Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: ZoLIFOlHHLgQh0OiCw0NHIbA3T79IbtJJZL0fs+mbHo=
Subject key identifier: 27:91:15:67:E4:09:BD:2C:84:23:19:15:92:52:05:D9:34:EF:ED:C2
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 019872CF4003B7D90F5BA6AC23EC9D66ECE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 05CF
Signing time: Mon 04 Aug 2025 02:00:41 +0000
Manifest this update: Mon 04 Aug 2025 02:00:41 +0000
Manifest next update: Tue 05 Aug 2025 02:00:41 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: xIZE90bUnU5jpYovwHNfnEFLVMrKGsmVQm3Uoc6HT7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:40:03:b7:d9:0f:5b:a6:ac:23:ec:9d:66:ec:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Aug 4 02:00:41 2025 GMT
Not After : Aug 5 02:00:41 2025 GMT
Subject: CN=27911567e409bd2c84231915925205d934efedc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:db:02:8e:eb:02:f2:e3:e0:81:81:ec:b2:
e9:4f:fc:77:1e:74:26:2f:92:b8:63:93:4b:1e:d0:
03:34:22:30:55:82:19:ec:20:7a:1e:d4:7c:48:51:
57:dd:c7:5f:02:46:cc:53:3d:38:24:b0:c5:6e:2f:
e2:dd:6b:67:61:0c:f4:39:68:32:82:46:07:e9:59:
70:9f:3f:a6:66:3e:22:c7:11:0c:af:a5:1c:28:71:
b3:4a:bb:33:d9:93:fa:60:62:2b:33:7d:c1:11:34:
78:ff:38:45:ea:e8:6a:f8:c9:ae:73:28:c3:c8:4c:
8b:22:7e:c9:72:80:f4:0f:93:b0:b1:30:3d:25:74:
bd:97:4d:52:a7:d5:37:c7:57:82:aa:57:31:27:ab:
57:96:f3:6a:48:aa:dc:d5:a9:6b:40:6b:90:00:85:
67:ca:de:39:3c:9e:01:d1:be:3e:d4:5a:6a:eb:16:
47:10:c8:09:d2:6f:37:f3:b4:71:19:ed:2e:c0:96:
7c:4c:42:67:0c:66:7c:1c:24:b2:00:cb:71:01:9e:
ff:da:c7:ae:0b:3e:cb:c3:7f:ee:4e:08:9b:13:fd:
fe:24:b6:0f:3b:49:bb:ca:ff:11:1d:50:95:84:0e:
ae:9f:bd:60:ec:92:a5:a0:24:33:19:18:ed:5d:78:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:15:67:E4:09:BD:2C:84:23:19:15:92:52:05:D9:34:EF:ED:C2
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:49:35:99:83:25:95:0d:b6:63:d1:60:74:9c:ca:44:28:
bd:6b:90:f0:80:89:9f:cf:5e:de:7c:60:27:a0:fc:8d:b9:bf:
46:da:20:7a:ba:7d:0f:e7:a0:88:55:45:c4:8a:ec:22:7c:23:
bb:9b:3c:56:61:c4:16:9f:a6:60:fc:d9:4a:a5:0f:bf:25:c1:
91:37:65:e9:67:c9:77:e5:f0:91:b3:6a:e5:05:30:3c:97:d9:
fb:53:fb:ee:5a:a0:a7:a8:c1:24:d7:fa:c3:c9:1d:4a:b3:08:
f4:13:8b:4d:2a:84:79:48:33:a0:8f:67:ab:e9:26:93:57:e5:
e8:57:ca:6b:be:e9:53:89:03:c8:e3:50:9a:87:85:be:b0:86:
dd:ab:d7:bf:9e:85:b3:e2:90:1e:28:6b:5f:45:ab:68:0b:ee:
e0:46:8b:fa:0b:8a:7f:df:71:84:40:69:af:72:25:e5:1b:10:
96:5c:be:7a:03:2b:0b:2f:b1:97:3f:bc:d4:b9:0a:e9:a7:31:
eb:0c:69:59:23:a4:ce:24:f5:5e:74:1b:03:3b:5a:76:f6:23:
9c:01:78:04:1a:87:10:40:85:00:17:c5:37:46:7a:a5:b4:77:
23:ab:7c:41:ed:f6:0e:54:3a:23:f6:76:f4:0c:bb:62:4f:b6:
33:4a:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:46 2025 by rpki-client