Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: 0yHdclLREhCOclyqfd/XcxAcBPwICZxyAo7WfYVX7mQ=
Subject key identifier: 79:65:02:67:E0:D9:75:20:D4:A3:BF:AC:53:58:85:04:F0:5F:FB:5A
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019A4FD090BD2A1D33EE44E67C35D6D8BFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 17:00:59 +0000
Manifest this update: Tue 04 Nov 2025 17:00:59 +0000
Manifest next update: Wed 05 Nov 2025 17:00:59 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: RyD41lXXgSUMpmU6kUDifCKzoGZbyZY/BLtI6e2qwNo=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:90:bd:2a:1d:33:ee:44:e6:7c:35:d6:d8:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Nov 4 17:00:59 2025 GMT
Not After : Nov 5 17:00:59 2025 GMT
Subject: CN=79650267e0d97520d4a3bfac53588504f05ffb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:be:e2:2e:8b:6e:ad:90:8b:b4:11:41:b7:
c9:52:56:c0:7c:a8:68:8f:a5:2f:33:34:0f:75:ba:
07:72:f6:37:22:ba:11:05:d6:82:e2:7b:87:bf:12:
c7:6c:68:f8:45:5b:e2:86:69:32:62:7e:b7:5f:07:
d0:84:d2:54:b0:73:c3:a6:6b:02:89:ba:9e:09:1b:
2d:07:be:8d:7b:58:d0:3c:4b:ec:0c:35:05:a8:4c:
61:d7:a9:5b:db:8c:41:09:3e:c6:15:54:f7:85:f6:
51:f3:3a:08:aa:7a:5f:e3:1c:fc:f2:8f:fc:32:b5:
c0:01:af:3e:ef:52:4d:df:3e:16:34:fa:6c:4a:57:
7b:10:00:da:01:9b:6d:7a:ef:f8:c8:ad:5c:b1:54:
2c:b1:c5:42:ae:a4:b8:71:89:e0:a5:ce:b0:2d:86:
14:b0:db:68:62:31:7d:d1:50:6f:c8:34:8c:af:63:
dc:1c:cd:61:3c:3b:24:33:bd:8f:9e:99:00:6b:ca:
9d:0d:28:e1:2b:04:41:d4:73:d3:cd:fb:e3:24:ae:
69:3a:f4:8e:8c:db:e0:b5:87:97:74:f5:65:32:30:
a6:a4:c4:15:5c:b1:84:79:50:ef:e9:74:de:4e:e9:
dd:9d:9d:99:d1:f3:2f:3d:4a:6c:e6:86:6c:d5:a8:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:02:67:E0:D9:75:20:D4:A3:BF:AC:53:58:85:04:F0:5F:FB:5A
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a0:71:1d:27:30:e4:d2:c1:e0:26:a9:97:57:24:fc:2a:cf:
b4:cb:c5:a3:67:3b:3f:e3:8c:65:2b:f6:74:64:51:8e:b8:ba:
38:93:a5:6f:f4:4f:5c:8c:ff:f4:62:2d:39:9d:82:06:56:65:
c7:da:72:9f:d0:07:09:01:54:93:07:e4:dc:fe:f2:e7:64:80:
e5:36:a2:4f:d9:3f:7b:64:d1:91:42:1b:90:e5:65:af:28:b9:
4c:e3:ed:0a:4b:ca:2e:34:79:2c:73:44:2e:03:41:9b:3e:a6:
71:2b:88:00:be:6d:bf:31:a8:75:bb:b0:7b:7d:f8:16:8e:d1:
43:2e:47:71:97:d1:6f:af:20:93:77:de:41:e8:9c:00:89:79:
92:8c:8f:b9:67:ed:be:1d:ef:25:3c:ac:d6:dc:45:14:cb:ed:
25:3d:ce:f8:c1:30:b1:1d:26:5e:f7:29:88:65:c4:02:9b:ed:
4f:b9:a9:b4:df:db:04:fe:57:86:b8:4f:a8:67:3b:f6:a9:f0:
3f:ee:8c:77:bb:c3:78:0a:be:c5:6f:dd:a8:c9:6c:a4:a4:fe:
a0:5e:5a:3a:18:88:e5:cc:72:90:68:6b:ef:37:a9:2c:d2:cf:
35:88:6b:ba:e5:d3:f8:b2:f4:67:7c:97:f7:86:94:54:d6:cb:
3a:71:68:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0JC9Kh0z7kTmfDXW2L/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjUxMTA0MTcwMDU5WhcNMjUxMTA1MTcwMDU5WjAzMTEwLwYDVQQD
Eyg3OTY1MDI2N2UwZDk3NTIwZDRhM2JmYWM1MzU4ODUwNGYwNWZmYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz16+4i6Lbq2Qi7QRQbfJUlbAfKho
j6UvMzQPdboHcvY3IroRBdaC4nuHvxLHbGj4RVvihmkyYn63XwfQhNJUsHPDpmsC
ibqeCRstB76Ne1jQPEvsDDUFqExh16lb24xBCT7GFVT3hfZR8zoIqnpf4xz88o/8
MrXAAa8+71JN3z4WNPpsSld7EADaAZtteu/4yK1csVQsscVCrqS4cYngpc6wLYYU
sNtoYjF90VBvyDSMr2PcHM1hPDskM72PnpkAa8qdDSjhKwRB1HPTzfvjJK5pOvSO
jNvgtYeXdPVlMjCmpMQVXLGEeVDv6XTeTundnZ2Z0fMvPUps5oZs1ageGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHllAmfg2XUg1KO/rFNYhQTwX/taMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaBxHScw
5NLB4Capl1ck/CrPtMvFo2c7P+OMZSv2dGRRjri6OJOlb/RPXIz/9GItOZ2CBlZl
x9pyn9AHCQFUkwfk3P7y52SA5TaiT9k/e2TRkUIbkOVlryi5TOPtCkvKLjR5LHNE
LgNBmz6mcSuIAL5tvzGodbuwe334Fo7RQy5HcZfRb68gk3feQeicAIl5koyPuWft
vh3vJTys1txFFMvtJT3O+MEwsR0mXvcpiGXEApvtT7mptN/bBP5XhrhPqGc79qnw
P+6Md7vDeAq+xW/dqMlspKT+oF5aOhiI5cxykGhr7zepLNLPNYhruuXT+LL0Z3yX
94aUVNbLOnFoBw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:33 2025 by rpki-client