Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: Iw7IaNMSo+Uzv8HVMcVSVtsrV05ONjxfDTT7i+hOFnI=
Subject key identifier: 1D:1B:04:E9:09:E6:C2:03:36:B5:BF:93:6E:32:1B:09:57:95:59:8B
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 019A72CAABFA8506CA3291CDD63412704096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 071E
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: DpGojqYy/ZhFqPCwMgo2J+6Sgd53d1/AcOYovmWqO4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ab:fa:85:06:ca:32:91:cd:d6:34:12:70:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=1d1b04e909e6c20336b5bf936e321b095795598b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:5d:2f:92:15:08:07:88:a0:00:87:33:5e:
86:08:86:88:5b:c8:86:d2:bd:bc:fb:72:ed:51:4a:
f2:9a:f4:33:9d:3e:e6:f6:1d:6e:7c:64:65:08:4f:
4c:15:f0:d7:5a:a7:75:fa:b2:3e:0a:44:3e:c4:7a:
a0:19:39:48:90:b3:be:5b:0b:b3:8c:f0:67:ad:64:
88:f4:9a:77:e1:3d:d2:3f:df:69:ee:31:41:d2:73:
f2:3f:77:27:2a:90:bb:a5:7a:15:da:6c:37:0c:55:
13:4b:ab:21:f7:9b:e8:ac:ea:9e:15:bc:6c:c6:5f:
55:5b:97:22:a1:fb:2b:57:c8:e9:aa:7d:cd:e9:ce:
ce:8d:ef:03:c1:40:9f:8a:79:f2:c9:e6:9c:19:17:
a3:88:bc:f0:73:b2:dc:ba:50:ae:e8:99:b3:0a:9f:
90:b8:2c:35:f2:4c:24:7d:08:bd:56:9b:2b:03:90:
6d:5d:90:9c:e9:99:df:5b:51:be:9d:e9:f5:d6:96:
44:8d:e0:7b:41:f9:c6:ea:89:b3:12:48:0e:2e:16:
06:56:d0:5b:70:f9:74:16:a2:24:2e:95:0b:3f:c8:
7b:86:90:a0:3a:2f:0c:9d:ec:7b:c7:5b:82:27:a8:
aa:05:c3:fd:e9:bb:81:b4:21:6f:f1:9d:f1:4f:2c:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:04:E9:09:E6:C2:03:36:B5:BF:93:6E:32:1B:09:57:95:59:8B
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:9b:0d:d5:ea:b1:0e:ad:b8:c5:f1:19:06:e6:13:5d:75:
e7:63:dc:3d:58:f8:28:37:2f:8c:0f:ab:dc:a5:c9:df:01:fb:
1c:bb:03:05:07:c1:74:d9:50:06:c6:f8:a8:a0:dc:ac:52:df:
c6:d9:08:48:53:c6:4e:0d:7e:cb:d1:0f:bc:8f:a4:c7:d4:cc:
27:58:48:59:f2:87:0b:0a:f9:ca:86:31:fe:a7:7a:85:27:6a:
95:4f:e3:90:5d:f6:2c:d8:3e:e0:4a:1d:e3:21:5e:0c:41:2d:
b4:7a:6d:2a:52:2b:47:ba:93:f3:92:47:fa:2a:a5:33:2e:18:
43:27:66:f2:40:d5:48:26:6c:60:a5:4d:40:f7:d3:34:bb:c1:
72:c4:8e:67:b0:69:a2:6d:0a:88:45:02:6c:b5:26:4b:6a:bc:
a3:59:ab:2f:19:84:ee:ff:7c:c3:14:dc:88:ec:9a:4a:b2:7e:
1a:d8:d1:b4:ea:6d:59:d9:26:67:6e:c7:5e:ec:21:3e:6a:2b:
09:0d:5f:79:d3:19:09:39:96:2e:09:10:46:9b:bd:42:1a:50:
b9:f2:ef:e8:3d:5e:84:a2:4c:4f:30:f5:c5:a3:d2:58:08:15:
ea:e1:c0:c3:f5:5a:c7:8e:89:34:51:0e:f7:91:3e:ae:35:91:
47:f6:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:27:00 2025 by rpki-client