Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier: VQWpP6POxUnNrMGItHal/rkrHSN1MunuTW69K9fXZ3M=
Subject key identifier: D2:A1:52:D9:1E:B7:CE:AF:14:13:A7:BF:20:EB:40:17:9D:50:56:DD
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial: 0199FC8F93A82DB270551B11C6DB99788A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number: 0766
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: UT/UP+Fius3nD1sIjh7Zf15v3UUkt0NVExxQqJc2yvs=)
2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)
3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:93:a8:2d:b2:70:55:1b:11:c6:db:99:78:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=d2a152d91eb7ceaf1413a7bf20eb40179d5056dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:88:e7:30:40:d1:79:c8:75:0c:1f:d6:67:
c3:ae:4b:cc:b2:d8:97:00:66:cd:30:35:3a:0f:42:
cf:1a:60:03:c3:f7:de:55:c3:d7:76:bb:dd:57:99:
30:f9:04:74:99:7a:d1:27:eb:43:66:02:4d:e4:44:
f4:d2:b9:a0:a7:8e:d4:c3:dc:45:9d:db:08:48:ce:
54:83:fa:1e:31:a9:4f:69:e0:1b:8c:dd:1b:e4:5f:
2b:0c:5a:89:3a:9f:c1:a7:99:c7:b7:fc:b7:7a:1a:
7d:a9:41:45:0f:c0:05:55:ae:30:f6:99:2b:cd:19:
41:ee:53:24:f8:8a:21:91:a7:5d:a0:30:65:66:2c:
ff:03:df:61:53:d3:0c:e7:1c:a7:7a:a2:31:55:66:
ee:f7:85:8f:54:da:00:4a:5f:64:40:89:9e:f7:62:
02:d0:08:50:09:ae:32:fb:e5:c9:cd:02:a9:0e:dd:
bd:45:f8:92:7f:73:f6:1b:d7:84:55:65:6b:78:dd:
a7:b3:61:ab:ab:5c:7d:4e:2d:41:dd:72:80:80:35:
17:22:ab:83:0a:91:de:56:95:8d:5c:9d:23:a5:8c:
f3:82:7b:ed:f2:07:d2:3a:79:71:ed:1b:77:1c:d7:
5f:87:59:e8:24:8e:7a:c3:cb:31:63:3a:47:06:f5:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:52:D9:1E:B7:CE:AF:14:13:A7:BF:20:EB:40:17:9D:50:56:DD
X509v3 Authority Key Identifier:
keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:21:ef:64:50:38:e7:79:92:d7:23:31:47:3b:2c:0b:3e:40:
5b:c4:9e:f3:38:d2:3b:2b:9d:79:b7:dd:ab:69:a3:9f:a0:69:
f7:e8:b9:07:78:e1:f1:47:79:36:30:cc:1d:c8:15:d4:48:b9:
22:91:68:42:44:4a:a8:8f:0c:b8:5e:e6:7e:58:d7:0d:9e:37:
98:76:48:dc:ed:77:ec:84:5f:3b:e5:07:25:4e:72:e5:45:ad:
0f:e2:18:2d:5f:ed:f7:8e:7d:69:ad:8a:2a:bf:53:38:d8:36:
6d:25:a2:c0:0f:5b:db:14:cf:31:27:78:dd:e6:97:76:f6:56:
55:78:b7:08:4e:d5:fb:5a:a0:cc:a6:9f:3b:a0:93:55:5d:66:
fe:29:7f:a8:ec:81:1e:42:19:25:73:b6:ef:ea:4e:23:59:38:
d6:5f:e7:28:e0:89:f0:f1:24:6d:bf:bd:9e:94:4c:a8:e7:8f:
4e:e1:c3:b6:1a:1c:a4:de:9f:b1:ab:55:b0:39:5f:92:c9:67:
42:0a:68:31:91:c7:0c:a9:84:c0:1b:ef:1f:be:c9:4c:46:1b:
69:54:38:e6:f0:a3:89:5f:e0:1a:5a:27:04:27:01:e4:9c:28:
dc:3a:b5:18:91:94:fc:c6:6a:e8:75:38:5b:ed:b4:c4:83:55:
d8:1c:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:31 2025 by rpki-client