Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier: MB7MmgLp6fiGvZdEp2rLn/yeU6KsmpnhCyUie5D1juc=
Subject key identifier: 7F:6F:A2:A3:EE:D7:68:8D:90:1C:C9:FA:2F:B5:B1:74:04:C2:75:60
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial: 019A72258E1FD07B0424EF810D9B86FD2641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number: 0555
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: qIWkx8AtTofR3dl1UQW+twfAK52qvmkIVLltwhtl09I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8e:1f:d0:7b:04:24:ef:81:0d:9b:86:fd:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=7f6fa2a3eed7688d901cc9fa2fb5b17404c27560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:1b:9d:2e:80:8c:3d:77:6d:f2:25:69:ac:
e9:16:83:d2:1c:d1:13:8a:7a:24:01:0a:9d:dc:23:
e0:2d:2c:f8:4c:9c:71:05:50:f9:03:7d:c3:0a:f8:
53:37:2e:a3:ea:83:68:72:6a:2b:8e:3f:17:da:17:
87:a7:12:2e:5a:36:ba:1f:1a:34:7b:a3:a3:59:10:
0f:44:3c:ff:10:63:d3:49:c4:d8:b2:01:24:67:11:
7c:b8:0b:6f:2e:59:78:fb:e9:b5:9b:9b:16:2f:ed:
10:1f:1b:b7:64:ad:67:86:00:47:10:4a:79:57:53:
87:12:f0:b9:a7:89:63:e1:8d:ba:f0:f5:ec:6f:90:
06:70:48:c3:10:61:d9:a2:3f:9c:ae:d2:30:89:a9:
5c:37:25:01:5a:51:6f:76:e6:f6:08:f5:2e:81:ba:
8f:d9:02:a2:d8:5e:d0:2f:8f:12:db:67:a0:bb:00:
17:57:46:f7:31:a1:38:ea:45:95:3f:22:c0:81:69:
48:a8:f4:7a:99:70:67:24:2f:a4:64:9b:1c:38:60:
05:31:5c:f0:3b:1b:17:c3:06:e8:83:a3:ce:8c:93:
7b:09:67:dd:8c:68:f5:01:ab:65:f4:ce:9b:e1:a6:
d4:c3:72:e2:f9:f9:e6:f2:6a:fa:ee:b6:b4:8a:55:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:A2:A3:EE:D7:68:8D:90:1C:C9:FA:2F:B5:B1:74:04:C2:75:60
X509v3 Authority Key Identifier:
keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:70:b7:21:98:c7:aa:ca:11:15:7d:68:11:c1:67:9d:dc:13:
0f:c1:f3:44:d8:ae:28:ef:75:46:35:99:c2:da:05:8c:5f:b0:
57:6b:3e:b0:8b:e7:d2:17:22:71:ec:8f:d0:3c:5f:dc:24:15:
ff:ee:fe:6f:60:95:20:e9:11:fe:0b:cc:12:12:4d:77:03:a3:
5c:bd:3c:7d:e5:19:c7:6c:23:9b:30:4a:d6:b9:6b:d7:aa:2c:
5b:03:e1:99:8d:bd:0b:73:0f:28:14:d5:2c:0d:e6:dd:29:b5:
a1:66:13:b4:c4:a9:5f:40:58:44:96:1b:dc:66:6b:8f:2f:7a:
ea:e1:88:c9:56:13:b2:87:ca:d3:ef:cb:78:1b:96:e3:d7:5a:
8b:e9:8f:45:71:9d:6c:e1:53:1c:b2:d1:8c:03:97:88:ac:8a:
39:40:9a:52:84:df:05:81:9c:a3:ee:be:af:09:13:17:32:51:
25:19:71:d4:69:99:12:2b:e1:37:dd:36:af:a9:bb:8f:3c:e7:
96:09:1d:5a:04:2a:cc:1f:df:25:be:3d:5c:62:26:f3:3e:90:
ef:9e:b3:49:2c:9f:d2:ee:b1:01:0e:af:0e:5c:d4:0d:26:5e:
19:b7:56:74:58:5d:dd:7f:40:59:f8:ca:02:4b:e9:99:69:6f:
aa:96:3d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJY4f0HsEJO+BDZuG/SZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy
YWVhMzAwHhcNMjUxMTExMDkwMDU1WhcNMjUxMTEyMDkwMDU1WjAzMTEwLwYDVQQD
Eyg3ZjZmYTJhM2VlZDc2ODhkOTAxY2M5ZmEyZmI1YjE3NDA0YzI3NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqEbnS6AjD13bfIlaazpFoPSHNET
inokAQqd3CPgLSz4TJxxBVD5A33DCvhTNy6j6oNocmorjj8X2heHpxIuWja6Hxo0
e6OjWRAPRDz/EGPTScTYsgEkZxF8uAtvLll4++m1m5sWL+0QHxu3ZK1nhgBHEEp5
V1OHEvC5p4lj4Y268PXsb5AGcEjDEGHZoj+crtIwialcNyUBWlFvdub2CPUugbqP
2QKi2F7QL48S22eguwAXV0b3MaE46kWVPyLAgWlIqPR6mXBnJC+kZJscOGAFMVzw
OxsXwwbog6POjJN7CWfdjGj1Aatl9M6b4abUw3Li+fnm8mr67ra0ilUfWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9voqPu12iNkBzJ+i+1sXQEwnVgMB8GA1UdIwQY
MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt
MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx
LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnC3IZjH
qsoRFX1oEcFnndwTD8HzRNiuKO91RjWZwtoFjF+wV2s+sIvn0hciceyP0Dxf3CQV
/+7+b2CVIOkR/gvMEhJNdwOjXL08feUZx2wjmzBK1rlr16osWwPhmY29C3MPKBTV
LA3m3Sm1oWYTtMSpX0BYRJYb3GZrjy966uGIyVYTsofK0+/LeBuW49dai+mPRXGd
bOFTHLLRjAOXiKyKOUCaUoTfBYGco+6+rwkTFzJRJRlx1GmZEivhN902r6m7jzzn
lgkdWgQqzB/fJb49XGIm8z6Q756zSSyf0u6xAQ6vDlzUDSZeGbdWdFhd3X9AWfjK
AkvpmWlvqpY9SQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client