Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: mKWguF733GVkLbatC31OSG1UVPBJ6xa7NB9pAcyEuFE=
Subject key identifier: 86:42:78:C7:FC:68:A7:83:CD:17:68:8A:EB:D0:74:BD:62:30:F2:02
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 0197B77C80EBBE4ACB400ABFE940DF2E9BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: reUNMTi9xBPn0VIT10dVqK0Cln7gjkFvobPJGyfP0FE=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:80:eb:be:4a:cb:40:0a:bf:e9:40:df:2e:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=864278c7fc68a783cd17688aebd074bd6230f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:59:8d:a4:17:20:07:a1:92:8a:54:f9:1b:
e0:97:5d:43:72:59:da:1a:9e:27:64:0e:77:5a:50:
c5:d8:ff:d0:8d:43:7d:b6:b0:80:5f:a0:be:6c:f7:
10:db:ef:ce:19:8d:4d:38:d9:73:e1:09:2c:d0:c6:
fd:3e:82:78:6f:2b:d4:2f:3c:67:34:9d:67:43:82:
e3:90:fd:7c:92:f3:86:6e:9f:55:40:7d:cd:0f:4e:
bc:ee:21:b0:5f:c5:2a:65:ae:3d:61:2a:c8:09:84:
cc:b6:31:89:cd:8d:31:a8:67:c4:2e:c3:51:3c:21:
ee:6a:81:08:0c:27:af:25:ee:5e:ef:85:9a:5b:bb:
0f:ee:43:07:53:a0:ba:d6:fd:03:3e:f2:31:43:8a:
cd:46:20:83:b3:2c:54:7a:30:c4:b3:87:92:69:3f:
ad:e6:ae:31:4e:f4:a5:f4:11:7a:20:3d:6c:4f:74:
0d:6b:d0:db:4a:2e:97:68:b0:3a:f6:d3:28:ac:ee:
bc:40:56:4e:84:cc:e2:8d:e2:b2:37:48:c7:bf:e5:
55:20:8b:d2:9c:23:85:d8:2a:68:e3:90:f3:a4:f2:
1d:8a:bb:5d:e2:51:e1:0d:58:a5:e8:2c:b5:53:a3:
05:a3:5f:36:10:54:20:44:8b:3f:80:1e:cb:fd:f9:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:78:C7:FC:68:A7:83:CD:17:68:8A:EB:D0:74:BD:62:30:F2:02
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a7:63:a5:b7:51:85:f5:7d:36:55:58:bb:46:ba:4a:6d:77:
ef:ff:4d:f7:52:9b:a9:a6:fe:5b:89:ce:86:4a:56:0a:1c:a1:
be:01:b3:92:ac:a8:f0:6a:08:2b:32:55:f4:4f:06:fb:69:1a:
be:af:d6:23:04:88:cf:b3:ff:dc:34:80:6f:c9:34:86:33:01:
61:f6:f8:fd:44:e0:24:13:2b:d7:50:c1:92:52:d5:ba:26:a1:
b5:f1:fd:92:89:dd:a7:4a:65:ce:24:ae:ee:13:0f:fb:ff:9e:
3f:d0:0e:88:dd:82:1a:7a:39:e3:4a:ff:dc:81:17:c1:56:e6:
fb:ff:f9:f1:38:8f:d3:61:13:c8:74:9d:db:71:d9:ae:80:96:
d4:86:82:5f:c5:bb:6f:1c:f4:04:4f:da:2c:e1:e6:da:82:aa:
44:d9:15:c3:ab:55:70:65:a5:59:96:90:93:d6:66:4a:49:e6:
b6:6e:c0:65:cf:67:19:fa:07:61:7c:ae:4b:db:02:9c:8a:02:
94:24:c9:a2:4c:84:67:4e:7a:26:98:a8:f3:c0:d8:40:a5:d6:
72:10:9f:79:39:9b:44:4e:21:25:1d:56:e8:4c:c9:3c:0b:f6:
d6:0d:9b:2e:5e:8b:f6:c1:66:b7:38:b8:1f:5c:d2:f8:46:b0:
07:91:82:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIDrvkrLQAq/6UDfLpvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjUwNjI4MTcwMTE5WhcNMjUwNjI5MTcwMTE5WjAzMTEwLwYDVQQD
Eyg4NjQyNzhjN2ZjNjhhNzgzY2QxNzY4OGFlYmQwNzRiZDYyMzBmMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbJZjaQXIAehkopU+Rvgl11Dclna
Gp4nZA53WlDF2P/QjUN9trCAX6C+bPcQ2+/OGY1NONlz4Qks0Mb9PoJ4byvULzxn
NJ1nQ4LjkP18kvOGbp9VQH3ND0687iGwX8UqZa49YSrICYTMtjGJzY0xqGfELsNR
PCHuaoEIDCevJe5e74WaW7sP7kMHU6C61v0DPvIxQ4rNRiCDsyxUejDEs4eSaT+t
5q4xTvSl9BF6ID1sT3QNa9DbSi6XaLA69tMorO68QFZOhMzijeKyN0jHv+VVIIvS
nCOF2Cpo45DzpPIdirtd4lHhDVil6Cy1U6MFo182EFQgRIs/gB7L/fnSFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZCeMf8aKeDzRdoiuvQdL1iMPICMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqadjpbdR
hfV9NlVYu0a6Sm137/9N91Kbqab+W4nOhkpWChyhvgGzkqyo8GoIKzJV9E8G+2ka
vq/WIwSIz7P/3DSAb8k0hjMBYfb4/UTgJBMr11DBklLVuiahtfH9kondp0plziSu
7hMP+/+eP9AOiN2CGno540r/3IEXwVbm+//58TiP02ETyHSd23HZroCW1IaCX8W7
bxz0BE/aLOHm2oKqRNkVw6tVcGWlWZaQk9ZmSknmtm7AZc9nGfoHYXyuS9sCnIoC
lCTJokyEZ056Jpio88DYQKXWchCfeTmbRE4hJR1W6EzJPAv21g2bLl6L9sFmtzi4
H1zS+EawB5GCXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:40 2025 by rpki-client