Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: eJ32gDpU5yHQ0n6JIt3405oP97XR/LSsGns8OzbHImE=
Subject key identifier: 53:32:4F:67:77:0B:A6:13:3D:1E:A7:99:5A:84:18:0E:9F:36:DF:80
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0198D516044B63902172AE6C6C458067746D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: uIU/7e7lnMpe3E2fgwrlfe+K2Tek7Jrdl3PJ/eSfk1I=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:04:4b:63:90:21:72:ae:6c:6c:45:80:67:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=53324f67770ba6133d1ea7995a84180e9f36df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:f0:7c:f2:06:1a:21:43:c7:9b:9d:7f:ed:
7e:79:9e:6c:1d:e3:cc:5c:be:61:cd:73:c1:4f:38:
cd:a1:d2:08:0d:69:06:50:c6:5a:d7:36:f1:27:ca:
03:b7:ea:b8:1f:72:79:88:b0:b1:0b:c5:13:8b:34:
82:69:01:c9:c7:f5:4e:6f:5a:f9:eb:65:06:b3:9c:
d7:bb:85:58:15:06:b2:a7:83:56:dc:ae:ce:54:f7:
4a:6d:3e:6f:f2:5f:30:65:19:f5:c3:63:a3:ca:b2:
6e:c9:50:b4:f9:01:f9:60:28:be:c0:87:d9:c9:5c:
5c:4d:f3:a4:2c:70:8b:a5:9c:13:81:1b:04:5a:04:
9c:43:e7:ca:49:6a:b8:15:9d:56:8d:8d:b9:c0:d8:
75:62:a4:56:e0:b2:3b:11:cb:1b:f8:d6:ee:fa:ab:
9e:19:83:70:f6:2c:29:b1:69:da:66:e5:51:5d:39:
00:61:fd:1b:3d:96:40:f1:2f:5f:58:0d:01:fe:f1:
a3:e5:57:93:18:30:76:50:28:9a:b2:e4:f0:ae:23:
26:ec:b2:90:cf:7d:29:9c:d0:73:e4:39:b3:c3:e7:
a1:b0:3d:ac:34:10:9e:2e:f5:4b:9d:37:0c:bf:2f:
2c:39:30:99:0a:5f:9b:fc:93:84:5a:a6:e0:0f:55:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:4F:67:77:0B:A6:13:3D:1E:A7:99:5A:84:18:0E:9F:36:DF:80
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:cc:e6:3c:fe:59:8e:f9:12:77:89:93:65:4f:a6:13:1c:
83:0f:91:71:91:ad:11:78:b1:8d:76:88:c6:88:a6:5d:fd:bf:
08:54:e7:4c:e6:36:3a:b8:9f:f9:e2:a2:7a:d9:23:90:2f:5c:
64:ee:9d:26:9c:13:97:1a:28:6a:a0:89:2d:c5:a3:79:5d:2d:
3a:b6:21:35:c1:6f:9e:d9:0d:19:ab:2e:20:f7:ab:a2:a1:aa:
a5:82:4b:dc:ef:4a:ac:1c:4f:ed:79:fe:c5:e6:e6:05:80:51:
56:fb:18:60:1c:6d:6c:c0:90:2f:93:9a:f1:cf:8b:0a:30:4b:
b4:52:7b:55:2e:76:db:5e:df:25:f7:b0:68:7e:f2:dd:30:d2:
4d:51:28:4c:de:ca:87:e0:47:d9:ae:ab:d5:fe:b0:3b:8f:bf:
6a:8f:a9:30:9d:1a:e1:4c:12:83:c3:f3:ec:8c:a6:25:e1:cf:
19:e5:22:9f:94:cd:40:4e:b9:a4:70:e6:b5:9d:b3:fe:35:46:
97:ed:59:a2:fc:c3:3b:64:fe:cf:9a:9d:fb:43:24:cb:9c:d7:
27:0c:dd:82:43:ba:49:55:e1:b0:d6:c2:fe:12:d2:e9:fa:66:
66:03:6c:75:7c:36:5c:8a:97:22:74:a7:b2:80:69:79:0e:97:
79:d4:e0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgRLY5Ahcq5sbEWAZ3RtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWUwY2JiZTVkMWMwYTA5NDY1MDk1ZTQ0NGZiYzFjNzkz
MmM2ODMwHhcNMjUwODIzMDQwMDQ2WhcNMjUwODI0MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg1MzMyNGY2Nzc3MGJhNjEzM2QxZWE3OTk1YTg0MTgwZTlmMzZkZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri7wfPIGGiFDx5udf+1+eZ5sHePM
XL5hzXPBTzjNodIIDWkGUMZa1zbxJ8oDt+q4H3J5iLCxC8UTizSCaQHJx/VOb1r5
62UGs5zXu4VYFQayp4NW3K7OVPdKbT5v8l8wZRn1w2OjyrJuyVC0+QH5YCi+wIfZ
yVxcTfOkLHCLpZwTgRsEWgScQ+fKSWq4FZ1WjY25wNh1YqRW4LI7Ecsb+Nbu+que
GYNw9iwpsWnaZuVRXTkAYf0bPZZA8S9fWA0B/vGj5VeTGDB2UCiasuTwriMm7LKQ
z30pnNBz5Dmzw+ehsD2sNBCeLvVLnTcMvy8sOTCZCl+b/JOEWqbgD1WvJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMyT2d3C6YTPR6nmVqEGA6fNt+AMB8GA1UdIwQY
MBaAFBEeDLvl0cCglGUJXkRPvBx5MsaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3Nzgt
ZDE1ZTUxNmRjNDVjLzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3NzgtZDE1ZTUxNmRjNDVj
LzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh/M5jz+
WY75EneJk2VPphMcgw+RcZGtEXixjXaIxoimXf2/CFTnTOY2Orif+eKietkjkC9c
ZO6dJpwTlxooaqCJLcWjeV0tOrYhNcFvntkNGasuIPeroqGqpYJL3O9KrBxP7Xn+
xebmBYBRVvsYYBxtbMCQL5Oa8c+LCjBLtFJ7VS52217fJfewaH7y3TDSTVEoTN7K
h+BH2a6r1f6wO4+/ao+pMJ0a4UwSg8Pz7IymJeHPGeUin5TNQE65pHDmtZ2z/jVG
l+1ZovzDO2T+z5qd+0Mky5zXJwzdgkO6SVXhsNbC/hLS6fpmZgNsdXw2XIqXInSn
soBpeQ6XedTgQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:48 2025 by rpki-client