Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: b0wjqUMeee0rGjjgBegZ+0H0n0C2XmCEFEVpbRJREuI=
Subject key identifier: 17:76:8F:FA:07:C1:76:8C:D8:70:E3:F9:E0:9B:85:D7:C7:1F:BA:F4
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 019A4EF4D48502C3977D08E011A097685306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:58 +0000
Manifest this update: Tue 04 Nov 2025 13:00:58 +0000
Manifest next update: Wed 05 Nov 2025 13:00:58 +0000
Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: ClJcI48lzrd+kRhhUT2paO9IajM7JablJh0jSxXYfzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d4:85:02:c3:97:7d:08:e0:11:a0:97:68:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Nov 4 13:00:58 2025 GMT
Not After : Nov 5 13:00:58 2025 GMT
Subject: CN=17768ffa07c1768cd870e3f9e09b85d7c71fbaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:c9:96:d7:86:e1:40:6f:2d:65:e7:ad:73:
a1:46:d4:8c:fc:da:85:ac:27:c5:a0:7d:8d:db:a3:
e8:53:b6:cd:ba:85:56:99:a4:eb:d0:8e:f1:7b:b4:
d0:17:79:49:95:15:d9:72:8e:d8:b5:66:ae:8b:49:
a7:1e:ed:95:83:5f:a2:e1:0a:c5:34:f8:ab:fe:ef:
fe:a1:d8:c6:3e:02:62:83:b2:60:aa:fd:cc:93:8f:
c8:f2:2d:c5:90:fa:9b:07:22:6a:96:b4:14:5b:8d:
0e:c4:2d:f5:36:f4:4b:bd:e4:ab:b3:d3:54:91:78:
11:5e:0a:57:f7:1e:d1:6f:5d:9f:99:04:e4:ee:d8:
cd:70:c1:51:7c:74:ac:27:20:ce:53:ee:1e:7b:42:
e8:fb:cf:38:54:90:8b:32:f1:b2:ca:6a:84:b3:50:
aa:c1:1d:a2:78:a8:a8:64:ae:35:03:43:11:7d:9d:
58:3f:1c:91:59:47:66:da:99:67:c3:18:08:b8:e5:
70:85:36:bc:14:4e:70:e2:a8:9c:3c:36:da:60:0b:
57:7a:de:88:4c:89:a0:3f:b3:72:fd:81:68:33:9c:
f9:35:29:ed:19:d1:fd:ba:37:84:65:f6:c8:f1:41:
9c:fc:ec:9f:6f:16:25:bb:25:62:26:4c:70:30:0e:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:76:8F:FA:07:C1:76:8C:D8:70:E3:F9:E0:9B:85:D7:C7:1F:BA:F4
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:55:f2:af:5b:28:dc:3b:2b:34:05:63:c0:86:94:c0:51:ba:
45:b6:a7:fe:a6:fb:62:b8:ed:14:1c:af:33:40:d3:13:ba:46:
60:15:ff:be:fa:74:8e:6f:20:7c:3f:e5:1c:7c:01:aa:69:d6:
12:17:1a:6c:18:bc:79:fc:07:f5:d0:bd:9d:5d:8a:0c:6c:d0:
fe:bf:40:10:74:55:aa:82:f7:3f:0b:a2:e7:d2:13:f8:2b:e0:
08:35:a5:85:29:11:2f:ca:aa:ca:c0:1b:fb:25:f8:c5:eb:44:
f3:51:ec:6e:22:0e:aa:70:85:a8:ca:f2:e6:33:91:d6:e9:4d:
6e:28:8f:b6:53:72:3f:9e:89:fb:3e:52:90:a9:6d:47:5e:fb:
08:44:1c:aa:0e:73:20:39:3f:32:40:b8:76:bb:90:28:98:e5:
24:15:d8:22:2d:2e:a3:05:75:28:7d:b6:d6:5f:6a:8a:16:7a:
a0:c0:c1:02:fb:d8:4e:75:e5:08:7b:51:2b:29:e5:41:83:4c:
b6:89:6d:75:2b:01:b1:95:71:85:8f:1d:55:de:3f:d3:61:c6:
d6:a2:a5:6c:0b:08:31:45:8e:34:73:f4:42:9f:24:71:9d:5a:
f9:91:6e:b0:bd:38:d6:d4:d2:9b:ea:30:be:ef:2b:75:7d:df:
4c:0d:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:06 2025 by rpki-client