
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: BYkanvaI3Y8DgaFDayn9Pmpaq85ZwjLPHQ97SOPz7ps=
Subject key identifier: A1:9E:73:B7:03:8F:68:71:A9:ED:40:11:FC:7D:BA:25:AA:61:40:39
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 019A3346A1CD2F528D550318761C84F8D524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0B5E
Signing time: Thu 30 Oct 2025 04:00:58 +0000
Manifest this update: Thu 30 Oct 2025 04:00:58 +0000
Manifest next update: Fri 31 Oct 2025 04:00:58 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: uP6gjR35wByYcFbvWa4Fo5G4SktHBkr79x6EQRk0kgM=)
2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:a1:cd:2f:52:8d:55:03:18:76:1c:84:f8:d5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Oct 30 04:00:58 2025 GMT
Not After : Oct 31 04:00:58 2025 GMT
Subject: CN=a19e73b7038f6871a9ed4011fc7dba25aa614039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:d1:8c:31:e6:ed:1b:4f:80:b8:be:6b:fe:
45:05:af:b8:8c:e9:8f:25:83:5a:c6:20:ef:2a:e1:
3a:e2:fb:54:80:55:3b:6b:7b:2a:1a:e3:4e:ef:2b:
29:aa:b4:60:d6:12:ce:5a:be:44:ea:3c:39:ca:75:
9c:b6:24:fb:8c:93:c7:b0:82:b7:b0:f3:6a:0d:af:
70:a5:d0:74:3d:5e:b8:8c:6a:22:e2:2f:f4:78:bb:
a5:42:5a:dc:a7:07:e7:1c:74:39:50:d1:c1:ac:bb:
c0:09:e1:f7:16:13:cd:4d:d1:f9:d2:65:b4:68:29:
b6:85:bc:2d:38:78:77:14:af:b5:de:2a:b5:53:53:
f7:2e:c7:c8:1a:26:52:f2:8b:1d:9b:29:10:d5:53:
e1:59:2b:db:d6:39:b8:0e:ce:9c:4a:94:97:3a:00:
9e:41:fd:dc:b5:b5:0c:ed:9a:79:eb:73:32:e6:32:
59:79:48:e1:10:6b:38:ad:64:9b:f1:b8:02:6e:a9:
24:b3:d3:3d:b1:f6:06:11:fd:be:a4:14:c7:4e:73:
8a:01:86:ee:1b:6d:34:2a:bc:2a:5f:94:60:c3:44:
a7:50:2a:07:71:31:fa:2b:17:05:ae:fc:37:a2:be:
00:f2:e9:4b:1a:c4:11:68:02:3b:03:d4:e9:a6:3c:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:73:B7:03:8F:68:71:A9:ED:40:11:FC:7D:BA:25:AA:61:40:39
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:fe:6c:c0:b1:fb:c0:36:4f:1e:bd:35:a3:28:3a:ea:19:7a:
21:3e:5b:fc:79:e7:a0:ec:44:70:70:ea:61:ba:f5:46:70:db:
f1:88:4a:66:d7:af:31:56:59:a4:cb:14:40:f6:5d:93:cb:37:
c9:f6:af:02:ce:09:fa:18:e3:96:71:1c:9b:36:18:55:ab:6c:
9b:f6:e1:70:25:e4:02:9f:8f:cb:d8:77:cc:f5:40:8f:c3:50:
b0:ea:bd:2d:56:50:ba:8c:ca:06:27:8a:8a:b9:53:76:ad:23:
69:3a:9b:39:22:27:89:5e:f2:c7:e0:8e:fe:1a:b1:e3:25:be:
be:48:0d:e9:af:bd:e5:b0:28:77:11:2c:50:bc:3a:5a:ab:38:
1f:6d:b2:94:52:2a:00:be:66:24:c3:51:2d:89:b8:ed:90:0b:
ed:dd:90:43:dd:a6:2f:e8:ee:ff:dd:01:b0:2e:ee:8e:3c:13:
6b:1f:79:03:60:85:fa:9e:6d:e6:eb:d3:07:cd:6d:8e:e3:26:
c1:01:0f:a2:e0:2f:65:1a:66:59:17:bc:1a:69:10:65:cf:74:
2b:76:b3:92:ed:1e:b1:3e:a7:8c:03:d0:4a:48:21:42:8e:9a:
ff:e8:e2:f9:cc:4d:a6:b0:7b:2e:51:ee:17:ad:dd:0a:48:4c:
66:a2:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:28:41 2025 by rpki-client