Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File: ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier: KWf5QiWlnuy0XUthyozVfMctBz/qS7I30MriZksEpss=
Subject key identifier: 8E:4F:F7:4A:3B:F3:26:58:3F:95:B8:FE:2B:31:96:14:A9:A9:75:1B
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 0199FEB468E4F1E35BB8827FCCFE15C99472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number: 0331
Signing time: Sun 19 Oct 2025 23:01:00 +0000
Manifest this update: Sun 19 Oct 2025 23:01:00 +0000
Manifest next update: Mon 20 Oct 2025 23:01:00 +0000
Files and hashes: 1: 0b5iGIeuo2DKMNvHl9YT-o9ecPk.roa (hash: /wSlkj/hp/zdqNdystfvelHxMMMnIXaQ57KuV+lO360=)
2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: tKnnF8Zb5zVxADBew5xC0FNIZ3H9x3s728ik5drPfMU=)
3: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
4: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
5: U-U_Tkm4xBBrlekFBtQjiXrIauU.roa (hash: 41TyEm79tZ+O3IraL+NOA9wwTefMXNRXTAYZJHoHXZs=)
6: UokUVc7UAaE0Di5OcC7YhprKb8g.roa (hash: 49xcqnPfWh4yshNiRsfA6+cAKNJbbov3157uoEGh0zM=)
7: daT_tlHA6Qk4P5c_mAKg_30bQto.roa (hash: 8QeryI1AvWB8IxUm5wUjKihb2jduD7+5c0+oE2ozl40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:68:e4:f1:e3:5b:b8:82:7f:cc:fe:15:c9:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Oct 19 23:01:00 2025 GMT
Not After : Oct 20 23:01:00 2025 GMT
Subject: CN=8e4ff74a3bf326583f95b8fe2b319614a9a9751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:14:ec:fe:a5:c8:14:01:d2:ef:59:45:9e:
c0:15:90:13:26:ef:2b:f1:3b:6d:22:cc:b5:33:35:
cb:34:49:d1:58:2d:3e:fc:ec:1a:90:05:7c:da:ae:
a4:37:bf:b8:77:53:55:72:91:51:7e:bb:58:cc:fa:
6a:5f:8b:32:01:72:f7:87:45:4c:c1:16:ad:1b:66:
a5:a3:12:3e:25:d9:39:63:01:9b:3e:b7:07:5a:d8:
58:8a:2c:db:00:83:11:60:71:b3:21:3e:91:b8:9e:
95:61:38:64:73:19:7f:9b:69:14:93:68:b3:0a:fa:
1f:4c:c9:ed:f3:69:e0:c9:d1:c2:ff:a4:8d:3d:5a:
41:84:fd:a6:51:68:74:5d:d7:58:22:a0:8d:26:02:
42:dc:ff:7f:ac:b9:0a:ff:a3:86:d4:bf:00:b9:b9:
a7:ba:61:ef:e6:15:61:45:93:34:c9:ce:3f:6b:c8:
60:43:75:af:fb:b7:04:06:6d:79:cc:25:49:8a:1a:
b2:74:f2:ff:22:3b:51:7b:94:bf:f6:c4:b0:e3:f3:
db:5f:87:54:89:05:aa:0f:b6:5f:13:eb:45:b9:7d:
01:6b:38:a7:42:46:78:d8:24:58:7d:e0:b8:de:05:
3e:72:be:f8:4f:cd:84:39:92:59:d3:2d:ab:e9:82:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:F7:4A:3B:F3:26:58:3F:95:B8:FE:2B:31:96:14:A9:A9:75:1B
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:6f:d4:fd:e6:75:ae:01:46:e0:87:11:c9:03:20:41:11:
5d:e1:b0:b5:7f:59:27:d1:47:c0:9a:25:63:7c:3b:9d:43:cc:
13:02:99:90:6a:91:b7:cb:61:4a:f6:49:da:4a:59:50:07:6a:
54:00:1c:2c:44:df:01:25:85:df:a6:0c:49:46:05:da:0e:88:
7d:30:d5:5a:4c:fa:a9:66:bf:ed:bd:d4:f8:3d:da:d4:d6:c8:
e1:bb:4c:2c:21:bd:82:e5:89:b1:f4:81:9a:f2:77:3a:bb:2b:
2b:a5:b4:98:56:3f:f5:1a:99:b9:8c:69:7d:33:83:4f:79:5c:
c7:43:34:7d:af:81:10:16:a1:2d:11:03:29:f1:44:c8:8f:09:
f1:31:71:49:d5:5e:e7:5c:89:71:ba:c5:07:c2:d3:c5:48:81:
ff:3b:1e:2e:03:8d:b9:43:c6:18:fe:b8:3f:23:a6:c1:25:9f:
af:91:13:81:43:19:46:27:a6:53:d9:85:a5:d4:f7:44:f2:84:
75:2f:fe:64:99:ab:c1:45:da:e7:e7:e5:22:f8:6a:70:a6:3b:
63:45:74:5a:f9:79:5d:db:97:73:31:d3:1e:e4:a8:5b:dc:a4:
86:74:fc:48:1e:45:f2:36:4c:6c:c8:b6:da:0d:dd:4a:42:fc:
1e:d6:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:00 2025 by rpki-client