0e:9a:c7:0d:2c:c5:95:72:d3:1f:
76:5a:6a:38:a4:71:92:c7:9d:e7:3f:bd:45:42:cd:
62:27:d0:fa:b2:bc:14:9e:b0:18:96:8e:d9:3d:74:
ba:d8:55:0d:f2:72:3d:f1:1e:9a:e1:21:a9:69:60:
c6:7e:72:59:f9:fa:7a:d7:65:42:4e:df:a7:4e:99:
e8:3b:6b:c2:11:ff:aa:f8:f2:1a:65:05:de:51:0f:
aa:3c:54:56:9e:e9:af:16:44:02:6b:86:de:39:41:
b4:35:5e:ad:c7:c7:6b:ab:87:d3:5c:6e:a3:26:cf:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:2E:10:A6:36:C4:56:DB:07:5F:4C:93:B5:E5:E4:E9:09:57:FF
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:ff:16:ef:04:d3:df:f5:f4:e9:91:b2:8c:b5:c8:a9:dc:
95:78:50:fa:51:17:98:e4:5a:83:a2:45:54:78:f9:9a:1b:40:
26:52:bf:83:98:54:4c:a7:bb:d9:c9:73:14:21:b4:26:00:9f:
76:33:4b:f5:7c:91:6f:1e:85:2b:b0:54:42:b4:b3:56:40:47:
e7:b9:2d:f7:c5:07:f5:ac:90:57:80:50:95:b2:6f:94:6a:0b:
31:a1:f7:63:82:09:dd:45:5e:b1:61:bc:e6:d9:8d:8f:20:3f:
69:bd:f8:94:59:f2:0e:87:32:f8:d2:5d:b5:8a:83:16:31:a1:
9b:95:08:a7:ef:1d:b1:f8:32:f5:11:c5:11:d7:c2:82:d0:0b:
0c:13:9e:dc:43:e5:17:94:9e:91:4e:bc:a1:4d:d1:6e:21:02:
c5:4f:93:d8:a9:c5:cc:46:9f:f1:e1:3e:16:2c:28:d0:26:76:
b4:76:b9:bc:4d:39:06:3b:0d:a6:43:39:d1:8d:da:73:1d:04:
f5:35:7b:98:72:b0:d1:d3:ad:93:34:e9:d6:a1:4c:0f:f1:9a:
c2:f5:ac:66:82:9d:5a:2a:17:d7:38:9e:7d:10:55:37:8b:cd:
72:6b:54:70:c3:db:9b:94:9d:0d:a8:2d:2b:2b:54:3a:d6:72:
7b:ee:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:43 2025 by rpki-client