Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: SNYvhgb1LSmF58ZU97VNfB1jFrK2UFQp1h5QYXryvyg=
Subject key identifier: BF:1E:A7:BC:F7:FE:20:31:D4:E8:F3:29:6A:1A:11:E5:23:BB:F1:1E
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 0198D73BBE8729077359CEB37FB7C2B68CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 14:01:13 +0000
Manifest this update: Sat 23 Aug 2025 14:01:13 +0000
Manifest next update: Sun 24 Aug 2025 14:01:13 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: kR3bFjQiCYLWYosWRjqgkbEWebycoxxk01NmaBQvcOQ=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:be:87:29:07:73:59:ce:b3:7f:b7:c2:b6:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Aug 23 14:01:13 2025 GMT
Not After : Aug 24 14:01:13 2025 GMT
Subject: CN=bf1ea7bcf7fe2031d4e8f3296a1a11e523bbf11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:24:9d:75:a2:bf:7a:52:56:a2:4e:12:e6:
fe:8e:e9:e4:12:63:47:a5:7c:5a:ae:14:32:0d:c7:
a7:17:d6:83:34:c3:c3:df:a2:35:85:ca:50:89:38:
b0:0e:4c:ff:34:77:6f:d1:d5:a5:aa:10:a7:93:6e:
88:0c:e8:95:d2:27:5c:0a:82:43:91:e0:f4:65:4a:
95:c4:06:a8:cc:6c:89:f3:bf:e4:c6:ed:5c:e6:f3:
f0:24:57:c3:17:be:e4:7e:0e:6d:8c:7b:a4:39:00:
c1:73:60:83:82:2b:0d:ae:28:74:a6:cf:4b:a2:c2:
51:6e:11:b0:75:92:a4:bb:10:cc:59:95:7f:09:d7:
8a:d8:49:10:1d:f0:12:de:a7:ab:e7:55:1a:d4:b0:
04:40:88:31:b3:c7:0e:a4:81:34:5e:90:e2:9c:cc:
22:45:84:fe:db:4e:be:67:41:07:fa:46:4a:60:aa:
bf:74:fd:2d:f7:5d:77:ee:58:11:4a:c3:70:ef:b5:
a5:31:28:47:86:67:23:e4:fc:5c:e2:84:d6:11:ae:
e2:0c:79:c0:56:d8:a0:12:c4:16:65:70:c5:7b:0a:
11:06:6e:0e:0e:90:29:62:21:ee:38:d5:56:be:48:
87:2b:96:be:94:19:66:ef:7f:21:d7:d9:50:94:9d:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:A7:BC:F7:FE:20:31:D4:E8:F3:29:6A:1A:11:E5:23:BB:F1:1E
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:18:d0:c0:e8:75:a5:68:41:b3:7c:4d:01:bf:f8:3f:93:
c0:90:f1:6f:80:9e:73:37:fc:7d:fc:ce:75:3a:35:62:3e:38:
c4:44:54:5f:55:5f:ca:04:3f:b1:72:03:62:bd:4d:25:f5:b4:
ba:fb:46:b5:83:61:49:75:68:2f:cc:f3:a4:9c:a8:8f:c5:2d:
e6:a9:8d:86:b6:66:75:33:15:9a:87:45:14:97:63:4a:b7:c6:
01:a4:ba:a5:fa:6a:37:44:75:bd:0e:23:b4:d4:0d:0c:63:cc:
10:e6:59:5c:73:d4:a9:7d:36:4c:3e:6e:2f:45:d9:65:3c:a1:
b6:8e:50:e0:1d:98:95:69:97:60:8a:2f:f4:af:8c:a9:b8:8c:
a5:1d:a2:ab:e8:df:a2:eb:44:3f:76:9d:88:f4:17:e3:c1:9e:
a1:11:09:66:ce:d9:f8:19:ae:c4:13:f7:46:fa:cb:fa:f7:76:
e7:85:c5:5b:83:9c:22:67:2e:85:5e:c5:c4:64:61:c4:4d:e1:
10:fe:90:96:45:ff:48:9d:da:e6:25:28:d6:d8:68:f2:67:77:
39:b3:20:a4:2d:58:8b:5a:76:5c:3b:08:66:25:1c:f2:47:d8:
47:b1:07:22:43:70:32:ab:62:de:23:63:25:79:51:61:82:20:
cc:64:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:41 2025 by rpki-client