Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: cIbpKwP/8VvEPjH8Tq/zFDcQxmSw0vQHSIDlMzkwu9w=
Subject key identifier: 4D:F0:E7:1D:D4:93:6B:22:94:EA:34:3A:BE:59:AD:ED:E8:72:FD:5E
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 019A54BFABB2D85A5D08C4E61E9AC8BC4F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 16:00:38 +0000
Manifest this update: Wed 05 Nov 2025 16:00:38 +0000
Manifest next update: Thu 06 Nov 2025 16:00:38 +0000
Files and hashes: 1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: qxcr3EVw2mFkUMQx/q+5pMtx8jFvY7EjFSITRj4HWwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:ab:b2:d8:5a:5d:08:c4:e6:1e:9a:c8:bc:4f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Nov 5 16:00:38 2025 GMT
Not After : Nov 6 16:00:38 2025 GMT
Subject: CN=4df0e71dd4936b2294ea343abe59adede872fd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:e7:84:6c:95:39:c4:4b:ab:25:61:64:fa:
73:6c:1d:b2:c6:22:d3:cd:d5:f4:84:cf:7e:b8:50:
30:87:a4:79:bc:7d:d5:8f:ac:e1:30:af:e9:1a:37:
b9:3c:48:2f:b4:8c:c6:17:1f:a0:ba:2d:64:bc:3b:
53:ef:3d:c8:08:1a:71:ae:ff:d9:fa:6d:0f:6d:7e:
2e:25:9d:d7:94:71:49:8d:33:9f:f2:de:60:64:c7:
57:3b:af:87:28:fe:8a:02:de:f1:ca:aa:71:52:4d:
d1:a0:31:27:94:e8:39:c9:50:d6:cd:5a:e7:bc:94:
99:55:17:d9:ac:62:77:66:ac:c7:16:d9:e6:32:54:
e0:8a:d8:23:15:7a:32:cf:14:2c:81:05:c0:af:71:
38:2b:a9:26:b6:aa:1f:5f:5d:6b:01:60:75:45:1f:
83:f0:3a:a1:f5:02:e3:b3:d5:a6:2b:61:3d:6e:bf:
9b:94:09:77:9c:19:b8:29:ca:5d:6c:4c:56:be:9d:
01:4f:d5:03:53:cc:9d:44:16:ba:42:46:d4:ee:db:
88:8b:54:d3:74:a0:db:00:97:68:76:4e:05:4a:0a:
e9:62:eb:e8:04:90:7d:82:ee:b2:99:37:a1:56:ca:
50:b4:10:24:49:e1:1f:b4:e4:69:6f:09:00:9c:42:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:E7:1D:D4:93:6B:22:94:EA:34:3A:BE:59:AD:ED:E8:72:FD:5E
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ef:00:09:d8:56:9f:02:84:bd:c6:35:16:29:27:c1:a1:16:
29:a1:48:50:c8:01:f7:44:fd:cc:fc:f8:3f:74:84:44:7c:5a:
88:f2:87:67:26:3f:2a:6c:f4:ea:13:93:1f:95:13:24:11:ba:
c5:a6:3f:3f:ae:07:dd:29:0a:d2:2e:fd:81:78:2e:03:e1:1c:
2b:ab:a8:82:ce:b9:75:ea:2a:97:57:c8:c5:60:29:55:ba:9e:
f7:70:0d:4b:95:1a:94:29:a7:81:4c:1b:63:de:55:65:fb:31:
4b:ff:61:19:ed:34:61:c3:a1:bb:ce:40:92:6c:b9:d2:fb:5b:
e1:b1:70:ba:4a:9f:70:6c:54:51:e2:05:6b:38:49:aa:1c:e8:
d1:0b:f9:0a:56:8b:fc:a5:c9:bb:76:a2:3e:b2:f1:ca:86:29:
e2:ea:dd:6e:af:1a:4f:f7:3b:d0:76:12:ca:b5:3d:a3:44:a5:
8c:0f:22:81:c3:bf:a9:99:6d:5b:9a:3c:98:5f:51:15:f4:d1:
9d:f5:91:e8:44:37:96:2f:71:76:f8:6c:fb:40:75:84:86:a0:
1d:dc:cf:86:56:e8:25:62:26:d6:57:41:5f:2c:c4:a0:73:f6:
11:7b:7e:d6:e4:0f:2e:46:84:58:76:50:66:79:48:b5:9f:66:
c6:5a:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:33 2025 by rpki-client