
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: A+W2PFTGGt8o0UJr8ruQQr5Hr3UaT2W/96OIGCAoV34=
Subject key identifier: 05:B2:7B:B2:17:6B:A4:90:95:98:89:5B:AC:D8:48:35:0E:14:DE:D3
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019872D0032C59CB23B1654340DFAF4F066B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 02:01:31 +0000
Manifest this update: Mon 04 Aug 2025 02:01:31 +0000
Manifest next update: Tue 05 Aug 2025 02:01:31 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: P1ZOm9bnQz+3ZF/75mH8O6fGfLl0D2QBgxwu+DXh3DA=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:03:2c:59:cb:23:b1:65:43:40:df:af:4f:06:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Aug 4 02:01:31 2025 GMT
Not After : Aug 5 02:01:31 2025 GMT
Subject: CN=05b27bb2176ba4909598895bacd848350e14ded3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:20:b1:90:52:03:1d:9c:10:dc:dc:a3:61:
aa:be:1f:40:d1:ff:46:18:d0:17:ce:63:22:ed:4e:
2b:0e:93:fe:13:18:fc:71:40:18:f5:13:67:03:4d:
4d:61:07:b1:2d:d9:27:00:37:be:81:43:c8:dc:9a:
e3:69:ce:00:98:16:dd:70:b9:83:e1:e5:a2:12:32:
89:00:ec:f4:0e:b5:1e:f3:38:c0:3f:bf:89:2c:e2:
96:2a:dc:99:bd:81:97:39:ea:00:c8:c3:b3:35:f8:
28:22:b7:b4:e8:0b:a2:d1:38:86:6d:bc:b1:c8:29:
55:c6:69:26:6c:69:7c:de:ca:08:ac:f6:b1:3f:80:
fd:f4:4b:d5:00:55:99:81:56:dc:95:c1:2a:1a:35:
0f:7d:cf:01:d5:f5:9f:95:27:b7:ab:d4:85:f0:f8:
dc:e4:db:f7:59:e2:87:c7:53:0a:dd:71:cf:06:d1:
49:3f:bf:39:85:21:4f:e4:5e:72:d6:55:47:e1:85:
84:72:27:5e:7e:84:8c:1c:e1:e7:9f:54:5c:9b:f4:
d7:e6:04:2b:82:78:33:00:df:b3:53:87:38:c7:5c:
26:b1:7b:d7:bf:ca:7b:ce:6e:86:2d:a7:4d:c2:2d:
f1:47:dd:bf:e2:48:e6:04:ff:ff:0c:f1:79:53:d9:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:7B:B2:17:6B:A4:90:95:98:89:5B:AC:D8:48:35:0E:14:DE:D3
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:19:db:20:78:76:8b:1c:3e:87:13:86:3b:6b:87:89:c3:56:
29:f1:61:c7:22:a5:a6:cf:f1:bb:6b:dd:a8:2d:1f:f8:44:55:
82:a1:fd:bd:9c:28:d6:8b:72:58:aa:4d:10:a3:e0:1f:03:f9:
bf:1c:6d:03:3a:1f:20:3f:ee:6f:6b:77:03:93:1c:8b:1b:d0:
c5:a8:ea:ed:c7:e6:e3:36:fb:bd:9e:5a:41:f0:65:6d:f3:d7:
9b:f2:d5:d2:ad:b2:95:b3:93:f7:66:f0:13:69:d4:fa:11:37:
83:ea:27:65:16:5d:c7:a9:05:47:61:3c:d5:ac:c7:cd:87:c2:
72:9e:d6:ed:e0:cf:fc:d5:0d:7f:c3:94:63:ff:79:69:4f:a1:
db:25:f6:1c:19:7e:5c:85:c7:b4:b7:fb:37:72:30:6d:8b:42:
15:ee:d6:1e:cc:67:5e:fe:29:7f:90:cd:d0:12:c6:a0:5a:8d:
0b:66:71:42:99:1c:a9:3f:12:a2:6b:ed:8b:fd:21:44:3b:95:
02:4a:2c:55:f6:69:f0:48:0b:83:20:23:83:10:d1:e6:43:19:
de:04:41:fb:85:3c:ff:fb:7b:c3:e3:48:64:2c:42:cd:09:b8:
a2:9d:8b:ad:f4:d1:fb:a4:79:c2:22:99:9e:f8:4b:70:dc:c6:
dc:e6:eb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhy0AMsWcsjsWVDQN+vTwZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjUwODA0MDIwMTMxWhcNMjUwODA1MDIwMTMxWjAzMTEwLwYDVQQD
EygwNWIyN2JiMjE3NmJhNDkwOTU5ODg5NWJhY2Q4NDgzNTBlMTRkZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxYgsZBSAx2cENzco2Gqvh9A0f9G
GNAXzmMi7U4rDpP+Exj8cUAY9RNnA01NYQexLdknADe+gUPI3Jrjac4AmBbdcLmD
4eWiEjKJAOz0DrUe8zjAP7+JLOKWKtyZvYGXOeoAyMOzNfgoIre06Aui0TiGbbyx
yClVxmkmbGl83soIrPaxP4D99EvVAFWZgVbclcEqGjUPfc8B1fWflSe3q9SF8Pjc
5Nv3WeKHx1MK3XHPBtFJP785hSFP5F5y1lVH4YWEcidefoSMHOHnn1Rcm/TX5gQr
gngzAN+zU4c4x1wmsXvXv8p7zm6GLadNwi3xR92/4kjmBP//DPF5U9l9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWye7IXa6SQlZiJW6zYSDUOFN7TMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRnbIHh2
ixw+hxOGO2uHicNWKfFhxyKlps/xu2vdqC0f+ERVgqH9vZwo1otyWKpNEKPgHwP5
vxxtAzofID/ub2t3A5McixvQxajq7cfm4zb7vZ5aQfBlbfPXm/LV0q2ylbOT92bw
E2nU+hE3g+onZRZdx6kFR2E81azHzYfCcp7W7eDP/NUNf8OUY/95aU+h2yX2HBl+
XIXHtLf7N3IwbYtCFe7WHsxnXv4pf5DN0BLGoFqNC2ZxQpkcqT8Somvti/0hRDuV
AkosVfZp8EgLgyAjgxDR5kMZ3gRB+4U8//t7w+NIZCxCzQm4op2LrfTR+6R5wiKZ
nvhLcNzG3ObrkA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:50 2025 by rpki-client