Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: +U+8MMmzlz4Wd528lH4WtNonIvsRX5BwWJWR6/52+7U=
Subject key identifier: E2:6D:F8:6C:53:2C:78:97:B1:DB:66:99:FC:05:57:09:21:D0:B0:4B
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 01984B5475E1F5351C4739FB5E2958F93B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 10:01:22 +0000
Manifest this update: Sun 27 Jul 2025 10:01:22 +0000
Manifest next update: Mon 28 Jul 2025 10:01:22 +0000
Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: KytZ6OLY9QZtsEx0V7iE+RQMRDR0PDCFeX6IoPKE+KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:75:e1:f5:35:1c:47:39:fb:5e:29:58:f9:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Jul 27 10:01:22 2025 GMT
Not After : Jul 28 10:01:22 2025 GMT
Subject: CN=e26df86c532c7897b1db6699fc05570921d0b04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:d2:82:ff:20:ec:16:ef:ff:ac:39:99:bf:
7c:8e:04:55:27:06:1c:d2:8b:9a:66:c4:8d:da:af:
1e:07:7b:07:d2:93:5b:0b:82:b3:ec:6a:47:f9:74:
e9:ae:0e:a1:43:6b:f9:50:0a:74:4c:be:34:52:85:
f9:02:c0:93:19:5e:0e:60:c2:8a:2b:e6:e7:71:04:
5b:4e:f8:ae:7c:db:2d:ab:08:99:66:15:f4:f8:60:
93:21:e8:c6:49:02:4d:82:74:62:c8:7c:d4:d8:ea:
be:ec:3e:37:7f:29:dc:5f:ee:86:f0:a0:25:08:25:
75:f5:84:0d:21:7b:3c:03:a7:07:6e:52:6b:24:a1:
f5:73:53:81:f0:13:fa:a9:72:1e:75:43:74:53:d1:
3f:1d:cd:05:68:25:93:c7:bf:11:56:d5:3e:ed:16:
fd:5e:76:f5:bc:6d:e6:f6:06:98:b5:1e:71:b2:63:
48:d3:50:7b:0d:ea:25:89:5d:47:0b:19:86:8d:2b:
c8:e1:5d:16:c4:f5:ed:21:d3:28:fa:a0:72:25:c6:
09:30:80:84:12:13:c9:0f:18:da:ce:49:06:71:9a:
d8:9b:9a:7b:90:51:7e:b8:1d:17:07:60:22:38:ee:
e0:96:e7:ff:01:b2:46:91:c7:c5:00:8b:bb:3f:a0:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:F8:6C:53:2C:78:97:B1:DB:66:99:FC:05:57:09:21:D0:B0:4B
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:bb:08:f5:87:1c:c0:03:7a:2d:17:63:16:3a:b8:81:7d:
8b:00:4c:b7:45:ea:58:01:bf:9f:57:37:b8:ba:0e:d8:fd:78:
24:0c:a2:fc:b8:12:32:ad:21:6a:b5:19:8b:f6:f5:09:37:c3:
9e:85:81:49:cf:a2:c0:a0:28:72:bf:74:53:c8:2e:fa:fa:09:
bb:54:e8:a4:cb:51:c3:e5:43:00:33:61:74:1d:ef:82:67:24:
c2:ca:a7:ec:22:17:58:a6:a7:15:4e:54:ac:f4:36:24:6c:ac:
0e:45:70:6c:48:48:14:d8:15:4b:b7:39:61:43:bb:78:fd:59:
1e:df:f5:6e:b7:a9:37:1b:f8:93:c3:90:91:a7:f3:a6:0c:92:
2d:b2:d2:ee:7e:79:d4:8a:14:27:c2:8a:6a:76:06:2b:11:df:
44:1f:f7:33:06:2d:be:06:a5:c0:1f:1e:53:dc:9d:a7:87:46:
88:28:a3:d1:a3:30:8b:70:23:87:50:87:66:84:46:7d:b4:ad:
13:57:12:20:6e:c7:bd:2c:ba:a5:7d:03:df:11:2e:81:62:ff:
38:fb:2b:54:8b:f2:50:50:51:8a:91:5e:2a:49:31:40:a1:a9:
08:28:ad:d0:ff:f5:51:c8:f7:1c:90:d0:eb:b7:c1:93:cf:db:
5e:a1:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:20 2025 by rpki-client