Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: qSgRR+cC1Ub4cEzDmxEmLzoXQAbsjtbNVcW9Z49u+dQ=
Subject key identifier: BE:9D:5D:62:FE:57:41:75:57:4D:C7:CA:D5:9A:D5:FD:DB:A6:8C:CA
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 0198D660E25F5FE74644DACE17D416DBD54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 0459
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: /ZevsD2OTbdvUjgdfDxyhe8G/W09zYqz/dSq4qETPFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e2:5f:5f:e7:46:44:da:ce:17:d4:16:db:d5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=be9d5d62fe574175574dc7cad59ad5fddba68cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:cb:42:48:ba:82:29:07:6c:c5:b0:d5:ea:
4a:5e:24:a8:eb:6b:09:ed:3f:d0:b4:14:fa:9b:85:
3a:d7:b8:67:48:43:28:a6:b3:4c:08:d6:23:59:12:
62:c2:ef:0c:4f:a2:4f:73:82:21:d4:f1:f3:8c:e8:
70:b0:c8:91:50:40:61:15:6c:a0:55:92:f6:aa:c0:
c1:0c:ce:ea:9c:23:05:d7:f8:ae:b1:0b:9f:15:df:
72:fc:95:ed:da:47:aa:24:a4:8a:09:36:e0:11:5a:
9c:13:dc:c6:f8:74:0e:15:c6:e7:10:a8:32:78:ef:
ea:64:a6:47:ff:74:56:e7:fa:a5:99:cc:fa:18:52:
71:7c:94:31:b7:53:2e:c4:af:a8:7a:d5:ea:7a:99:
bb:fa:2f:89:c5:28:58:e6:80:89:92:d4:ce:3f:06:
f6:0d:16:98:5c:f4:20:62:a7:66:82:28:c1:20:6d:
24:b4:b6:21:85:59:fe:d4:d2:b3:b3:18:9f:9d:3a:
1f:1d:48:08:50:fe:38:cb:76:5a:25:9b:de:ae:85:
84:21:c7:02:57:14:a2:0b:da:9c:8b:9a:d8:53:87:
6a:3d:28:f5:d7:37:fe:3c:0d:b7:78:e9:3d:42:f4:
a4:8e:ef:50:88:1e:f2:da:b9:38:1d:7d:38:08:ee:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:5D:62:FE:57:41:75:57:4D:C7:CA:D5:9A:D5:FD:DB:A6:8C:CA
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:9b:0c:9c:6c:41:4f:18:3a:f7:5c:6f:85:55:55:af:63:
2b:bd:70:4b:6f:c0:8d:6c:79:f9:8d:88:bd:ff:ee:0f:49:c6:
02:2f:d5:4e:75:94:ef:fc:5e:84:b2:69:52:c6:60:84:21:14:
f7:92:cf:db:82:94:e5:de:8d:07:c1:51:84:16:a9:8f:38:91:
b0:80:2e:cb:31:c7:57:1a:b6:f9:ef:e4:9a:ab:f0:91:e1:ba:
b1:22:d5:e0:8b:4a:a1:22:e4:75:cf:10:19:44:c3:ac:75:ba:
cf:e6:8a:05:5a:02:11:cf:75:8c:e0:27:f9:dd:01:26:8e:51:
02:6a:5c:45:7e:f2:3d:26:6f:e1:13:84:fa:53:dd:90:98:96:
ee:b9:08:85:ab:3f:c6:93:f5:de:9b:86:31:79:9d:51:e3:c8:
4a:dc:f5:13:0c:cc:86:fd:bc:60:b4:fb:26:6b:2d:d8:15:2f:
9b:c4:2e:67:d5:80:85:af:e6:27:3b:66:e6:8e:06:9e:8c:b4:
32:7c:5b:d1:9a:a2:3f:3e:37:6f:6c:1b:2f:80:2d:e9:51:85:
01:e8:6e:bd:2e:1c:a1:32:41:70:f2:70:94:3a:7a:09:b0:e7:
88:f0:d9:a9:1e:f4:2f:86:3c:30:e5:1e:43:2c:24:4e:6c:71:
37:51:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:02 2025 by rpki-client