Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: s7NRlEzcGOPVHjVUz/Qpi6byJcFIagIMqWm0BPTWzPI=
Subject key identifier: 67:72:E3:FE:07:5E:43:53:F0:89:65:6D:01:04:BF:77:F8:AD:34:3C
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 0199FBEBCC36AF4CABE370BDEED34F40F8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 04F1
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: 9zlqgnWwkXvL3IN7tC7/YBXPWzD9q0/stExRQcxAebA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cc:36:af:4c:ab:e3:70:bd:ee:d3:4f:40:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=6772e3fe075e4353f089656d0104bf77f8ad343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:ce:2e:f9:94:6d:4d:e6:5a:96:5b:0e:29:
5d:44:f4:98:f1:06:6d:b6:3d:d0:b9:a1:0a:13:da:
b0:35:5b:13:3b:24:8b:a5:7b:48:27:34:90:f0:c2:
f3:0d:dc:a3:bd:2a:e9:56:ff:0e:b1:4a:0f:10:60:
05:0c:1e:ad:2c:09:66:e1:8c:13:2a:0b:cd:2d:90:
97:b0:35:2c:96:89:7b:56:fd:a6:86:f4:9f:84:f2:
7b:89:a6:e0:a8:75:d4:48:f7:2b:30:6c:17:95:bb:
f4:9b:99:96:23:cc:ba:9e:ca:ae:3d:b5:9b:ba:78:
b8:01:a7:66:4d:52:f8:75:b5:a9:58:1d:99:4a:48:
07:5d:5c:47:c8:bb:ba:99:19:94:5a:d6:c3:3c:6a:
2e:ae:72:e6:45:01:01:20:72:e5:d5:1b:fb:60:ef:
bd:c3:81:c0:d7:4f:ad:33:05:82:06:98:0f:0e:67:
bb:a1:ce:a3:54:b1:12:a5:d0:cb:f8:fb:e8:95:1e:
66:38:72:38:75:e2:42:8a:b0:0b:8f:25:4f:08:d2:
41:71:46:f3:f3:15:42:c5:01:2f:af:e0:fa:8d:82:
6d:57:99:e5:55:01:ca:fc:af:a5:a9:b2:8c:d3:ae:
c8:ce:bb:11:25:2c:b4:c4:75:6b:da:dc:e4:c9:94:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:E3:FE:07:5E:43:53:F0:89:65:6D:01:04:BF:77:F8:AD:34:3C
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6f:55:ba:d0:ae:00:d8:89:84:fb:08:6b:64:73:9d:73:a8:
7c:94:a1:4b:bb:35:d0:08:fa:41:39:a4:2f:31:f5:21:43:33:
d7:b6:65:d9:f6:e3:9a:17:5f:0e:41:cf:99:5c:f3:52:9b:06:
69:b6:5f:c9:ed:ef:4c:da:47:24:91:b3:49:10:97:0b:32:b5:
65:8d:e8:25:77:72:e6:94:1c:9d:66:c2:d8:29:05:11:3f:d7:
cb:b1:f6:a9:60:5c:3d:0d:44:18:de:35:b3:bb:e3:23:24:0d:
2b:ec:04:80:80:ed:08:5a:ae:19:3a:8d:9b:89:bc:dd:13:d8:
22:e1:7f:b5:7f:aa:14:fd:2c:48:13:bf:c6:69:0c:35:dc:90:
df:fd:03:58:2a:16:a5:8a:6e:5e:2b:d4:78:da:3c:ba:2d:bf:
63:65:11:de:76:42:a9:cf:50:c3:85:cf:a1:d5:9e:9f:7b:64:
73:7e:ef:95:61:e4:44:67:8e:29:3f:55:e3:48:e0:60:54:c1:
e2:a3:c1:84:35:0b:79:c7:79:ce:7b:1a:2b:53:cb:c0:d5:d3:
7e:9f:ac:c8:8f:5b:70:ac:6f:00:a5:2c:36:f0:2f:f1:8d:f8:
ab:ce:05:5c:d9:22:dc:f3:c3:0c:b9:71:5c:06:a8:8b:f8:7a:
50:fe:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:28 2025 by rpki-client