Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: lKTgSCwv3KIv6ew9sAgD+d/h2t/gvIxaRvYOb2kNIk0=
Subject key identifier: 81:62:67:FD:0D:C7:3D:92:29:BB:C9:90:9C:BD:88:8C:AC:10:46:AD
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 019A4EF47B3CA1E0E4FEEDCE8815A2EFC5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: HR08zXTwNwiqojoCRFGvxqx8wq3yY2LXdJpp3R9iXuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7b:3c:a1:e0:e4:fe:ed:ce:88:15:a2:ef:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=816267fd0dc73d9229bbc9909cbd888cac1046ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:0e:82:10:d8:f8:dc:d8:2d:0a:13:54:21:
af:c8:3f:c5:a1:f0:f2:21:de:9c:a1:db:2e:34:c2:
1d:c0:84:a4:65:d2:3d:4f:7b:00:61:cb:e3:b7:23:
25:c2:2d:57:0d:81:04:32:40:59:4b:0a:be:aa:d9:
46:4b:a1:6d:45:2d:36:76:8b:7c:7a:e8:d6:5d:67:
a9:39:91:c2:21:3a:e2:05:62:81:b0:15:b3:18:b9:
14:62:24:9a:19:14:00:f7:54:ee:0f:1b:91:aa:bf:
8d:72:a3:be:0d:17:f2:45:12:b0:5c:22:80:85:f1:
44:4a:83:b9:1e:12:88:1b:2a:fc:2e:9a:42:e8:89:
37:86:37:c9:61:5c:85:ee:83:af:34:e1:e1:4b:d8:
49:0b:a9:94:6c:b0:ad:6d:32:85:3c:c8:08:ee:a2:
26:21:87:a7:94:8f:1d:4d:0f:15:93:83:e7:99:f8:
9a:00:76:30:b1:f7:a8:80:5f:66:93:b0:0e:64:22:
11:32:94:4c:41:71:23:9f:a2:92:a0:e4:12:ee:a4:
5c:f9:3c:52:85:20:3a:18:92:5b:b9:1e:a3:98:4b:
ae:10:25:20:17:17:f1:33:c0:0a:51:60:b5:1e:26:
a8:69:2e:23:6b:4c:2e:65:80:2e:62:59:c9:7f:a0:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:67:FD:0D:C7:3D:92:29:BB:C9:90:9C:BD:88:8C:AC:10:46:AD
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:4f:42:59:49:18:f1:25:2a:6d:f6:ee:02:2e:97:76:44:
4b:bf:0c:7b:73:4e:1f:e9:51:f6:9e:c0:07:fc:b5:96:52:3b:
18:96:db:5d:04:d6:78:ae:cd:9d:95:8d:8b:3e:f3:d6:63:4c:
cf:a5:3c:36:3f:a3:c7:9f:da:61:aa:b9:f5:1a:b9:92:cf:01:
d7:9a:e1:09:79:88:64:4b:26:9c:1b:03:5b:8a:0b:1a:c2:4d:
a9:fb:80:15:c4:7e:75:21:1b:ca:af:0f:dd:f0:6b:25:85:b6:
ad:f1:e5:3b:a4:7c:50:95:84:95:ad:44:a9:e6:f3:f5:9e:0f:
0d:cc:e7:7c:80:ae:12:93:0b:4b:1a:5d:77:b5:c0:52:44:77:
b2:08:92:0f:e1:ec:bb:1e:d8:6b:58:e2:fc:89:25:ff:6c:94:
19:fc:84:3e:bc:8b:5c:7d:9b:a7:14:63:59:e7:3d:82:2d:47:
87:17:50:e3:9f:1b:91:4e:71:98:42:74:ca:aa:c5:ab:1e:35:
67:c3:96:22:1c:24:4c:df:be:58:ab:e7:b7:19:4a:47:98:cb:
0e:ed:7d:50:fb:d0:b4:f7:4d:7b:a2:28:68:ce:1c:c5:73:2b:
93:3b:56:d4:24:77:36:a6:2f:1a:a8:21:84:28:41:80:32:01:
62:52:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:19 2025 by rpki-client