Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: MwYTzI51TQewhHg52Hz31TuB8emEPx9zwGcRBohDJY4=
Subject key identifier: 36:E0:A5:C1:07:DF:35:7D:9C:FA:10:23:D4:B6:47:04:FC:82:C6:EB
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 0199FEB506DE3EB160709CC417AD0E4EAEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 23:01:40 +0000
Manifest this update: Sun 19 Oct 2025 23:01:40 +0000
Manifest next update: Mon 20 Oct 2025 23:01:40 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: 6R8jHqbc22jhH7ZWTnRY23NjP1sUkD912o77deLyKsI=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:06:de:3e:b1:60:70:9c:c4:17:ad:0e:4e:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Oct 19 23:01:40 2025 GMT
Not After : Oct 20 23:01:40 2025 GMT
Subject: CN=36e0a5c107df357d9cfa1023d4b64704fc82c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a4:1e:8f:05:9a:08:8d:2a:1d:a5:77:6d:a7:
30:dd:75:a1:b6:6d:dc:ae:45:d1:a1:56:ee:e3:c4:
48:71:65:b7:b5:fb:1d:71:e3:1a:0a:ee:00:48:f0:
67:a0:a6:24:a5:56:5c:89:e0:ef:15:81:b2:9e:49:
a6:2c:6d:be:4a:6f:18:cb:1a:56:01:eb:32:94:97:
23:50:2c:33:e1:fe:36:18:28:02:a1:16:38:86:c0:
5f:05:c6:a7:51:ae:52:12:e5:21:61:f8:d6:fe:52:
11:9f:91:f5:9c:71:d9:cc:59:ee:e2:92:06:09:c2:
49:3e:f9:09:95:51:c2:71:fe:9b:30:07:f5:07:2d:
fd:5a:17:be:26:96:1d:7f:7a:de:e0:d5:e4:26:5a:
a5:6e:3c:8d:65:1f:cc:85:61:04:55:55:02:c0:94:
7b:b0:55:f2:da:fb:1d:f6:dc:2d:37:71:3d:77:5f:
d9:a9:a1:bf:21:7f:e4:d4:0b:5d:59:e8:ef:c1:a8:
c2:c7:5d:89:8d:2a:01:aa:c3:62:b4:4d:c8:d8:e1:
75:27:f2:d9:84:5f:31:c9:38:b5:f3:64:dd:c3:c1:
7a:c4:25:d5:fb:18:56:b2:3e:45:68:65:fe:06:a6:
50:6e:87:f3:72:6b:31:e5:b7:0d:e0:36:eb:b5:fe:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:A5:C1:07:DF:35:7D:9C:FA:10:23:D4:B6:47:04:FC:82:C6:EB
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:d7:19:ae:17:e2:88:6c:44:4b:01:25:e9:6c:ca:b3:fe:
47:f4:6c:11:1d:c6:af:b0:01:92:f8:c0:7d:89:fd:cd:f1:89:
92:9c:de:03:5f:c5:75:94:a7:ad:02:e9:49:df:41:fd:62:9f:
4d:07:d8:30:c6:bf:af:0f:33:11:3e:d1:98:f5:4e:2f:fb:3c:
fc:c7:25:4e:f9:1d:9c:d7:f3:ec:e1:b6:8c:46:9f:22:7d:fd:
b8:cc:3a:3f:02:76:99:50:1a:cc:e7:bd:c8:ed:1d:38:bb:5f:
fd:2f:5a:72:ec:98:70:9b:ee:e8:3b:cc:12:64:01:a4:fa:09:
41:57:92:b4:d2:9c:a2:46:30:25:9c:fc:fd:8c:15:c5:26:7a:
45:11:a2:7b:28:3c:6a:59:83:dd:7d:df:ab:f0:35:10:f5:94:
5b:2e:01:39:9c:b8:54:4e:0c:d4:de:ea:56:9c:49:a6:ea:84:
6c:da:b1:46:76:f7:28:c1:71:d6:9e:1d:05:9b:db:1b:eb:51:
8d:3b:94:98:78:83:a5:b1:da:97:3f:3d:ba:73:1b:7f:ad:af:
2c:d1:59:15:e8:b0:e8:86:6a:b9:a9:b1:8f:cd:bd:61:61:78:
8a:d1:4f:d3:eb:a8:69:96:5e:5d:2f:e2:49:7d:f9:f1:99:18:
4d:a7:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:55 2025 by rpki-client