Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier: A/neBPLSTLkj1Uw2WVcLgRAFxC7CUy/7AHUsxOkl16Y=
Subject key identifier: 0C:CF:93:A3:A5:A1:22:42:A4:03:A1:86:BA:05:43:5F:FB:15:96:21
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 0199FEB512296DD061EF1BEFA6830B6B7DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:43 +0000
Manifest this update: Sun 19 Oct 2025 23:01:43 +0000
Manifest next update: Mon 20 Oct 2025 23:01:43 +0000
Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: lbyKXKuui8nE+FlHm2Nd67koM8peHNwxJL7DUvD+MMw=)
2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=)
3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:12:29:6d:d0:61:ef:1b:ef:a6:83:0b:6b:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Oct 19 23:01:43 2025 GMT
Not After : Oct 20 23:01:43 2025 GMT
Subject: CN=0ccf93a3a5a12242a403a186ba05435ffb159621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:7b:bd:a2:21:ac:9f:70:3d:83:96:7a:a2:
e8:ad:6f:ac:d1:98:32:ad:ca:24:1c:c5:41:ec:dd:
69:f9:24:f3:52:76:a1:14:4c:0f:06:e5:38:29:55:
03:00:b5:0a:a1:47:9b:3c:0e:0b:da:a6:51:bb:6c:
9b:5a:ea:54:29:d3:41:47:91:2a:99:3f:fd:dd:41:
f3:27:e4:11:33:a5:1e:8f:8d:8c:de:83:80:68:92:
f9:3f:28:36:24:25:84:82:a8:bb:d8:09:a2:3f:fa:
44:ad:7d:48:9a:3e:4d:cd:76:16:85:df:53:3d:57:
21:10:8b:6b:99:97:6a:d9:8b:66:6d:7c:e2:d9:25:
57:14:22:15:14:95:8e:86:a2:9a:c7:f9:aa:ce:49:
50:73:6b:1c:63:7b:8d:88:0b:b9:08:eb:40:6e:e8:
27:78:45:fd:b0:e6:74:42:97:ad:f1:45:c0:95:ce:
e6:07:cd:73:37:51:b9:75:34:1c:89:45:4e:da:17:
6c:e6:a6:db:a4:9f:26:f2:a9:c3:fe:09:19:f8:f9:
a7:71:5c:8e:85:3a:ab:0f:b9:fa:0a:d4:aa:bb:c7:
d9:d7:a9:c9:e6:aa:8a:6e:5d:51:29:35:68:08:af:
eb:3d:f4:31:02:7d:57:bf:4c:22:65:84:f5:a7:55:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:93:A3:A5:A1:22:42:A4:03:A1:86:BA:05:43:5F:FB:15:96:21
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:f1:91:10:9c:a7:c9:56:79:b5:d5:fe:c6:52:42:98:f5:
01:8b:00:a2:46:3f:29:83:2c:09:b5:2b:83:0b:40:1c:04:64:
c6:b5:a0:50:08:89:23:a2:1d:f9:7a:eb:66:2f:a7:a4:e9:32:
ee:9c:3a:3c:9b:5d:a3:88:bb:65:d3:22:05:f0:91:9b:e4:d9:
71:aa:b4:a8:2b:47:43:66:6b:2c:86:90:b8:37:f6:7b:6c:7f:
cf:91:32:8a:51:86:6f:51:52:e8:89:c5:f8:e2:03:30:48:b0:
2d:dd:ad:01:47:f2:28:79:84:76:08:97:ac:84:f4:aa:b6:99:
b0:d4:01:20:b2:6b:6f:65:dc:12:97:8e:4d:fe:ea:76:48:b7:
42:77:1a:50:02:ce:81:4c:d3:cb:f3:26:9f:0d:b2:5f:e3:12:
74:97:de:77:4d:d5:84:94:26:33:bf:5e:8c:b3:1d:3e:b6:98:
3f:58:63:e1:c8:e8:65:17:73:87:d7:6b:e6:66:a4:8d:1f:82:
40:36:b6:8f:55:e5:0c:79:01:97:3b:68:1d:54:0b:1c:91:c0:
46:a5:04:71:74:8e:79:fb:d5:2f:51:db:a6:07:6f:55:f6:38:
be:14:69:51:2b:c0:aa:0e:7c:ff:ca:d7:0c:5c:f5:50:77:30:
d6:86:34:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tRIpbdBh7xvvpoMLa33pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk
MDlkYzgwHhcNMjUxMDE5MjMwMTQzWhcNMjUxMDIwMjMwMTQzWjAzMTEwLwYDVQQD
EygwY2NmOTNhM2E1YTEyMjQyYTQwM2ExODZiYTA1NDM1ZmZiMTU5NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw57vaIhrJ9wPYOWeqLorW+s0Zgy
rcokHMVB7N1p+STzUnahFEwPBuU4KVUDALUKoUebPA4L2qZRu2ybWupUKdNBR5Eq
mT/93UHzJ+QRM6Uej42M3oOAaJL5Pyg2JCWEgqi72AmiP/pErX1Imj5NzXYWhd9T
PVchEItrmZdq2YtmbXzi2SVXFCIVFJWOhqKax/mqzklQc2scY3uNiAu5COtAbugn
eEX9sOZ0Qpet8UXAlc7mB81zN1G5dTQciUVO2hds5qbbpJ8m8qnD/gkZ+PmncVyO
hTqrD7n6CtSqu8fZ16nJ5qqKbl1RKTVoCK/rPfQxAn1Xv0wiZYT1p1Xm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzPk6OloSJCpAOhhroFQ1/7FZYhMB8GA1UdIwQY
MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt
OTFhMzk0Njg0NjQ0LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0
LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1vxkRCc
p8lWebXV/sZSQpj1AYsAokY/KYMsCbUrgwtAHARkxrWgUAiJI6Id+XrrZi+npOky
7pw6PJtdo4i7ZdMiBfCRm+TZcaq0qCtHQ2ZrLIaQuDf2e2x/z5EyilGGb1FS6InF
+OIDMEiwLd2tAUfyKHmEdgiXrIT0qraZsNQBILJrb2XcEpeOTf7qdki3QncaUALO
gUzTy/Mmnw2yX+MSdJfed03VhJQmM79ejLMdPraYP1hj4cjoZRdzh9dr5makjR+C
QDa2j1XlDHkBlztoHVQLHJHARqUEcXSOefvVL1HbpgdvVfY4vhRpUSvAqg58/8rX
DFz1UHcw1oY0vg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:05 2025 by rpki-client