Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: gRxcfYxgH9Z+tbNmXHQIBU8ltVL3f9d2+CIO9EH41zA=
Subject key identifier: AA:72:1F:DC:5F:E2:F6:F8:0F:BA:F0:A1:7B:F4:34:D7:03:66:CF:CF
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 019951F90C3F98EAD1E15EF1D8CA231039F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 10:01:39 +0000
Manifest this update: Tue 16 Sep 2025 10:01:39 +0000
Manifest next update: Wed 17 Sep 2025 10:01:39 +0000
Files and hashes: 1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: 4+M+2nXN4nd+103mO8/j4SfFTKJd0nCrZwP2N6GXaOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:0c:3f:98:ea:d1:e1:5e:f1:d8:ca:23:10:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Sep 16 10:01:39 2025 GMT
Not After : Sep 17 10:01:39 2025 GMT
Subject: CN=aa721fdc5fe2f6f80fbaf0a17bf434d70366cfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:9e:af:d3:c7:68:4a:e2:e5:41:a5:f2:46:
34:b1:ba:50:d0:fb:ab:42:d7:37:57:ff:81:6a:48:
61:4b:a8:04:0d:d5:f3:f3:9b:92:e5:1d:7c:af:ca:
44:7b:ac:a5:a6:bb:31:9a:cb:77:98:70:b4:46:10:
5d:68:16:70:72:fb:d9:ba:8a:58:6d:ba:cb:c8:4f:
7b:60:e9:8e:68:14:a1:6f:0e:0d:bb:7a:48:46:a8:
9b:ba:42:f2:a2:2a:ee:5c:15:f3:be:f6:46:e1:be:
48:e2:48:4a:da:01:44:5c:08:be:9a:86:a8:8b:db:
b1:d6:c9:8d:e5:dd:eb:c0:fb:17:12:db:e1:4a:5a:
c5:34:f0:9e:79:83:20:de:4a:24:b9:8c:24:d0:c4:
52:0b:e4:76:93:14:85:4e:67:32:3c:31:a3:de:e5:
05:2e:f2:e1:6a:d9:5e:9d:25:a3:5f:73:24:5f:2c:
ea:f3:e4:d3:89:eb:bb:d6:49:81:2a:55:71:54:62:
24:b2:44:c5:3f:a3:2e:55:0a:7a:d7:6d:26:53:06:
58:72:e0:b1:4e:fd:69:86:ed:64:6e:5f:33:63:be:
09:13:d6:2c:1d:07:22:a8:9c:c2:ed:7f:de:3c:18:
91:2c:51:a9:28:16:9e:92:79:f0:fb:ba:43:d7:a6:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:1F:DC:5F:E2:F6:F8:0F:BA:F0:A1:7B:F4:34:D7:03:66:CF:CF
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:18:93:83:5d:f4:14:ef:db:10:f7:47:0c:0e:46:b3:3c:df:
cb:91:f1:1b:b6:0f:45:45:cd:eb:c8:06:b0:b2:38:37:e8:aa:
03:2d:f6:a6:d7:d7:bd:c0:68:9c:26:53:02:f9:04:40:3d:fd:
77:ef:33:d3:99:2c:f6:5b:45:05:7d:79:9c:66:50:28:82:46:
9b:15:fa:ef:76:ff:7d:54:e5:5d:c8:76:98:e8:b2:33:be:da:
f7:81:11:c1:ea:03:1a:d9:1b:95:17:d2:73:92:81:f1:10:5b:
9a:9d:db:64:a9:24:1a:86:a8:a2:6b:4d:05:70:b6:e4:9f:87:
25:6a:71:5c:79:a3:c0:d2:9d:0f:36:f2:68:2a:90:f8:dd:43:
a1:12:f3:be:62:5d:65:84:2f:e3:ff:14:80:0b:95:bb:05:27:
a0:ce:63:e1:20:33:3f:62:f2:b8:f5:7f:3f:b4:88:5d:da:af:
e1:dd:7d:d2:18:48:9b:a4:cf:ec:33:30:3d:6f:e5:c5:a1:a1:
88:28:41:18:ae:19:84:39:67:82:ea:28:6a:46:02:06:35:e5:
10:67:4a:ad:b3:cb:e0:e7:36:a8:1f:a6:8b:3c:c3:e7:21:df:
e3:e2:67:04:c2:f6:9d:6a:d9:2e:38:9a:19:cf:ac:7e:f8:94:
55:07:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:06:07 2025 by rpki-client