Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: XwFMy8LUci/ZHpjpiTHEPIvcS06OC5GfpMnWSNHKIzA=
Subject key identifier: 09:A6:05:8C:3F:8C:8E:D1:6E:F0:14:CA:AF:1A:CD:9A:3E:E4:4F:AB
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 0198D7A95DEE309AC9D9D31C8E301300538C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 0EF7
Signing time: Sat 23 Aug 2025 16:00:57 +0000
Manifest this update: Sat 23 Aug 2025 16:00:57 +0000
Manifest next update: Sun 24 Aug 2025 16:00:57 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: LUdhihPMsgo1AkQfkTBgTDknIqJZHHE6tsS90CKFr6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:5d:ee:30:9a:c9:d9:d3:1c:8e:30:13:00:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Aug 23 16:00:57 2025 GMT
Not After : Aug 24 16:00:57 2025 GMT
Subject: CN=09a6058c3f8c8ed16ef014caaf1acd9a3ee44fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:56:8d:0f:7e:7b:c9:9c:dc:01:0c:03:a5:
13:43:71:ce:c9:fa:4f:9f:6c:93:6b:56:56:ad:a5:
93:75:dd:b4:a6:e0:cb:34:ec:88:ea:64:40:7c:6a:
24:2f:e0:27:45:ea:d1:4e:b1:6f:f2:31:06:90:28:
57:3d:f4:36:8b:53:86:36:31:59:1c:0b:39:c4:46:
ee:c3:de:0b:1d:f8:7c:49:9f:8a:47:e9:c1:13:a2:
02:62:e8:8a:9c:88:08:fb:38:be:84:cc:de:f5:e6:
95:5c:86:be:ab:30:ff:88:d1:5e:4e:4b:ca:5c:4a:
4f:28:f8:57:00:53:5a:a0:7a:65:09:6c:1e:27:fb:
9a:c9:af:90:ad:a9:84:5f:04:02:da:34:29:c1:b0:
b6:d9:6d:29:4d:31:f4:a5:52:a6:90:08:b2:df:e1:
9a:9f:e8:e1:f3:97:c4:0c:fe:09:b8:f5:f7:d7:cb:
a5:a3:86:fc:2e:69:87:e7:02:57:47:39:62:e1:d8:
f8:6e:b0:e8:14:83:90:1f:a4:d4:72:bf:64:1c:59:
2d:42:4b:1d:fa:84:e1:b3:9e:1c:43:41:ca:12:7c:
2f:88:79:25:23:42:a3:3f:3f:29:f7:5e:d8:bc:ac:
df:b0:16:6b:bf:cc:3d:79:32:8e:6f:40:a7:04:38:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:05:8C:3F:8C:8E:D1:6E:F0:14:CA:AF:1A:CD:9A:3E:E4:4F:AB
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:50:36:95:70:3d:aa:74:57:b3:2a:7f:25:ae:8e:ef:82:ef:
8a:52:ed:c9:a7:ac:aa:30:86:2a:c4:1a:f2:9e:eb:3d:12:92:
a4:5e:23:d0:03:b4:3c:e2:c2:42:27:77:19:0b:2a:3e:0d:c5:
39:dd:3c:9b:da:38:b1:41:5e:0c:56:e7:89:40:d6:a9:28:c0:
05:2d:4d:2b:19:5c:c5:d7:a0:b4:6b:3d:ce:ea:2b:12:b7:74:
b5:0c:90:5c:6b:8c:c0:62:56:95:f4:e9:90:f5:4d:7c:50:49:
b4:e0:83:86:e0:bd:93:9f:9b:ce:56:be:85:fc:ea:23:e7:6f:
f5:dc:12:06:1c:14:ec:51:39:37:28:c5:e6:40:af:cc:b6:5b:
98:11:b6:e5:a9:87:b1:8d:e3:32:a2:15:a2:2c:43:6e:4e:80:
40:d7:b1:ef:6e:4b:43:2d:e9:d4:ec:01:76:36:0a:15:b9:d2:
bd:d6:f8:35:60:c4:ba:83:88:b1:32:b7:6b:2f:c4:ac:e5:7e:
69:7d:54:47:d7:dd:4e:c4:d0:dc:51:86:4c:26:17:56:6b:f8:
d1:77:4b:3b:c9:fb:86:b5:36:f0:fb:76:ec:0d:06:f6:53:41:
21:0c:b6:1f:21:28:fc:8d:30:b1:d9:82:be:d5:9d:30:c2:10:
1f:7c:65:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqV3uMJrJ2dMcjjATAFOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjY1Y2Y2ZmE1ZTFmY2FlOGNmODRjOTcwMWUzOGJkZmI2
M2FhYjMwHhcNMjUwODIzMTYwMDU3WhcNMjUwODI0MTYwMDU3WjAzMTEwLwYDVQQD
EygwOWE2MDU4YzNmOGM4ZWQxNmVmMDE0Y2FhZjFhY2Q5YTNlZTQ0ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouVWjQ9+e8mc3AEMA6UTQ3HOyfpP
n2yTa1ZWraWTdd20puDLNOyI6mRAfGokL+AnRerRTrFv8jEGkChXPfQ2i1OGNjFZ
HAs5xEbuw94LHfh8SZ+KR+nBE6ICYuiKnIgI+zi+hMze9eaVXIa+qzD/iNFeTkvK
XEpPKPhXAFNaoHplCWweJ/uaya+QramEXwQC2jQpwbC22W0pTTH0pVKmkAiy3+Ga
n+jh85fEDP4JuPX318ulo4b8LmmH5wJXRzli4dj4brDoFIOQH6TUcr9kHFktQksd
+oThs54cQ0HKEnwviHklI0KjPz8p917YvKzfsBZrv8w9eTKOb0CnBDh4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmmBYw/jI7RbvAUyq8azZo+5E+rMB8GA1UdIwQY
MBaAFBC2XPb6Xh/K6M+EyXAeOL37Y6qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDIt
YTIzODU1ODcyYjg2LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDItYTIzODU1ODcyYjg2
LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlA2lXA9
qnRXsyp/Ja6O74LvilLtyaesqjCGKsQa8p7rPRKSpF4j0AO0POLCQid3GQsqPg3F
Od08m9o4sUFeDFbniUDWqSjABS1NKxlcxdegtGs9zuorErd0tQyQXGuMwGJWlfTp
kPVNfFBJtOCDhuC9k5+bzla+hfzqI+dv9dwSBhwU7FE5NyjF5kCvzLZbmBG25amH
sY3jMqIVoixDbk6AQNex725LQy3p1OwBdjYKFbnSvdb4NWDEuoOIsTK3ay/ErOV+
aX1UR9fdTsTQ3FGGTCYXVmv40XdLO8n7hrU28Pt27A0G9lNBIQy2HyEo/I0wsdmC
vtWdMMIQH3xldA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:46 2025 by rpki-client