Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: WQdegNv/6KxhKM4RVm7XNxCwoiWlDf2OK2aKiJIjDIA=
Subject key identifier: CB:20:55:A2:1C:42:D2:05:C1:95:C7:05:6C:E7:4E:65:BC:F5:80:11
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019A066D1E7CA726824804E8AF534B8D3EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 073F
Signing time: Tue 21 Oct 2025 11:00:05 +0000
Manifest this update: Tue 21 Oct 2025 11:00:05 +0000
Manifest next update: Wed 22 Oct 2025 11:00:05 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: rAKhOPTOBu9zsU1/5dw0opLqoI5PzOfe8mUEGIJXQrs=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:1e:7c:a7:26:82:48:04:e8:af:53:4b:8d:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Oct 21 11:00:05 2025 GMT
Not After : Oct 22 11:00:05 2025 GMT
Subject: CN=cb2055a21c42d205c195c7056ce74e65bcf58011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:11:92:02:3d:c9:89:39:e8:f0:49:11:12:
6a:80:a2:c1:48:68:7b:37:ff:e1:c0:8c:03:0e:fc:
b0:ad:f5:ad:ab:8b:f1:d2:05:34:5a:78:a6:f5:18:
f1:d6:4e:fc:80:d0:95:e3:1a:2e:6a:09:37:c3:5c:
b1:90:e9:c4:b6:df:7f:b4:ad:b0:8f:4a:87:7f:b2:
89:07:9f:25:a3:1b:37:e7:f6:b4:58:20:a6:eb:f0:
d2:ba:55:66:d4:c4:a4:71:eb:44:a1:87:7f:b6:e9:
53:c1:5a:1a:63:fb:a1:13:01:64:a2:e4:2b:8a:6b:
21:8e:ec:ee:4a:09:1e:96:b0:68:01:3f:d3:ca:b2:
44:a4:9e:53:ba:81:21:ff:3f:4d:5a:67:e2:75:88:
0d:15:fa:ff:60:33:ff:29:4d:c8:af:37:d1:23:a2:
1f:ec:8b:99:15:51:c5:05:04:1e:90:6a:1c:39:ff:
a8:9b:1d:9f:fc:a7:6f:11:73:2b:f2:62:be:db:10:
55:e7:3e:c1:f9:83:7c:f2:3f:f9:a1:da:7e:85:7b:
25:5a:23:5f:62:f6:b9:7f:9d:98:4d:aa:26:fd:0a:
8a:ac:0f:0c:9b:8a:1f:7d:68:e9:e2:50:47:9f:83:
55:2a:80:ca:cc:24:82:45:94:f3:df:f4:1e:0a:ee:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:55:A2:1C:42:D2:05:C1:95:C7:05:6C:E7:4E:65:BC:F5:80:11
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:f7:c0:5f:3e:3a:ce:82:40:40:20:fc:fd:ee:9d:59:9c:
66:8c:66:82:10:7e:3d:43:31:74:cd:31:47:84:47:c2:e5:d9:
60:4d:c9:2c:fe:9f:da:9d:88:93:6c:63:9d:bd:90:08:47:35:
89:c2:88:f4:86:d6:29:6f:31:5a:83:21:d8:43:9b:ba:7b:9c:
34:a7:62:96:4c:92:fc:68:47:6c:4d:a6:92:c2:38:77:99:8c:
61:a3:4b:18:a6:c4:ff:e9:8c:e7:8e:72:d5:ab:06:7e:6c:22:
28:ce:a6:3f:d5:e2:c4:83:92:74:d5:84:2e:28:87:8f:8a:49:
77:0d:ac:9e:7d:41:d8:52:8b:47:59:32:20:be:20:8a:ac:81:
04:3d:f8:64:ee:2c:f9:3b:c8:e1:e4:f6:e3:de:d2:82:87:dd:
48:82:2b:dd:49:4f:28:4a:28:35:b6:c5:de:96:7f:a8:d1:ef:
49:d8:f6:5e:65:5a:f2:30:76:3d:cd:18:09:57:b8:5c:37:90:
40:09:73:f0:83:a7:18:33:99:41:a6:fb:60:1e:fd:24:fa:89:
f4:4f:cb:ce:56:1a:f4:e3:43:e2:15:9c:e5:85:3d:5b:66:0b:
85:1d:40:5b:65:8f:eb:e0:b5:7b:1a:f6:86:b0:40:b4:3b:0a:
b1:ac:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:14:03 2025 by rpki-client