Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: WPatjghiIQrroML8UUxyfi2SP2dXRtX6yUF5eFjHqJ4=
Subject key identifier: D6:E7:D7:96:22:5F:55:29:E3:A1:24:9D:09:2C:5C:C9:7D:E6:16:F2
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 019A53AD4354261D8ED2BC486012B0CF13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 01A8
Signing time: Wed 05 Nov 2025 11:00:54 +0000
Manifest this update: Wed 05 Nov 2025 11:00:54 +0000
Manifest next update: Thu 06 Nov 2025 11:00:54 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: RXKP0PkE1dJmFdRun9FOcBiTaQhaCbAItB8zmQrd/1U=)
2: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (hash: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=)
3: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (hash: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:43:54:26:1d:8e:d2:bc:48:60:12:b0:cf:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Nov 5 11:00:54 2025 GMT
Not After : Nov 6 11:00:54 2025 GMT
Subject: CN=d6e7d796225f5529e3a1249d092c5cc97de616f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:d7:c8:e5:78:46:86:57:a7:6d:0d:3a:58:
ea:6d:98:dd:89:8d:ea:67:8e:88:92:13:1d:0c:4d:
d1:df:d4:f1:74:d8:ed:9d:6b:15:0c:68:25:9b:2a:
da:39:6f:c8:56:2d:cc:ac:ab:d3:6e:f6:f7:22:26:
90:16:d9:1d:67:e6:67:7a:e4:59:e4:7f:36:b3:82:
27:17:1c:0e:00:7d:1d:45:06:aa:44:32:a5:2e:ac:
c2:58:7a:e9:63:9b:61:fc:b2:0b:e2:74:ca:98:65:
97:fb:59:8c:f9:2c:51:43:46:39:80:0e:6a:b9:e4:
98:b0:35:51:1c:bd:a1:c7:b9:84:0a:7f:37:7c:f3:
ff:53:b6:f2:17:d5:a1:f1:a3:7b:a7:11:76:de:a6:
e9:ef:47:ca:7d:01:bf:f3:08:f8:96:c2:03:71:3e:
37:4d:8a:35:36:55:2b:a1:6c:b7:5f:11:97:8b:68:
69:0c:e1:81:04:a3:00:33:bd:db:c5:a1:4d:33:1a:
ff:6e:bb:20:b9:0a:13:c3:99:bc:eb:71:80:5b:ad:
e0:30:d9:a4:4b:03:42:53:d1:22:77:f8:74:96:c1:
37:3f:9c:fd:e6:f6:83:9b:72:c1:26:1a:c4:4a:43:
0f:00:33:17:f2:4b:ff:de:2d:6c:25:8f:7f:94:b7:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:D7:96:22:5F:55:29:E3:A1:24:9D:09:2C:5C:C9:7D:E6:16:F2
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:e1:43:a5:83:9b:9f:e9:1e:4f:eb:66:cb:e2:2c:ea:bb:
02:c1:ff:75:20:76:ea:18:8b:3f:c8:3d:5d:d6:cf:d6:f3:bc:
31:b5:9e:b3:da:b5:c2:a9:fb:17:9c:98:e2:ad:e3:1c:96:27:
90:3b:26:03:16:9d:8c:0a:90:ca:d9:9f:d9:b6:f7:13:5b:e5:
70:17:8e:20:4a:c9:97:f4:d8:a2:fd:fa:b4:49:5a:3a:92:2a:
1b:90:79:a3:1a:73:18:84:4b:37:bf:f8:da:dc:a4:fd:81:26:
73:7f:d3:47:16:ec:8b:fe:92:dd:0f:52:33:84:30:86:56:1d:
4c:d8:84:e5:54:fc:5a:63:87:1b:d3:eb:ce:cc:cf:b8:89:b6:
2f:f9:a4:97:a0:05:5d:86:9c:d1:45:c1:c9:69:df:64:7d:a2:
07:3b:c3:8b:ea:6b:0f:e7:dd:9e:ff:d5:31:1e:e5:27:be:86:
0e:cc:e9:e9:3d:5a:bb:bc:ac:75:b0:c1:53:cf:9f:67:f5:8d:
21:e7:95:b3:26:af:5f:b6:cc:40:46:58:1b:50:49:14:af:81:
70:98:50:62:ef:cd:93:e3:66:13:82:3d:05:29:9f:ee:9d:48:
f2:21:09:10:a2:ad:6b:d4:c9:19:4d:12:18:51:83:2d:34:ae:
81:ad:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:19 2025 by rpki-client