Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: Ta642C9jviHen7OAlAVEqE0rIay4oCStvEsQ3PsM2Mc=
Subject key identifier: 5B:9D:EA:44:26:66:D2:40:E6:20:3E:BF:11:F9:C2:8A:E6:6F:5A:60
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 019A4EF5465CB698FC39DFCE454328438397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 051C
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: 737SWTYkebrXnYmSXUYJOtfpHUso6J56Nc/cBGG9sv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:46:5c:b6:98:fc:39:df:ce:45:43:28:43:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=5b9dea442666d240e6203ebf11f9c28ae66f5a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:75:04:d7:5b:d6:ab:17:4a:c5:1f:c0:8c:6f:
62:b7:e0:13:32:ba:ed:40:86:b1:af:f1:c6:78:54:
b1:fb:2b:e7:f5:66:83:39:fa:e7:41:ca:27:c3:71:
0b:9e:1b:d3:fa:ed:6c:89:9e:a6:73:e4:c7:04:15:
df:2d:30:f3:c3:7e:3b:97:8e:b5:18:2b:18:33:f7:
90:d9:68:13:ac:6f:69:0c:4d:2d:fb:1f:96:54:b3:
5b:00:8e:19:be:d3:99:52:6a:ec:f6:9e:74:db:08:
1b:52:ef:80:61:40:69:e0:bc:d5:1b:f3:e3:b9:be:
9b:b5:3c:2c:0f:68:e4:8d:82:1f:09:7e:16:d0:5d:
2c:10:10:40:c9:ad:2d:77:36:b9:29:ea:da:ac:7a:
0e:63:ba:fa:38:83:ea:59:94:5f:73:44:37:0c:01:
95:b2:38:dd:90:02:93:72:4d:e8:4f:04:64:e6:32:
c4:92:07:60:97:1a:8a:a2:ee:ca:22:dc:9b:4e:62:
d7:93:49:9f:e2:e9:f9:02:55:81:76:28:6f:78:d3:
8b:22:1e:a3:e9:a9:02:19:60:be:13:42:ae:94:99:
d5:3a:12:9b:5e:60:aa:5a:7e:67:0e:a8:17:a3:97:
fd:bb:c6:c9:ad:23:ef:ce:25:60:52:2f:6a:0b:30:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:EA:44:26:66:D2:40:E6:20:3E:BF:11:F9:C2:8A:E6:6F:5A:60
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a4:fe:02:e5:5b:ee:96:98:ea:9b:14:d2:75:0d:e3:cc:ed:
27:ef:73:33:4c:d8:bb:18:d8:45:34:1d:c9:d5:6d:18:58:27:
a1:b2:e5:08:b8:96:76:88:d3:f5:9c:5c:43:67:b6:80:ad:50:
ce:9c:fd:ed:ae:13:48:58:cb:62:9b:7d:a5:1e:a0:3f:75:6d:
cf:ff:08:4b:12:49:3d:8b:5e:d6:c8:4b:8d:0f:b2:25:a3:f5:
b6:c2:e5:35:db:b2:a4:f5:82:58:63:c1:31:ea:e1:39:0b:55:
a0:6c:42:4a:a1:ca:df:42:ca:41:d2:1f:4d:ab:76:cc:e9:55:
b2:a0:26:df:c6:8e:48:fc:60:61:d8:00:47:f6:f7:21:59:36:
b4:82:ef:90:5f:51:3c:4c:a8:1e:cd:ee:a4:cc:2e:7c:44:64:
43:ce:d7:a2:eb:a0:b1:c7:99:64:1c:73:65:ea:3b:e4:ed:d8:
be:60:8b:b8:9c:67:61:6f:e6:b8:e4:50:a1:17:a2:8f:a6:b3:
03:2e:d5:d5:00:94:fd:57:1c:e8:bb:a7:75:3d:63:7b:f0:13:
79:7b:50:28:0a:ab:df:6f:ab:61:40:38:87:c4:43:b0:79:57:
96:82:99:56:dc:25:5e:0e:fe:6a:f3:af:8f:c0:86:60:6d:df:
82:b7:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:57 2025 by rpki-client