Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier: 8jfqj8zhYvnUrBD/NBZcCVm65ZWGqVNWrxeFQfx/CBE=
Subject key identifier: B2:58:EF:14:4D:2E:98:0A:57:C0:FE:52:E0:73:C6:A4:FA:6C:F3:26
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial: 0199FC58BEE601ADC29DFFFC8D03FA24A0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number: 0518
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: x8g51LfznX4z1skxbApHwwav9e/7JLxzkQkO8Qoc/l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:be:e6:01:ad:c2:9d:ff:fc:8d:03:fa:24:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=b258ef144d2e980a57c0fe52e073c6a4fa6cf326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:49:7d:3a:76:e1:44:29:aa:aa:12:0f:b1:
9d:20:0b:60:3b:57:be:f0:7d:73:c4:c8:23:98:53:
cd:12:05:09:eb:b5:e5:45:6b:00:e2:72:c4:67:dc:
cb:09:c0:e3:fd:5e:25:28:cb:ca:69:27:c5:73:46:
60:ec:9d:c8:af:ed:0b:9f:c7:75:8c:e9:73:72:ad:
e6:96:ad:a0:b1:01:ce:b0:e9:c1:2b:7b:5a:8e:b0:
f6:9a:78:a1:ae:85:67:41:0e:49:75:00:79:03:e8:
58:ae:ac:57:4b:cb:3c:21:57:c9:01:ba:46:33:a0:
c2:71:ed:be:18:5c:fa:53:63:12:ae:bd:7c:de:63:
65:b3:a5:98:16:41:92:f3:9a:7b:0a:75:7d:a3:aa:
ab:f8:91:02:f2:70:08:31:2a:50:cf:e8:e1:10:89:
85:9b:82:d2:97:ca:a0:7a:4b:21:38:46:14:f9:f3:
b1:2c:8f:4a:21:b5:a8:c9:bc:d3:29:ed:43:dd:4f:
60:ce:61:76:cc:ce:15:6d:d4:e1:f7:a5:45:22:d4:
1c:e3:dd:6c:31:57:1a:dc:4d:5a:d9:8b:40:f6:a0:
85:2f:e9:60:5e:e1:d1:58:7f:41:16:62:1f:76:91:
ef:74:a5:ad:fe:33:8d:2b:ba:54:cb:fa:23:3e:b5:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:EF:14:4D:2E:98:0A:57:C0:FE:52:E0:73:C6:A4:FA:6C:F3:26
X509v3 Authority Key Identifier:
keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ce:5d:cf:bd:fe:8f:50:76:fb:7c:3b:17:78:74:73:6b:42:
d0:82:4d:18:1a:c0:60:a3:d1:cd:81:95:da:b7:a4:28:1d:1c:
42:71:3d:92:1b:c5:ae:c5:06:b1:11:fd:70:81:b0:48:7f:cc:
cb:1c:a7:8d:d1:c7:2e:10:5c:5a:58:9d:94:a8:dc:68:cf:13:
f3:7a:34:d9:b7:39:bf:2a:1d:37:e5:4c:98:d0:a6:49:7b:ae:
08:f8:f4:ed:80:8f:bc:bb:bc:7c:a5:f7:de:6c:df:f6:15:5e:
bb:55:7b:8e:b2:ba:af:1a:24:89:ce:89:8d:65:fc:63:68:82:
e4:21:31:f5:e0:09:e9:7e:b0:ba:34:8b:3c:3d:3c:cd:2c:7f:
0b:2d:d7:21:68:df:0b:32:cc:f8:cd:63:59:e9:15:1b:61:71:
e1:4d:f4:8a:7e:dd:65:82:0d:9f:0b:fa:2a:4a:56:5b:b3:c1:
21:7e:cd:d1:58:1b:75:d0:cb:a4:48:5a:5e:6f:dd:42:1e:53:
a8:ce:05:6a:81:d0:0a:5b:4c:76:6a:97:82:87:e5:39:d1:1f:
83:58:55:fe:71:24:a0:d4:44:4d:46:dc:2f:b3:ac:ff:2b:54:
4f:fb:cf:cc:48:b4:c4:8f:7b:c2:db:73:e4:38:9c:a6:ea:bf:
c9:8b:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WL7mAa3Cnf/8jQP6JKDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy
YWVhMzAwHhcNMjUxMDE5MTIwMTM4WhcNMjUxMDIwMTIwMTM4WjAzMTEwLwYDVQQD
EyhiMjU4ZWYxNDRkMmU5ODBhNTdjMGZlNTJlMDczYzZhNGZhNmNmMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2RJfTp24UQpqqoSD7GdIAtgO1e+
8H1zxMgjmFPNEgUJ67XlRWsA4nLEZ9zLCcDj/V4lKMvKaSfFc0Zg7J3Ir+0Ln8d1
jOlzcq3mlq2gsQHOsOnBK3tajrD2mnihroVnQQ5JdQB5A+hYrqxXS8s8IVfJAbpG
M6DCce2+GFz6U2MSrr183mNls6WYFkGS85p7CnV9o6qr+JEC8nAIMSpQz+jhEImF
m4LSl8qgekshOEYU+fOxLI9KIbWoybzTKe1D3U9gzmF2zM4VbdTh96VFItQc491s
MVca3E1a2YtA9qCFL+lgXuHRWH9BFmIfdpHvdKWt/jONK7pUy/ojPrWQ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJY7xRNLpgKV8D+UuBzxqT6bPMmMB8GA1UdIwQY
MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt
MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx
LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzM5dz73+
j1B2+3w7F3h0c2tC0IJNGBrAYKPRzYGV2rekKB0cQnE9khvFrsUGsRH9cIGwSH/M
yxynjdHHLhBcWlidlKjcaM8T83o02bc5vyodN+VMmNCmSXuuCPj07YCPvLu8fKX3
3mzf9hVeu1V7jrK6rxokic6JjWX8Y2iC5CEx9eAJ6X6wujSLPD08zSx/Cy3XIWjf
CzLM+M1jWekVG2Fx4U30in7dZYINnwv6KkpWW7PBIX7N0VgbddDLpEhaXm/dQh5T
qM4FaoHQCltMdmqXgoflOdEfg1hV/nEkoNRETUbcL7Os/ytUT/vPzEi0xI97wttz
5Dicpuq/yYvioQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:17 2025 by rpki-client