Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: 41Ee1/911yzI031U7j0+Qur8pY8sDIZsTUgVxATZCxs=
Subject key identifier: 06:49:79:6E:82:39:04:DC:40:C7:53:67:0E:93:C6:A7:17:28:7A:F1
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0199FC8F1825BF8ECF6ADEEE1CBE85DC727A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: CJrcqdt0xne6qe8Bxz/8blapfizdNOQhDprU7iDyXTY=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:18:25:bf:8e:cf:6a:de:ee:1c:be:85:dc:72:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=0649796e823904dc40c753670e93c6a717287af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:e2:92:5a:e4:f6:d5:09:f1:a1:45:06:81:
65:14:0f:8c:91:ad:ce:c4:59:49:21:2c:7b:2b:9a:
2a:f3:23:2d:5e:b3:ea:84:02:fd:ef:58:d0:a5:9e:
d1:81:a0:83:28:76:1b:5f:30:14:ea:86:7c:12:b0:
9e:96:41:11:bf:2a:21:0b:2c:0c:e6:f6:5e:e8:de:
26:c8:00:c4:5f:cb:a7:03:7e:80:60:54:99:89:a1:
2d:61:a8:10:04:88:4f:67:d7:41:22:cd:0a:8b:e8:
bc:78:8f:d1:a5:63:b1:16:d6:4a:b8:e9:1c:63:b0:
cb:1a:8c:57:e5:84:0d:20:0a:83:5d:9c:b8:d5:3b:
4a:e4:3a:b7:a9:31:bd:7d:d3:6c:0e:b2:9a:e1:ab:
36:88:0e:50:b7:81:52:13:bf:4d:79:02:05:d0:97:
be:e1:2d:17:b3:3c:af:f2:06:2e:c8:8b:38:da:01:
3d:d7:b6:5c:76:ad:6a:4a:10:39:cf:65:7b:92:c1:
fc:2b:12:d3:3c:e8:63:42:4f:bd:35:01:c5:05:94:
d4:dc:ad:f4:44:5a:94:25:2b:49:66:0e:23:70:59:
9e:ba:1d:29:1a:6d:4c:d3:b5:4f:06:10:19:ed:0c:
eb:03:2e:48:39:06:11:dc:71:d1:96:0b:d4:f1:46:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:79:6E:82:39:04:DC:40:C7:53:67:0E:93:C6:A7:17:28:7A:F1
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:c5:2c:d5:90:a4:1a:a9:18:73:46:1d:f9:26:da:90:af:
7d:5d:eb:ff:f8:8d:07:55:44:74:8a:7a:a7:85:cb:19:55:29:
04:ae:a7:d9:ff:02:25:14:85:08:14:b2:2d:e2:57:94:ac:21:
79:b0:d8:8b:ef:7c:93:81:ae:46:c4:0a:98:95:fc:86:b0:b8:
db:54:08:e0:4f:c9:ec:b1:44:05:e0:9b:e8:38:93:3f:41:2e:
78:ec:7a:49:14:eb:71:13:3b:a3:fe:92:fd:c8:fe:a0:90:17:
14:d2:8c:a2:84:f0:b6:9a:42:7c:40:ca:24:be:51:b1:cd:e3:
48:38:9e:31:14:49:fc:fb:1e:3c:be:5d:d5:d8:a0:89:c6:23:
b3:89:bc:3b:ac:de:7a:1d:84:50:d2:6e:b2:f0:02:2b:78:bd:
e9:83:71:5f:ed:e5:b7:ea:6c:13:13:e7:19:b3:da:3b:5e:44:
a7:75:37:df:66:8e:d0:03:8e:16:24:03:40:a5:42:81:f0:47:
28:5b:27:3c:70:bb:f8:c4:c0:fc:db:cb:00:19:07:1f:53:80:
be:c3:8f:e0:5a:3a:b9:7d:b1:4f:9a:f8:dc:ef:ee:67:69:4f:
ee:ac:e0:97:8c:0f:69:1a:19:8e:39:c9:06:c4:66:21:19:7c:
f5:36:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:33 2025 by rpki-client