Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier: fIW/x8Za5ep2fKFgqk5EoSXP18jdZftRo3ID8MFu50o=
Subject key identifier: 77:D4:6C:85:68:40:BF:97:BF:E0:84:7A:3C:44:22:3A:5F:BD:D1:5B
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 019838DFB9B00A1529F766FBCF4BCE82CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number: 1601
Signing time: Wed 23 Jul 2025 20:00:42 +0000
Manifest this update: Wed 23 Jul 2025 20:00:42 +0000
Manifest next update: Thu 24 Jul 2025 20:00:42 +0000
Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: Xj8115tD6AuGTIFS5jA4AnH5edVY5W+vp/MqUuk6GPg=)
2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:b9:b0:0a:15:29:f7:66:fb:cf:4b:ce:82:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Jul 23 20:00:42 2025 GMT
Not After : Jul 24 20:00:42 2025 GMT
Subject: CN=77d46c856840bf97bfe0847a3c44223a5fbdd15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:7a:5b:14:3c:75:6e:1f:59:b1:15:89:8d:
a0:8d:fb:6f:11:42:c3:2b:1a:3c:76:ef:48:1a:60:
57:c4:b5:b4:b7:ac:44:77:03:72:8e:b6:37:16:55:
b5:10:8e:d5:ff:64:e6:8e:af:a4:0b:6a:e2:71:a7:
ca:86:03:79:a9:90:81:d4:6a:1b:79:d2:49:22:bb:
8e:ed:d9:ec:44:6d:c8:66:0b:8c:cf:51:ce:b0:4d:
3a:be:cc:11:94:88:7a:ff:47:df:ad:a2:3c:45:a5:
68:86:d2:72:d7:a7:17:e9:7d:12:48:bf:47:71:50:
ab:bd:e3:a6:7d:52:6f:01:fa:56:b1:e7:9e:5d:54:
95:d0:63:57:92:4b:ec:24:9b:29:00:6f:40:67:72:
4f:47:06:0e:3f:77:44:b8:6c:3f:3a:d1:21:68:52:
3e:35:48:16:58:58:9e:ed:7e:59:48:82:12:b5:4b:
00:33:64:35:eb:3b:06:64:67:3c:70:1e:0a:03:6e:
1b:c3:b9:bd:12:77:af:65:f8:83:dd:22:c8:11:af:
ec:c9:a2:f6:e2:ba:76:23:ad:6c:98:fa:06:79:9a:
c3:ef:95:77:08:a7:e3:1c:15:0f:4b:bc:19:f2:a9:
cd:c7:04:a3:29:b7:e2:c1:f7:43:70:e3:a0:80:2d:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:6C:85:68:40:BF:97:BF:E0:84:7A:3C:44:22:3A:5F:BD:D1:5B
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:ff:de:22:7d:31:2c:d8:bd:35:99:37:5c:5b:94:04:b8:
71:5d:48:68:39:03:35:f6:e7:b5:49:27:04:ce:0f:69:59:c7:
34:f3:81:fd:3a:b6:cb:d9:50:0f:26:e3:03:b7:50:96:32:1b:
62:0b:f1:6e:e2:2c:23:7c:d5:cd:b8:77:9e:04:c0:bf:a6:91:
b4:2e:8e:73:ca:7a:29:cb:d0:93:14:87:54:3a:98:09:b9:9a:
42:bd:24:2d:7e:1c:96:d0:f7:50:9f:17:b6:e6:f8:5b:71:9c:
04:5d:55:0a:95:49:8e:71:34:1a:3c:6c:14:db:3a:eb:7a:f8:
78:6f:96:99:68:bf:84:4d:48:ad:47:f7:0d:d4:81:71:0b:b3:
9b:38:39:77:bd:18:79:80:1a:70:87:b5:15:b7:82:3c:9a:ee:
a4:4f:96:7e:c0:b8:72:8b:50:52:3e:d2:b6:2b:d0:2e:50:da:
ef:93:a5:86:de:ed:e3:9a:0d:f8:da:dc:66:12:af:c1:d2:00:
30:6d:ee:4b:4a:f4:b7:54:88:28:6a:be:08:57:e8:0a:bf:f0:
0b:15:a1:bf:8a:37:08:ec:da:ee:83:47:06:43:52:ff:0a:5f:
57:fe:a0:dd:01:e2:16:7b:79:85:cf:70:90:d7:a0:24:87:09:
80:6d:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:26:39 2025 by rpki-client