Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: Y2VJphVrrEktB/LkrlqnN9GgG5rskX0gBiNlrceaBmY=
Subject key identifier: 43:F1:AB:C7:A7:9B:BD:BE:20:CE:47:FF:7D:BE:AE:EC:6D:9C:E8:A2
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019A4DE199A409472485C0B9509E9DA39B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0764
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: k9nnp7g33dYdn9Xnef5dvc+zeO47M8d4jp8KQu4UTFI=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:a4:09:47:24:85:c0:b9:50:9e:9d:a3:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=43f1abc7a79bbdbe20ce47ff7dbeaeec6d9ce8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:1f:5d:dc:90:8d:de:df:ff:e9:74:b2:80:
b1:8c:24:f6:b7:43:7b:71:10:c6:05:4b:cc:1f:24:
00:53:2b:14:ca:0f:27:b1:ab:fc:cd:59:ff:4a:b5:
91:e6:1c:0a:c6:7c:7f:80:53:63:e2:3d:dd:cf:a8:
eb:eb:fa:56:09:c2:21:75:b0:c7:e3:cf:df:91:a6:
9b:9c:8b:a0:f4:3a:b8:00:44:a7:e1:f8:4c:cb:54:
6d:69:ac:5f:ba:8d:2e:b1:b1:df:2d:60:18:a4:2c:
0d:2d:1c:7b:e0:5b:63:57:89:c6:6c:e6:a9:6f:29:
a2:33:10:50:14:55:32:06:ba:3d:bc:4b:da:2a:ce:
7f:fb:74:ae:65:a0:61:8c:f8:ae:0b:8b:33:fa:2b:
83:23:c3:94:a0:2f:33:1d:87:16:94:d5:a6:47:f0:
36:d0:7c:1e:da:a9:29:d5:6b:66:08:4f:e9:11:6d:
c1:e4:63:aa:ab:1e:d2:12:ad:1b:06:65:54:51:8f:
88:36:e2:1a:8f:95:6f:ec:97:b2:bb:2c:cb:a6:ab:
b0:0e:de:a3:18:e6:ee:53:80:21:4e:06:fd:d1:f4:
ee:b2:b4:10:4d:39:70:09:11:38:64:66:51:f9:38:
f3:41:b8:b5:f2:92:9c:0b:71:e2:3c:2a:13:3f:19:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:AB:C7:A7:9B:BD:BE:20:CE:47:FF:7D:BE:AE:EC:6D:9C:E8:A2
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:6f:a6:f5:b8:42:1b:a3:32:6f:c5:27:a8:30:e7:73:ef:
e5:e5:3c:0b:5b:4c:8f:da:93:c1:7f:30:bd:09:f6:11:3b:c3:
df:1e:f5:bc:07:41:53:b1:10:24:44:21:75:b3:2a:82:ed:56:
f8:1f:6f:69:9b:9f:f7:65:05:79:0c:3b:3c:f4:8a:bc:c1:e9:
49:a7:d0:a8:fb:69:83:03:93:b7:e7:05:69:09:7a:b7:35:b5:
66:5b:63:b8:33:18:69:0d:b0:e4:3b:36:87:6a:79:a2:16:ec:
57:a9:6a:f0:25:ba:15:1d:4d:19:71:5c:7e:cb:33:72:8f:2e:
99:1a:83:cc:f5:be:d4:f4:ee:65:b5:8e:8f:3a:ba:42:9c:86:
31:9b:95:03:1b:85:74:54:cf:27:c1:24:d1:44:ba:0f:74:f7:
26:66:fc:46:4d:49:bf:c6:a9:2c:26:9a:c1:26:dc:1c:50:27:
ab:0b:97:a3:84:7c:7a:1b:8c:3a:ac:29:00:b2:45:1a:67:80:
89:19:d9:b0:84:c5:8d:79:b2:83:5d:9f:87:da:33:bf:22:72:
2f:2e:b5:9b:37:5b:5c:69:98:d9:67:9f:97:6b:6d:a0:e7:55:
9e:21:9e:3e:9f:f8:13:ce:62:40:b5:93:d8:1d:24:7a:6d:39:
00:9a:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:13 2025 by rpki-client