Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier: BEtVioskcWsUVv5xpE7WcqOWHWAYTtMWH04Wx+ZB9HI=
Subject key identifier: 5B:3B:9B:4D:77:C7:CE:50:BF:2B:14:EB:1D:C4:F9:4A:2A:02:14:A5
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 0199FC58BCB92C7D46E0CCEC93DC5C7118FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: DoWudjoPRCbCsHb/wxAJiEBqHKKjl8M8pnv5hTCh8cc=)
2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=)
3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bc:b9:2c:7d:46:e0:cc:ec:93:dc:5c:71:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=5b3b9b4d77c7ce50bf2b14eb1dc4f94a2a0214a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:1a:97:09:68:ff:86:1f:1d:e7:56:65:27:
f4:52:c5:7f:ca:77:af:49:09:61:80:fb:96:f6:61:
f0:2f:cf:51:9a:9d:9d:1b:fb:0d:42:70:03:92:e1:
07:4a:6e:b3:ce:37:77:21:09:b6:85:cc:5c:80:43:
be:6f:ce:87:18:59:f5:bf:53:73:14:06:76:7b:91:
eb:e7:a6:8d:dd:e9:e0:d1:79:e5:52:f2:ee:ed:f8:
43:c0:54:1f:b6:b0:e9:e5:d7:54:ed:d4:3c:cc:8c:
e1:4c:fb:f8:17:98:c4:d4:0f:f3:3a:f1:af:60:98:
4c:3a:cb:8e:fc:53:80:4f:04:e9:77:c1:e3:89:02:
db:f3:d6:8b:af:d6:8f:25:b4:b7:7c:bd:94:36:4f:
8c:49:4b:39:eb:dc:01:07:4a:c7:c9:74:6c:82:65:
8d:6e:ef:b4:b0:8c:a8:9c:43:78:c0:49:40:8a:34:
be:21:fa:0b:cb:b7:9e:fc:16:ab:45:36:61:f0:57:
c3:f3:74:11:e9:1a:a5:d7:3c:6c:a2:f6:ab:dc:10:
f9:ff:1a:ef:e0:31:1b:1d:97:17:73:72:28:94:0c:
f6:e3:79:84:d9:a9:62:41:0b:5e:0a:b3:e3:7e:b1:
1d:1e:2f:bd:47:1d:9e:e9:c4:f5:df:75:0b:d4:37:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:9B:4D:77:C7:CE:50:BF:2B:14:EB:1D:C4:F9:4A:2A:02:14:A5
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:90:8b:3c:09:ec:39:60:e8:1b:f2:a3:09:13:f8:74:a6:fa:
72:59:5e:dc:a4:cb:d2:c6:54:ec:65:0d:59:34:0c:36:8a:22:
60:e9:65:44:e6:ef:f5:5f:0c:4f:f3:86:bf:2a:05:83:60:9b:
13:a5:dd:eb:2f:69:cc:8b:c1:03:16:8e:21:1f:33:9b:96:eb:
95:08:fd:b8:a5:1c:bb:47:72:0b:d8:0b:2a:a1:ca:e3:4d:fd:
74:e4:03:e0:44:46:a8:03:d3:f1:e0:0b:81:55:02:00:8b:e4:
50:25:ec:8c:60:20:b2:17:52:65:1e:10:63:c6:d4:d0:48:8b:
b3:3e:b3:62:74:a0:a6:b3:98:9b:81:de:e2:5e:ec:8e:8e:28:
fa:45:f1:e0:63:72:af:37:e7:1d:0a:44:f3:55:89:84:d1:41:
12:8d:4d:da:ff:5d:0c:d7:26:85:27:74:33:df:f4:b1:11:88:
2a:e1:35:15:91:bb:a0:93:56:41:af:1c:41:ed:b0:a5:e0:fb:
a0:2e:d3:a9:e4:7a:a7:d1:92:11:83:d7:12:3f:5e:09:d6:c9:
10:b3:9d:38:3d:76:26:ca:25:70:b7:47:73:1b:ef:53:a9:69:
49:59:be:71:9b:8d:e4:7c:bc:f0:44:14:41:e8:64:bd:a5:f6:
32:39:b1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLy5LH1G4Mzsk9xccRj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw
YjhlOGYwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
Eyg1YjNiOWI0ZDc3YzdjZTUwYmYyYjE0ZWIxZGM0Zjk0YTJhMDIxNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEUalwlo/4YfHedWZSf0UsV/ynev
SQlhgPuW9mHwL89Rmp2dG/sNQnADkuEHSm6zzjd3IQm2hcxcgEO+b86HGFn1v1Nz
FAZ2e5Hr56aN3eng0XnlUvLu7fhDwFQftrDp5ddU7dQ8zIzhTPv4F5jE1A/zOvGv
YJhMOsuO/FOATwTpd8HjiQLb89aLr9aPJbS3fL2UNk+MSUs569wBB0rHyXRsgmWN
bu+0sIyonEN4wElAijS+IfoLy7ee/BarRTZh8FfD83QR6Rql1zxsovar3BD5/xrv
4DEbHZcXc3IolAz243mE2aliQQteCrPjfrEdHi+9Rx2e6cT133UL1Deq9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs7m013x85QvysU6x3E+UoqAhSlMB8GA1UdIwQY
MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt
MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi
LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJCLPAns
OWDoG/KjCRP4dKb6clle3KTL0sZU7GUNWTQMNooiYOllRObv9V8MT/OGvyoFg2Cb
E6Xd6y9pzIvBAxaOIR8zm5brlQj9uKUcu0dyC9gLKqHK4039dOQD4ERGqAPT8eAL
gVUCAIvkUCXsjGAgshdSZR4QY8bU0EiLsz6zYnSgprOYm4He4l7sjo4o+kXx4GNy
rzfnHQpE81WJhNFBEo1N2v9dDNcmhSd0M9/0sRGIKuE1FZG7oJNWQa8cQe2wpeD7
oC7TqeR6p9GSEYPXEj9eCdbJELOdOD12JsolcLdHcxvvU6lpSVm+cZuN5Hy88EQU
QehkvaX2MjmxkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:34 2025 by rpki-client