Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: nWwbJkDREKdU3h+eHUGTdiMu22akxAQCy/H7h7ebje0=
Subject key identifier: FE:5F:6D:D6:52:98:95:8F:95:C2:48:D7:C5:2A:89:3B:5A:44:07:22
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 0199FEB48478E51AE209A9752B90D35E08F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 017C
Signing time: Sun 19 Oct 2025 23:01:07 +0000
Manifest this update: Sun 19 Oct 2025 23:01:07 +0000
Manifest next update: Mon 20 Oct 2025 23:01:07 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: KFg4Q6VXr9IUJH/bXI12WdL8ZQl9odFFmNRn4qsfN+w=)
2: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (hash: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=)
3: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (hash: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:84:78:e5:1a:e2:09:a9:75:2b:90:d3:5e:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Oct 19 23:01:07 2025 GMT
Not After : Oct 20 23:01:07 2025 GMT
Subject: CN=fe5f6dd65298958f95c248d7c52a893b5a440722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:ad:ac:d7:25:96:dd:fc:54:e0:62:3b:af:
82:ce:b0:c7:ff:c0:22:31:25:50:90:0d:cb:5d:dd:
2a:f2:de:06:e2:77:e0:dd:d0:a9:cb:9d:ec:ba:95:
e6:bd:d3:c5:56:a1:0e:b6:24:fc:7f:fc:42:c0:85:
a1:8d:bb:38:12:45:74:a4:ea:5a:78:7e:10:a2:7c:
95:4e:bd:a9:18:55:c3:e5:0e:3c:b2:27:7e:60:ea:
1c:e3:59:95:19:3c:b2:0d:30:02:a9:9e:c7:62:3e:
fd:c5:f6:bd:ea:91:58:51:5f:63:6b:eb:fe:2d:a8:
9e:83:f0:39:b1:a6:1c:e3:5d:6b:2a:a3:04:01:f2:
20:f0:e7:0d:89:61:d2:11:53:df:8e:4e:8c:12:f6:
75:5b:d6:98:29:6c:60:dc:6c:de:4f:d8:b3:eb:26:
6b:2e:de:9e:70:58:7c:bb:5d:e0:85:59:09:e8:49:
5a:f6:50:3b:a4:06:0b:56:ba:59:bf:ec:ac:85:bb:
e1:ba:5b:01:df:d3:f8:1f:67:47:b3:f7:01:9e:e2:
bd:af:0f:af:42:3e:3a:d0:42:0e:0e:d5:3a:99:e8:
5c:60:75:d6:20:d6:15:53:ca:40:5a:96:e8:8a:e2:
c9:f0:93:52:81:9f:63:1d:76:15:2f:e1:77:d6:ad:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5F:6D:D6:52:98:95:8F:95:C2:48:D7:C5:2A:89:3B:5A:44:07:22
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:88:87:7b:c9:be:4a:c5:01:18:0b:3d:cc:5f:55:2f:4b:
5b:c7:a5:d2:99:2a:c7:d6:25:98:15:3f:02:10:7f:8b:e8:96:
59:89:1b:db:68:5a:57:53:3e:0e:11:18:58:e7:ab:c5:61:84:
1f:dc:83:61:7e:57:77:15:ed:d6:70:d1:c3:a3:77:a0:db:82:
08:5a:e0:01:f8:3a:11:ef:89:16:90:3c:c5:31:50:73:a3:27:
9d:64:04:31:1f:7e:04:df:7e:42:a5:3f:c8:58:41:0a:88:1d:
64:8d:c7:a0:d6:2b:25:07:26:6c:7c:a8:79:fa:ee:11:c2:ad:
b4:81:67:cb:49:7d:6a:d6:c9:ce:c2:c5:0e:b9:69:fc:e1:38:
0f:ce:cb:17:74:dc:e7:33:c4:33:d7:2b:fa:ab:fa:a1:e3:d7:
bd:df:97:54:c7:60:3b:c5:08:82:c4:ba:85:37:fe:f5:b1:b4:
54:9e:32:5d:9b:dc:6c:d0:9f:b5:ba:4b:8a:80:d5:11:0b:7b:
db:b1:46:2c:50:58:0a:0a:a8:1e:38:f5:2a:de:34:aa:64:3c:
27:7b:89:e0:8c:cb:7c:bd:d5:df:22:16:94:c5:1b:00:86:38:
6a:ff:b1:b0:74:3d:17:98:8c:0a:19:8c:1d:38:c5:93:de:f0:
1e:0e:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:13 2025 by rpki-client