Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier: 90P2iWurz6iyrFjZzoKggyEIXllDZObZbSjInKJVySI=
Subject key identifier: C9:8F:C5:47:5E:27:79:AC:57:78:76:8D:8F:6B:2F:62:EE:98:8A:6F
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial: 0199FCC6AA8FB1C505AD8E951AFE35667DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number: 02C0
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: N0bC9Xd1Go3dX1eJIhh5QWYhD/A1db0AkKeLnQMSlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:aa:8f:b1:c5:05:ad:8e:95:1a:fe:35:66:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=c98fc5475e2779ac5778768d8f6b2f62ee988a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:d7:2a:2c:2e:aa:b0:0e:35:c1:c3:d9:98:
97:42:6d:cb:f6:43:c8:1a:19:18:87:27:99:07:b8:
ed:c6:73:2c:9d:b3:1f:1e:c0:72:12:c6:a4:eb:a3:
f3:7d:39:dc:12:05:8c:02:fa:5e:f6:b5:59:da:a2:
09:00:ad:8a:98:ed:83:49:ba:d2:3e:7d:28:20:dc:
65:65:9f:c6:35:9d:9e:76:59:af:4d:26:fd:d2:f8:
a8:0e:f6:2a:8f:f3:89:ed:01:c0:44:03:fc:a3:5a:
22:47:b3:9d:e3:0a:78:35:f4:32:e4:01:6e:ac:d3:
26:19:a8:0a:ea:a7:7f:19:39:ce:9e:d0:fb:55:31:
52:13:11:a1:91:ec:d4:36:b0:3d:76:ea:61:ba:98:
bb:9a:87:cf:c2:31:a7:3e:ed:98:ce:10:87:5f:36:
bb:cf:08:a3:76:8e:81:73:7e:5f:51:f3:8c:f1:bb:
ad:ae:f8:e0:29:3c:3b:a4:03:53:51:f7:2f:e4:65:
8f:e1:8e:90:1d:a6:91:be:8f:ab:54:18:c0:84:52:
4d:7d:53:16:44:72:c9:ea:c2:09:0e:4d:64:95:ec:
bd:a0:92:ea:70:e2:8f:aa:97:9f:54:e4:d3:a1:90:
c0:6b:04:2a:91:e9:45:79:60:6d:fa:53:a7:be:ea:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:C5:47:5E:27:79:AC:57:78:76:8D:8F:6B:2F:62:EE:98:8A:6F
X509v3 Authority Key Identifier:
keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2c:ae:0e:f4:71:64:11:9b:e9:32:5c:7c:4e:2b:07:09:83:
64:32:0b:95:d8:ce:07:35:0a:b4:b7:1d:08:ec:dc:94:29:de:
0b:a3:d3:7f:1b:0d:fd:83:5b:5a:c7:c5:2f:f2:78:69:66:fd:
09:06:c4:50:05:66:f5:d9:b8:b1:ea:0e:29:6f:d6:11:21:97:
99:3f:3c:34:22:7b:44:bf:f1:2a:d8:bc:54:ba:13:e9:f8:f4:
f2:43:bf:54:54:04:69:41:9c:b4:6b:35:59:01:97:27:6a:2b:
6a:40:6d:f3:c7:ea:db:26:7f:9e:62:fe:43:6c:6f:fb:b6:4a:
3c:37:47:08:40:06:dd:f5:3a:94:78:dc:88:87:4c:02:f6:91:
be:b0:b9:f9:f1:62:99:35:fd:50:3e:c5:a7:a4:b2:7c:c6:82:
8f:db:82:0f:e2:d5:47:6a:e4:42:c9:44:83:a9:61:d8:42:9c:
68:cb:8e:94:22:9b:dc:7b:20:38:c2:c6:8a:7c:ea:bd:28:55:
90:eb:ba:40:c7:d8:9d:a2:66:4e:69:90:fd:d9:c5:88:da:eb:
9f:c5:5e:a1:a5:61:69:f2:cf:00:de:24:7a:89:24:23:d1:81:
22:69:f9:af:23:74:24:9b:b3:1b:8c:5a:6b:65:20:27:db:d9:
2e:04:59:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqqPscUFrY6VGv41Zn2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmFhMGI0MDI4ZjA3M2MwNTY0YTY1OGI0ZmI4ODg2Y2Jj
OGQzZWIwHhcNMjUxMDE5MTQwMTQyWhcNMjUxMDIwMTQwMTQyWjAzMTEwLwYDVQQD
EyhjOThmYzU0NzVlMjc3OWFjNTc3ODc2OGQ4ZjZiMmY2MmVlOTg4YTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyujXKiwuqrAONcHD2ZiXQm3L9kPI
GhkYhyeZB7jtxnMsnbMfHsByEsak66PzfTncEgWMAvpe9rVZ2qIJAK2KmO2DSbrS
Pn0oINxlZZ/GNZ2edlmvTSb90vioDvYqj/OJ7QHARAP8o1oiR7Od4wp4NfQy5AFu
rNMmGagK6qd/GTnOntD7VTFSExGhkezUNrA9duphupi7mofPwjGnPu2YzhCHXza7
zwijdo6Bc35fUfOM8butrvjgKTw7pANTUfcv5GWP4Y6QHaaRvo+rVBjAhFJNfVMW
RHLJ6sIJDk1kley9oJLqcOKPqpefVOTToZDAawQqkelFeWBt+lOnvuopXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmPxUdeJ3msV3h2jY9rL2LumIpvMB8GA1UdIwQY
MBaAFHq6oLQCjwc8BWSmWLT7iIbLyNPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEt
YmFlZGM3OWFlN2UxLzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEtYmFlZGM3OWFlN2Ux
LzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiyuDvRx
ZBGb6TJcfE4rBwmDZDILldjOBzUKtLcdCOzclCneC6PTfxsN/YNbWsfFL/J4aWb9
CQbEUAVm9dm4seoOKW/WESGXmT88NCJ7RL/xKti8VLoT6fj08kO/VFQEaUGctGs1
WQGXJ2orakBt88fq2yZ/nmL+Q2xv+7ZKPDdHCEAG3fU6lHjciIdMAvaRvrC5+fFi
mTX9UD7Fp6SyfMaCj9uCD+LVR2rkQslEg6lh2EKcaMuOlCKb3HsgOMLGinzqvShV
kOu6QMfYnaJmTmmQ/dnFiNrrn8VeoaVhafLPAN4keokkI9GBImn5ryN0JJuzG4xa
a2UgJ9vZLgRZjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:05 2025 by rpki-client