Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: 7crrfdqjMq0f3U9D0ikPhSWTsb+bnIhymLGPL812q9M=
Subject key identifier: 34:DA:73:BC:2A:A9:C2:C3:A2:BB:C4:36:C9:DC:17:B5:18:37:7F:60
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 0198D5BBA3D8624C603D3C8A3DB751CA8AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: D7
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: sepHYahsQ5zNQGy8aruNqTD531+GS/54NWJgrdTkXIE=)
2: nHxs1XMfnqzh-Z8aeIMb_NiElkE.roa (hash: 8Qy8fF7R1NwaP6gn0wt2uKO1stfFsvaIv7LK8MDpXo4=)
3: uPdsoPPsIplTvcCyAbcJMwYg9pQ.roa (hash: csIN1YT5O+6UepoAW4L5bp8f0Qp/luUK9hGbpbp+j+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a3:d8:62:4c:60:3d:3c:8a:3d:b7:51:ca:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=34da73bc2aa9c2c3a2bbc436c9dc17b518377f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:78:bc:70:40:15:86:19:7f:7c:1d:99:94:
7e:e8:4f:26:9a:2c:ce:38:b1:7b:ec:d2:e8:f8:ac:
ae:9e:e4:68:1a:13:87:90:80:7f:91:a3:f2:e1:15:
cc:d1:77:45:d7:48:f9:0a:bd:34:df:5a:0a:b1:c2:
6c:4f:37:f2:54:83:fd:b9:f6:73:eb:30:0f:9c:f8:
d6:4e:9c:39:56:df:88:b2:40:c5:50:0f:94:90:85:
74:d0:cf:2a:98:bf:81:93:d6:f9:bb:e2:70:36:72:
da:5e:d2:65:4f:9e:54:a4:97:25:82:80:10:99:82:
95:84:bd:dd:9a:e5:3e:31:63:b4:c3:13:db:3b:64:
74:27:9d:a2:0d:7b:70:1d:38:32:00:cb:d0:5f:ea:
00:be:a0:bc:f6:12:a3:e9:02:a8:b6:28:bd:3a:82:
b8:c2:01:ae:5a:51:4a:f3:f9:4a:61:99:32:00:b4:
02:88:52:a4:5f:25:66:40:84:b8:2b:b6:65:2c:01:
73:d1:7e:d5:95:57:93:6b:01:15:7f:02:32:46:58:
4a:16:4c:f9:e4:da:35:d1:19:87:71:e5:c7:ab:26:
b9:bd:d3:a1:6d:b9:71:c2:5a:00:ce:79:3c:64:fc:
04:2d:ae:7a:48:8b:ca:03:ad:b7:63:b7:3c:f7:28:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:73:BC:2A:A9:C2:C3:A2:BB:C4:36:C9:DC:17:B5:18:37:7F:60
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b1:55:a4:4f:14:de:81:b1:66:8b:c9:fb:74:99:1b:a1:da:
29:46:33:be:7b:5a:23:23:cb:ad:a2:c7:9f:4a:5a:bc:2a:aa:
b5:2b:eb:91:f2:de:c9:0f:1b:d0:9c:bd:2b:02:50:6e:62:1a:
07:a7:d0:1d:93:33:49:ed:ba:6c:08:19:f7:a3:74:cd:b4:ac:
ec:cb:6f:75:a4:e3:d4:10:7f:04:66:d4:e9:de:1d:19:63:90:
47:c2:39:64:f7:ed:f3:ce:80:65:8b:19:b3:0a:3b:03:d9:70:
d0:a7:3f:ee:28:c7:04:e4:0b:a4:42:83:c0:8e:3f:94:dd:0a:
a3:6c:ad:e7:5b:f1:75:6e:f5:c7:68:a2:72:9b:c0:be:1e:55:
ef:1a:a5:16:ee:5b:4f:d7:0b:83:49:73:c3:08:b4:4f:7c:fc:
dd:32:45:f7:f0:77:37:90:7d:14:0d:6c:99:f0:b0:21:50:95:
37:b2:48:ed:fe:6e:0b:61:f7:35:00:40:19:73:ec:97:60:ff:
af:3a:4f:fd:9b:f5:3b:65:8b:db:04:cc:c4:aa:7b:d5:f3:0d:
e2:96:39:d2:0a:ba:66:a0:0e:61:d6:5f:17:c1:5d:a7:95:44:
61:b7:9f:f2:42:16:79:fd:8b:34:4b:90:f0:1c:3b:9b:5c:aa:
16:da:f9:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6PYYkxgPTyKPbdRyorJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EygzNGRhNzNiYzJhYTljMmMzYTJiYmM0MzZjOWRjMTdiNTE4Mzc3ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUp4vHBAFYYZf3wdmZR+6E8mmizO
OLF77NLo+KyunuRoGhOHkIB/kaPy4RXM0XdF10j5Cr0031oKscJsTzfyVIP9ufZz
6zAPnPjWTpw5Vt+IskDFUA+UkIV00M8qmL+Bk9b5u+JwNnLaXtJlT55UpJclgoAQ
mYKVhL3dmuU+MWO0wxPbO2R0J52iDXtwHTgyAMvQX+oAvqC89hKj6QKotii9OoK4
wgGuWlFK8/lKYZkyALQCiFKkXyVmQIS4K7ZlLAFz0X7VlVeTawEVfwIyRlhKFkz5
5No10RmHceXHqya5vdOhbblxwloAznk8ZPwELa56SIvKA623Y7c89yjy7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTac7wqqcLDorvENsncF7UYN39gMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrFVpE8U
3oGxZovJ+3SZG6HaKUYzvntaIyPLraLHn0pavCqqtSvrkfLeyQ8b0Jy9KwJQbmIa
B6fQHZMzSe26bAgZ96N0zbSs7MtvdaTj1BB/BGbU6d4dGWOQR8I5ZPft886AZYsZ
swo7A9lw0Kc/7ijHBOQLpEKDwI4/lN0Ko2yt51vxdW71x2iicpvAvh5V7xqlFu5b
T9cLg0lzwwi0T3z83TJF9/B3N5B9FA1smfCwIVCVN7JI7f5uC2H3NQBAGXPsl2D/
rzpP/Zv1O2WL2wTMxKp71fMN4pY50gq6ZqAOYdZfF8Fdp5VEYbef8kIWef2LNEuQ
8Bw7m1yqFtr5nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:48 2025 by rpki-client