Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: mfGJykax4bARrDxbXthl1gIV/npKyBxNZJ8nR+cBszk=
Subject key identifier: F5:8B:2F:B1:AF:88:62:20:EB:8E:15:50:38:89:2A:BA:44:CA:61:53
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 0199FEEBEC6C474343A1AB17FB12CB4AB194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 06E2
Signing time: Mon 20 Oct 2025 00:01:38 +0000
Manifest this update: Mon 20 Oct 2025 00:01:38 +0000
Manifest next update: Tue 21 Oct 2025 00:01:38 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: o6pzDfxGbZTCUebhnFAjcMGCJ8Bz1fyb2/wzLuTEsDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ec:6c:47:43:43:a1:ab:17:fb:12:cb:4a:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Oct 20 00:01:38 2025 GMT
Not After : Oct 21 00:01:38 2025 GMT
Subject: CN=f58b2fb1af886220eb8e155038892aba44ca6153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:6f:8b:60:4d:dd:04:cc:e7:ee:88:f8:80:
60:4a:56:b0:fb:fe:bf:31:f0:50:61:77:95:bb:13:
c9:44:a2:d6:e3:48:fe:bb:0c:95:a7:b1:6f:50:9a:
19:a3:e6:b9:b6:fc:03:35:b1:8c:47:0a:0f:27:f3:
20:4b:da:1d:46:cb:d7:77:03:c1:55:c6:aa:bf:86:
74:43:10:ad:c9:94:8b:00:39:bf:19:2d:fd:fa:89:
9b:fa:db:db:8f:de:d3:f4:1d:6f:01:ce:47:f4:5b:
ed:e6:24:0f:fc:71:d3:8c:7d:71:2a:0a:c6:31:37:
b7:38:d4:90:d5:4e:81:84:7a:d1:d8:af:df:a0:25:
e4:ad:5a:aa:95:e0:7e:b8:cd:d6:26:80:fb:5a:d8:
96:0a:d3:51:2f:4c:51:b4:38:92:63:92:fe:5f:f8:
1d:bf:0a:be:af:7f:78:7b:57:76:15:0b:35:02:1d:
65:8c:cd:df:b6:3c:0e:45:67:b2:5a:04:89:a2:73:
c8:e1:36:07:d3:57:f5:1f:2a:3d:5d:cc:99:24:ce:
49:3d:fe:e7:a4:ca:37:d7:6f:7b:6f:dd:cb:d8:4f:
07:34:2e:91:d8:89:9c:11:fb:c7:8a:c3:64:94:fb:
c8:07:42:3e:fd:7d:98:65:01:13:6f:70:b9:80:97:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:2F:B1:AF:88:62:20:EB:8E:15:50:38:89:2A:BA:44:CA:61:53
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:46:c9:6c:76:a0:05:fc:10:92:d0:60:9c:53:2e:96:a6:
2a:50:67:d3:1d:3b:60:cd:17:fe:8e:7c:11:30:cb:10:25:33:
ff:76:84:8b:9c:ad:26:ae:56:93:f8:f4:67:0f:b4:1e:6a:b8:
c0:f9:54:66:a6:84:d1:5e:63:85:24:3b:05:f3:34:67:61:d4:
ef:78:24:74:9f:c8:47:2d:c9:4e:b2:56:a3:2c:f1:4a:e8:e8:
81:16:69:0c:68:3c:09:cd:81:bb:14:09:dc:a9:3e:96:3c:a0:
78:da:74:ae:ba:e8:23:f3:af:6d:d0:30:24:28:f8:2b:88:3a:
7b:d0:9a:a0:52:ee:48:7e:8d:3c:5f:cd:09:9f:c4:25:20:a3:
9f:b5:98:df:8a:29:d6:69:5d:07:74:6a:04:61:21:d7:f7:7d:
52:a5:2a:cf:e1:ea:f9:ea:64:f1:35:bc:d2:ce:d9:7c:53:2c:
c9:ec:76:ef:44:6f:a8:c7:b1:9e:9a:34:ce:32:36:62:73:33:
2e:87:f0:56:f2:7e:9e:53:07:46:ee:ed:97:1d:da:91:30:9d:
15:e5:60:ab:13:d5:1f:2a:95:18:7f:fb:a6:7a:7c:96:4d:36:
36:bb:58:e7:d4:89:27:15:70:c4:84:15:24:89:3b:aa:e9:b6:
67:83:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:01 2025 by rpki-client