Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: PMMzg/1TTkS/kqZzXkEPr6ABKQmqtAIPszbESdSXS3A=
Subject key identifier: 0F:1A:19:A3:4A:D4:0A:09:5C:70:22:2C:E5:C8:C0:9C:E7:4E:DE:92
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 0199FD344254013599E83E52980D74FDDA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 169E
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: 2HlXVtYQ0S92RUZoHpkYEAcJg3wrFpR1T9i1uN9PFeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:42:54:01:35:99:e8:3e:52:98:0d:74:fd:da:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=0f1a19a34ad40a095c70222ce5c8c09ce74ede92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:37:66:69:57:83:bc:90:65:65:d1:0f:46:
a2:a8:39:0e:35:6f:10:20:7d:d4:61:60:00:ed:6c:
7a:6d:fc:4b:dd:7a:d4:6c:b0:b4:d7:35:72:b7:42:
1a:3f:55:df:27:1c:0d:e4:c3:16:55:22:2a:87:aa:
1d:4f:08:b6:10:1f:f8:1d:98:1b:02:65:17:fa:72:
07:b5:1b:65:aa:17:d3:a6:39:33:6d:ea:67:dc:7e:
67:f8:21:95:75:ff:c9:9a:b2:08:25:1e:db:22:76:
4f:e0:a3:ab:a0:7b:a0:dd:fc:fe:bf:d1:b0:fa:41:
2a:e4:65:d9:93:86:29:6d:35:b9:4e:9d:66:3b:e2:
0e:05:52:b4:66:f8:b5:97:26:9c:34:d8:72:21:61:
9d:99:b5:b9:b8:14:61:05:18:1f:eb:e4:6d:e6:6e:
84:e9:7b:f3:89:7a:ce:77:67:d0:69:e0:8b:7b:1c:
84:76:ce:7d:4b:c6:47:bf:5a:41:22:68:ca:7f:48:
11:e0:74:28:60:a8:f5:a7:16:7f:c9:da:33:65:65:
4c:d1:dd:aa:8c:d0:aa:02:9f:5d:6d:79:bb:b4:33:
1c:28:04:58:e8:5a:d7:7d:20:1b:b3:ea:04:b6:bf:
86:77:d2:91:e2:cd:5c:61:e0:cd:36:63:32:67:d1:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:19:A3:4A:D4:0A:09:5C:70:22:2C:E5:C8:C0:9C:E7:4E:DE:92
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:89:2a:a9:d2:4c:44:74:7b:53:f7:fd:9c:05:73:ae:0a:1f:
6a:42:02:fb:32:0c:da:2c:24:f8:f5:13:96:af:2d:c9:34:80:
96:d8:53:21:41:43:99:9f:32:f1:ce:98:5a:3f:e3:04:c6:4b:
4c:20:cd:b3:4a:6c:8c:c2:67:b3:57:1c:59:b1:d5:3c:f8:48:
4c:a9:01:45:70:d6:b3:58:48:47:e0:28:a5:c6:2e:71:1e:19:
de:60:e1:4b:89:d1:6e:43:b1:f2:f1:25:e9:e2:55:5c:69:af:
49:cd:9b:4f:8a:78:08:fd:e1:3c:17:79:b4:9f:e9:ab:b9:84:
ce:ca:5c:82:e6:08:29:9c:28:e1:22:9c:ad:77:4b:90:9e:ef:
9d:96:75:ee:b7:bb:9d:3e:7d:38:4b:d8:09:05:3d:19:27:f5:
40:95:33:73:08:cc:0f:a2:29:2b:24:60:de:3e:cc:4d:7d:e6:
3a:37:ed:18:4c:72:96:ad:0a:0f:51:f5:2a:4e:c6:80:b8:44:
2b:9d:63:72:6f:91:ce:65:56:99:15:21:04:99:2e:89:d0:1e:
a2:49:f4:78:8c:30:e2:4f:db:fb:2b:59:8b:39:28:f7:bf:28:
c1:d8:bf:63:0d:96:1b:f4:2f:d0:33:c3:fa:3b:cf:47:1e:d9:
2b:3c:fc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEJUATWZ6D5SmA10/dpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjc0YjAxMzA3ZjljM2ZhNzU2MTk2Mzg0MTczMTE1ZTY2
ZTZjNTUwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EygwZjFhMTlhMzRhZDQwYTA5NWM3MDIyMmNlNWM4YzA5Y2U3NGVkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQI3ZmlXg7yQZWXRD0aiqDkONW8Q
IH3UYWAA7Wx6bfxL3XrUbLC01zVyt0IaP1XfJxwN5MMWVSIqh6odTwi2EB/4HZgb
AmUX+nIHtRtlqhfTpjkzbepn3H5n+CGVdf/JmrIIJR7bInZP4KOroHug3fz+v9Gw
+kEq5GXZk4YpbTW5Tp1mO+IOBVK0Zvi1lyacNNhyIWGdmbW5uBRhBRgf6+Rt5m6E
6XvziXrOd2fQaeCLexyEds59S8ZHv1pBImjKf0gR4HQoYKj1pxZ/ydozZWVM0d2q
jNCqAp9dbXm7tDMcKARY6FrXfSAbs+oEtr+Gd9KR4s1cYeDNNmMyZ9GHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8aGaNK1AoJXHAiLOXIwJznTt6SMB8GA1UdIwQY
MBaAFHq3SwEwf5w/p1YZY4QXMRXmbmxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAt
OWY1Zjc4MzUyNjAwLzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAtOWY1Zjc4MzUyNjAw
LzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYkqqdJM
RHR7U/f9nAVzrgofakIC+zIM2iwk+PUTlq8tyTSAlthTIUFDmZ8y8c6YWj/jBMZL
TCDNs0psjMJns1ccWbHVPPhITKkBRXDWs1hIR+AopcYucR4Z3mDhS4nRbkOx8vEl
6eJVXGmvSc2bT4p4CP3hPBd5tJ/pq7mEzspcguYIKZwo4SKcrXdLkJ7vnZZ17re7
nT59OEvYCQU9GSf1QJUzcwjMD6IpKyRg3j7MTX3mOjftGExylq0KD1H1Kk7GgLhE
K51jcm+RzmVWmRUhBJkuidAeokn0eIww4k/b+ytZizko978owdi/Yw2WG/Qv0DPD
+jvPRx7ZKzz8wA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:53 2025 by rpki-client