Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: wFNaqNHbISTO7e7QpuNFw/4ppYoqpyxWpKowpuvbHOw=
Subject key identifier: 22:40:CD:39:42:AA:87:87:1C:C3:6D:19:41:64:CA:23:0D:11:6A:AD
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 0199FD345AFE54F83A3BFCE7D179AB653736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 0F8F
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: 4Uolkm8FEvN5cl+GuikmzsIi+RYbSVs78X79wzW7XWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5a:fe:54:f8:3a:3b:fc:e7:d1:79:ab:65:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=2240cd3942aa87871cc36d194164ca230d116aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:e6:33:08:cd:03:68:2e:cb:ca:ad:0f:71:
3a:ca:da:12:24:e0:c1:41:b0:5d:b1:16:47:99:90:
eb:b4:c7:5a:b9:b8:59:f0:ea:d4:bc:a6:2c:73:0d:
69:20:8a:bd:e5:11:4f:91:e7:a6:0e:eb:c1:c1:07:
b0:09:6d:7a:76:0a:f4:03:9f:7f:29:b5:88:ac:7e:
e4:fa:a7:71:c1:60:24:b4:ca:4e:a2:85:7e:98:13:
e4:9a:a1:cb:0a:43:7e:4c:f1:0d:49:30:bd:87:d5:
6d:7f:5c:30:b3:85:d0:9d:e0:e7:7b:11:15:33:63:
f0:e5:f9:a9:0d:7f:3d:f2:45:d6:14:9f:c9:c6:ff:
37:e2:7d:6e:86:2c:72:d2:48:cd:e1:3f:3b:85:fe:
76:af:13:ce:24:18:38:b4:b8:52:d3:7a:2e:13:49:
78:b9:b0:45:9a:81:08:c4:92:8c:b8:20:c1:38:4f:
37:2b:19:9a:df:0c:8a:75:f5:c4:99:f7:ee:af:5d:
1e:66:cb:22:1c:ba:9d:b9:06:99:80:de:a9:89:7b:
f1:01:39:ed:41:12:b5:ae:0b:5e:14:10:80:a4:6b:
25:34:e7:e0:e7:f1:0e:f2:de:67:70:1f:9d:09:86:
6f:77:b6:b0:17:d3:91:3e:2d:5f:a7:74:79:db:24:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:CD:39:42:AA:87:87:1C:C3:6D:19:41:64:CA:23:0D:11:6A:AD
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:c4:47:0f:62:ab:10:5c:38:92:05:66:6b:d2:7a:50:ec:
13:4e:25:50:d3:7f:b2:cb:5a:49:b8:62:24:45:c7:b8:d9:52:
d6:55:db:65:76:03:ab:15:ac:2f:1a:b1:42:02:a1:02:d6:3e:
28:37:b3:49:23:ab:79:f2:2e:4f:eb:b6:7d:ab:cf:88:93:58:
ed:b1:61:90:6b:c5:9b:ee:97:b1:e4:cc:02:62:40:61:de:a9:
3f:8d:79:98:7c:78:6e:be:eb:5d:88:dc:04:a1:9f:04:0d:f4:
f9:17:05:5e:4c:f8:4b:81:7f:ba:4f:0f:63:3f:c7:f1:cb:32:
81:6e:ae:bf:dc:28:10:ea:41:2b:6a:7c:14:c6:ba:fc:2e:4d:
73:a7:ec:bf:38:27:09:6c:83:82:b8:b6:ce:71:40:a6:da:22:
ad:0e:7a:04:25:6f:39:56:fd:02:35:06:a7:d9:e2:3d:c9:ad:
df:c8:b9:d4:9b:c9:a2:ee:40:6a:65:f1:55:16:54:c1:aa:63:
ea:c0:8f:26:80:e0:8a:09:16:b6:a1:92:6a:1e:e4:16:fe:49:
9c:a7:04:50:35:c6:7e:c2:ce:e7:8f:bc:3f:74:c1:c2:c2:9c:
0e:80:4e:a5:b8:32:68:75:29:a7:ca:eb:7c:3c:8b:5a:04:59:
0a:9f:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:48 2025 by rpki-client