
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: G7rSPWKVI6RqxLwASVKRuyDrTbTzRKEqpVmcDqtCfWU=
Subject key identifier: 9B:61:B2:91:57:E9:E7:3D:3A:7A:23:67:45:B9:B6:12:5F:56:DB:82
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 0199C4C4FFE01A8B006DCA75263552EE41D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 015E
Signing time: Wed 08 Oct 2025 17:01:08 +0000
Manifest this update: Wed 08 Oct 2025 17:01:08 +0000
Manifest next update: Thu 09 Oct 2025 17:01:08 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: giR7hrMR9ycC02uxHS20bWhsY6za8qwmUuRyTBzgeAk=)
2: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (hash: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=)
3: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (hash: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:ff:e0:1a:8b:00:6d:ca:75:26:35:52:ee:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Oct 8 17:01:08 2025 GMT
Not After : Oct 9 17:01:08 2025 GMT
Subject: CN=9b61b29157e9e73d3a7a236745b9b6125f56db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:9a:78:20:ee:f9:03:8c:e0:d1:a2:a9:28:39:
d4:af:c0:74:00:c1:c2:ab:0f:54:e0:c4:97:ae:30:
36:26:a2:53:30:95:24:17:65:13:b6:0c:5f:97:e7:
a2:c6:bc:a4:5e:83:76:07:ef:5e:5d:f4:ab:9b:ed:
58:58:f6:de:b3:94:28:72:55:43:f2:c6:1a:ca:6a:
67:1a:71:7c:e7:93:56:20:1b:bf:9e:d8:7c:bc:14:
f4:84:35:97:fa:a3:89:f4:f5:e3:3b:02:5d:5c:96:
86:04:f0:49:1d:3f:52:6d:8a:11:98:60:77:29:09:
56:a9:31:2c:01:78:48:9d:4d:44:31:a0:3a:77:92:
9d:eb:c6:cf:75:42:9a:89:93:0a:2b:68:ba:df:22:
b8:8a:79:15:51:08:ad:38:22:51:d0:e0:df:c2:40:
95:36:94:94:33:6b:da:41:38:fb:ab:1b:24:44:75:
6b:13:28:c6:17:ac:29:5d:66:f6:fc:af:ba:92:72:
56:31:8a:d2:0f:39:81:ad:73:31:4a:fd:23:7d:e1:
5a:91:97:ef:32:85:3c:15:f8:39:ec:d1:ea:5c:29:
ad:97:58:8c:c6:e0:9b:78:46:77:63:33:f8:fe:5b:
a8:66:b1:78:5c:12:1b:01:98:e5:f5:e4:39:fe:aa:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:B2:91:57:E9:E7:3D:3A:7A:23:67:45:B9:B6:12:5F:56:DB:82
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:ea:f5:cc:0e:c4:1c:35:e1:12:75:4b:c9:63:aa:dc:0e:
7f:6d:c1:b6:70:13:ec:10:c7:fa:86:03:fb:f1:71:88:ff:ad:
b6:01:ce:8c:85:07:4e:88:24:c9:ea:e0:04:15:65:e8:e8:f6:
aa:a8:43:f4:81:79:0a:80:2d:d2:b7:89:8d:78:33:ac:4b:e3:
79:e3:b0:2a:84:e4:2e:f6:53:d6:f2:e6:bd:a1:71:e8:98:c9:
14:6b:d3:22:29:09:81:d7:f7:2b:d3:2e:eb:75:d0:7f:2b:6d:
53:33:37:07:11:bd:94:0b:01:cc:a5:ee:3a:3f:69:2b:74:db:
1e:37:c1:53:8e:f0:95:4b:b5:c0:e0:a5:63:0c:d2:37:66:4a:
40:d2:11:5f:60:22:97:50:8e:94:dc:9c:3b:97:98:a3:4d:a4:
1d:53:f1:c5:87:8c:38:37:0e:3d:2c:92:56:31:d5:c4:a4:81:
25:99:05:ab:16:27:53:86:e9:28:13:cc:ae:8a:c4:56:d2:24:
f1:25:93:10:46:eb:86:b4:6b:40:c0:be:f4:99:d0:0b:fb:9b:
33:d9:db:53:80:13:b5:83:ac:81:85:5f:41:89:fe:1c:e3:99:
a5:67:1e:70:2e:62:22:99:7c:5a:56:36:bd:fc:11:a2:02:22:
7c:6d:2c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnExP/gGosAbcp1JjVS7kHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjUxMDA4MTcwMTA4WhcNMjUxMDA5MTcwMTA4WjAzMTEwLwYDVQQD
Eyg5YjYxYjI5MTU3ZTllNzNkM2E3YTIzNjc0NWI5YjYxMjVmNTZkYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Zp4IO75A4zg0aKpKDnUr8B0AMHC
qw9U4MSXrjA2JqJTMJUkF2UTtgxfl+eixrykXoN2B+9eXfSrm+1YWPbes5QoclVD
8sYaympnGnF855NWIBu/nth8vBT0hDWX+qOJ9PXjOwJdXJaGBPBJHT9SbYoRmGB3
KQlWqTEsAXhInU1EMaA6d5Kd68bPdUKaiZMKK2i63yK4inkVUQitOCJR0ODfwkCV
NpSUM2vaQTj7qxskRHVrEyjGF6wpXWb2/K+6knJWMYrSDzmBrXMxSv0jfeFakZfv
MoU8Ffg57NHqXCmtl1iMxuCbeEZ3YzP4/luoZrF4XBIbAZjl9eQ5/qpS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJthspFX6ec9OnojZ0W5thJfVtuCMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxHq9cwO
xBw14RJ1S8ljqtwOf23BtnAT7BDH+oYD+/FxiP+ttgHOjIUHTogkyergBBVl6Oj2
qqhD9IF5CoAt0reJjXgzrEvjeeOwKoTkLvZT1vLmvaFx6JjJFGvTIikJgdf3K9Mu
63XQfyttUzM3BxG9lAsBzKXuOj9pK3TbHjfBU47wlUu1wOClYwzSN2ZKQNIRX2Ai
l1COlNycO5eYo02kHVPxxYeMODcOPSySVjHVxKSBJZkFqxYnU4bpKBPMrorEVtIk
8SWTEEbrhrRrQMC+9JnQC/ubM9nbU4ATtYOsgYVfQYn+HOOZpWcecC5iIpl8WlY2
vfwRogIifG0s/Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:40:18 2025 by rpki-client