Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: iUOkMcUOLJSNsSLyeNWPiORRy8ZZLpO58GiCizm6pXo=
Subject key identifier: 4F:56:0F:BC:7D:93:FA:4C:9C:54:1C:1D:11:43:A8:DE:24:CA:49:6E
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 019A3E6EC0D55477268CAAA946342204504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 06BD
Signing time: Sat 01 Nov 2025 08:00:36 +0000
Manifest this update: Sat 01 Nov 2025 08:00:36 +0000
Manifest next update: Sun 02 Nov 2025 08:00:36 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: t8RIcHvoDfPHGTUQfk7Si4UWjje8QmVM4JGe3CwgrQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:6e:c0:d5:54:77:26:8c:aa:a9:46:34:22:04:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Nov 1 08:00:36 2025 GMT
Not After : Nov 2 08:00:36 2025 GMT
Subject: CN=4f560fbc7d93fa4c9c541c1d1143a8de24ca496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:a9:9b:cd:f3:8a:c1:cb:ce:ef:49:7f:a6:
3a:d4:13:00:f8:f5:99:a7:0f:11:69:da:af:d7:3d:
b0:88:03:bd:c4:9d:95:ca:62:fa:5f:65:87:e7:8c:
8b:d3:e9:f7:81:c4:1f:f5:40:19:bd:f8:9d:8a:3b:
4b:fc:a6:65:1d:c7:d9:50:60:e5:3c:bd:39:a6:18:
8f:1b:e7:fd:4c:02:f1:51:b4:aa:ad:3d:3c:40:de:
34:52:3d:44:b5:ca:d4:7e:11:a7:ad:75:1c:c8:0d:
c9:06:87:85:b3:7f:43:df:39:47:4e:7e:b6:4a:0c:
da:e4:29:80:af:6e:5a:6a:d6:84:98:ea:6f:f2:89:
3a:fd:99:42:a6:14:6f:53:67:02:48:3d:90:60:4e:
05:60:69:2a:e0:50:8c:58:e8:fa:41:76:72:8c:0e:
de:11:e0:19:86:e5:1b:09:3c:82:25:99:e6:3d:b1:
94:f8:bf:6b:71:0f:3f:87:c9:04:1a:49:23:d8:ca:
2b:d6:2a:f3:89:cb:8c:95:c7:89:10:03:03:c5:6d:
23:41:84:57:dd:c8:cf:96:e9:ab:7a:2b:87:ff:7b:
54:fd:57:bc:f0:3a:0b:f0:40:10:34:4e:18:f0:a2:
73:24:fb:97:d9:c2:29:f1:b6:0a:7c:1f:9d:fa:30:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:0F:BC:7D:93:FA:4C:9C:54:1C:1D:11:43:A8:DE:24:CA:49:6E
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:bd:44:d9:07:0c:77:02:e9:17:11:12:9a:48:4e:8b:34:
42:e5:63:f5:eb:23:16:a4:69:75:79:3a:eb:04:2c:0b:49:aa:
92:c4:ce:d4:40:3e:b9:27:92:94:d4:07:15:cf:f3:6d:d9:a5:
ae:5c:01:d5:99:08:52:67:c9:0f:1d:6a:d3:64:c9:84:74:9c:
00:a6:d2:01:c2:af:f2:da:a4:2c:6f:dd:81:c7:55:ba:e0:cf:
5b:91:4a:77:46:26:15:31:72:ad:2b:fe:2a:24:9c:f9:8a:15:
2a:3c:0a:94:8f:ca:a8:a4:60:19:36:0e:bc:6e:b9:24:53:af:
40:5a:26:8b:39:a4:30:37:32:96:a7:38:f2:df:43:99:fb:a2:
c0:c2:58:28:a4:b3:d2:6f:70:67:b8:41:74:28:4c:65:11:0a:
9a:5c:7c:22:f1:cb:81:8a:e4:01:0b:9e:d5:ed:11:94:d7:bf:
07:dc:21:a7:75:3c:4a:8d:1f:17:95:2e:9d:69:d1:76:91:c7:
c0:c1:a4:ff:5d:b9:da:c6:b4:eb:57:d6:dc:aa:9d:ce:5b:8e:
dd:1c:11:ea:33:6c:95:6b:aa:bd:97:1e:12:65:32:e4:64:83:
37:b7:79:4e:db:d4:03:30:d4:f9:14:f6:b8:fd:6b:ed:fb:9a:
4b:06:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:14:38 2025 by rpki-client