Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: x5cQH+BhgGF+IEeKgu0Mzb7qfm6y4VjykYR9M9dzSQM=
Subject key identifier: 3E:B1:AC:F2:35:9E:53:F1:4A:36:27:66:19:1B:D8:3B:A6:F0:60:9B
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 0198C6499DBF5700777ECDAF4CB926C79FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: CF
Signing time: Wed 20 Aug 2025 07:02:49 +0000
Manifest this update: Wed 20 Aug 2025 07:02:49 +0000
Manifest next update: Thu 21 Aug 2025 07:02:49 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: 07j2VQkHjLdBIAhvf66+6GmLw14d+aYxXA2pMv0gYNI=)
2: nHxs1XMfnqzh-Z8aeIMb_NiElkE.roa (hash: 8Qy8fF7R1NwaP6gn0wt2uKO1stfFsvaIv7LK8MDpXo4=)
3: uPdsoPPsIplTvcCyAbcJMwYg9pQ.roa (hash: csIN1YT5O+6UepoAW4L5bp8f0Qp/luUK9hGbpbp+j+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:9d:bf:57:00:77:7e:cd:af:4c:b9:26:c7:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Aug 20 07:02:49 2025 GMT
Not After : Aug 21 07:02:49 2025 GMT
Subject: CN=3eb1acf2359e53f14a362766191bd83ba6f0609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:ec:50:d9:7c:c2:66:81:55:f6:0d:e3:c1:
b6:ee:86:b1:f4:60:34:de:f8:4a:b9:b6:94:f2:ff:
be:5c:69:4c:5a:9d:60:11:71:ae:ce:cf:1d:97:d1:
a7:f7:4f:7f:d8:ba:5c:ef:b3:c6:bf:fb:17:be:6a:
1f:64:2d:a5:9b:cc:1c:9d:14:c8:d9:4d:aa:3c:38:
fd:ba:81:de:30:9b:04:52:7f:9e:95:98:86:83:75:
12:c4:09:69:73:e3:a8:fd:66:5a:f1:67:7d:ef:51:
24:01:b9:dd:4e:e1:a0:c8:da:cc:6f:a8:ae:6d:83:
f2:f3:66:a5:3f:5e:08:6c:97:f9:6e:4a:0c:bd:cb:
6e:e5:01:44:a6:4c:4b:d3:02:10:f9:5f:19:dd:15:
61:41:4f:8b:d9:96:e2:21:06:ad:2e:ef:bd:e6:ac:
1f:5b:aa:d0:d8:0a:35:6b:5e:7c:01:e5:b7:57:c3:
12:4e:a8:f1:96:8b:fb:0a:19:a5:17:35:67:ea:a0:
fe:32:7f:87:b6:10:fb:e0:82:6c:3e:de:08:79:62:
cf:2b:ee:38:64:8f:65:b8:90:97:a2:41:29:df:61:
de:d6:11:12:82:6a:37:0b:64:ce:53:32:32:1b:d1:
e9:9f:47:18:e5:99:6a:70:a5:23:ab:23:e6:f9:ed:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:AC:F2:35:9E:53:F1:4A:36:27:66:19:1B:D8:3B:A6:F0:60:9B
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:70:6a:c7:9a:2d:df:e9:87:2e:a9:10:d1:5f:2e:c3:9e:
66:2e:8f:dc:ae:df:27:f3:b4:a5:92:ef:3d:8d:0f:63:cb:75:
fb:47:64:d8:fe:15:2a:1e:da:52:d3:ab:3f:9f:2b:b2:81:65:
47:93:af:4e:f8:26:87:2d:94:73:c5:5b:b2:2a:1f:f5:95:d1:
05:fa:3f:b8:83:12:74:19:d0:c9:9a:a3:2c:55:27:59:f8:0c:
27:25:1a:2d:11:e2:b2:95:c8:06:7e:ea:e9:88:99:c9:64:50:
f4:ec:28:dc:fe:69:b2:28:b2:a4:55:6e:8c:70:48:88:1c:03:
69:0f:20:99:6e:be:3a:cf:e4:92:fc:83:0a:ec:f9:22:0c:48:
34:70:c3:3b:3f:94:f0:d9:b2:31:cd:e5:f9:9f:c7:2f:c5:71:
df:87:54:43:06:fb:18:49:a9:04:3c:12:13:28:22:e6:6e:4b:
e8:69:89:2d:e9:88:7e:42:a9:df:8d:af:16:1b:59:a1:87:89:
8d:e1:1f:6b:20:53:a1:d1:50:41:95:ca:7e:fd:e3:d4:4c:dd:
50:a3:4f:fc:0d:ad:51:b9:b6:a7:7c:8c:06:1d:3d:02:eb:b3:
bb:bc:57:4f:68:9e:b0:e9:10:24:78:b0:ef:3e:b0:10:ca:cd:
02:21:0c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGSZ2/VwB3fs2vTLkmx5/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjUwODIwMDcwMjQ5WhcNMjUwODIxMDcwMjQ5WjAzMTEwLwYDVQQD
EygzZWIxYWNmMjM1OWU1M2YxNGEzNjI3NjYxOTFiZDgzYmE2ZjA2MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fsUNl8wmaBVfYN48G27oax9GA0
3vhKubaU8v++XGlMWp1gEXGuzs8dl9Gn909/2Lpc77PGv/sXvmofZC2lm8wcnRTI
2U2qPDj9uoHeMJsEUn+elZiGg3USxAlpc+Oo/WZa8Wd971EkAbndTuGgyNrMb6iu
bYPy82alP14IbJf5bkoMvctu5QFEpkxL0wIQ+V8Z3RVhQU+L2ZbiIQatLu+95qwf
W6rQ2Ao1a158AeW3V8MSTqjxlov7ChmlFzVn6qD+Mn+HthD74IJsPt4IeWLPK+44
ZI9luJCXokEp32He1hESgmo3C2TOUzIyG9Hpn0cY5ZlqcKUjqyPm+e0GcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6xrPI1nlPxSjYnZhkb2Dum8GCbMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrhwasea
Ld/phy6pENFfLsOeZi6P3K7fJ/O0pZLvPY0PY8t1+0dk2P4VKh7aUtOrP58rsoFl
R5OvTvgmhy2Uc8Vbsiof9ZXRBfo/uIMSdBnQyZqjLFUnWfgMJyUaLRHispXIBn7q
6YiZyWRQ9Owo3P5psiiypFVujHBIiBwDaQ8gmW6+Os/kkvyDCuz5IgxINHDDOz+U
8NmyMc3l+Z/HL8Vx34dUQwb7GEmpBDwSEygi5m5L6GmJLemIfkKp342vFhtZoYeJ
jeEfayBTodFQQZXKfv3j1EzdUKNP/A2tUbm2p3yMBh09Auuzu7xXT2iesOkQJHiw
7z6wEMrNAiEMuA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:36:04 2025 by rpki-client