Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier: hvBKibU9eyNG0b2EG42jbHLkpSm2/fqWMihPUxLg8go=
Subject key identifier: 13:5B:CA:E4:67:F8:7C:96:B0:75:97:18:B0:36:B2:7B:85:92:8B:02
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer: /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial: 019A03A35630D58D57946C44F5E00DBDE1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 22:00:27 +0000
Manifest this update: Mon 20 Oct 2025 22:00:27 +0000
Manifest next update: Tue 21 Oct 2025 22:00:27 +0000
Files and hashes: 1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: 1DTk+4Hi4aUEBdeRCgLD8rHmlMLbB9dxMnCgF5Kagig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:56:30:d5:8d:57:94:6c:44:f5:e0:0d:bd:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Validity
Not Before: Oct 20 22:00:27 2025 GMT
Not After : Oct 21 22:00:27 2025 GMT
Subject: CN=135bcae467f87c96b0759718b036b27b85928b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:67:2a:08:6c:30:6e:b4:27:09:2a:4e:b7:3e:
14:7c:a1:24:e1:6e:47:91:a0:77:8a:a5:61:a6:65:
35:ca:4b:01:18:83:01:1e:75:6c:7d:00:24:a6:6a:
ff:70:be:2c:db:7a:0d:97:0a:06:f2:75:77:fa:1f:
8c:40:65:96:9d:b7:a5:12:e7:5d:6a:0f:fb:0b:99:
bf:f0:04:d9:25:48:ce:c1:9b:f2:85:b1:b6:88:48:
f7:11:8c:9b:e7:ef:29:37:ab:44:53:26:22:48:ce:
89:4e:5e:20:ac:26:b3:5c:40:38:2e:03:fb:be:2c:
95:31:2f:30:c6:f2:d4:60:33:36:f0:07:ee:93:d0:
df:fd:bf:b4:87:49:61:73:7f:17:0a:1c:a0:e9:a7:
d5:60:18:72:02:6d:f6:96:fa:6f:48:9f:20:e2:5d:
1b:d1:ff:e0:10:6c:32:a3:d0:55:70:c9:6e:14:c7:
38:7a:9e:03:8f:9d:e8:5f:95:7e:c9:c6:d0:38:46:
d2:36:e1:72:2d:fc:54:a6:4d:e2:c8:52:ab:7e:0f:
e8:80:71:15:3c:7e:9c:0e:13:4b:90:c2:13:b4:c6:
ff:eb:03:f1:17:d1:7e:d5:72:ca:eb:a5:6c:e7:3c:
59:eb:ff:1e:69:c6:96:56:f2:9e:8e:e5:8d:e6:d0:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:CA:E4:67:F8:7C:96:B0:75:97:18:B0:36:B2:7B:85:92:8B:02
X509v3 Authority Key Identifier:
keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:70:f6:22:8c:6c:ac:9c:4f:93:7f:6a:9e:0b:fb:79:c4:
3b:27:97:de:a4:59:69:51:f7:82:ab:f4:7f:6e:07:61:00:b7:
b9:cd:17:5c:e0:e4:f2:7f:84:14:e9:bf:41:b0:4c:1a:06:ca:
d8:d2:29:c0:35:e6:26:f8:b0:ac:b4:48:67:de:af:28:6a:50:
9c:18:14:bd:17:de:81:0b:18:df:79:e2:73:a1:dc:61:6a:5a:
22:79:5c:b4:f5:34:b2:14:a8:6c:0e:1a:f7:49:1e:6c:a5:b3:
02:34:b2:6c:f2:57:a5:f8:36:7a:ec:4d:38:44:45:70:0f:83:
ac:c6:be:ff:1e:ae:c6:f8:91:39:19:a2:4d:4d:98:02:f4:43:
df:3f:32:c5:1b:36:14:52:2d:17:5e:48:90:01:93:88:8d:99:
74:81:b3:96:4c:87:f5:ba:26:27:fb:a5:6f:67:d6:2e:49:b7:
b5:12:be:03:f7:7c:88:8c:5e:21:5c:d2:0b:47:21:4a:18:c1:
69:ee:38:6f:ea:27:ed:61:df:6f:11:56:3c:c1:57:b7:97:bd:
82:5f:8b:69:b1:3d:d6:49:61:98:a6:4b:b0:d1:1a:5c:f8:1e:
b7:aa:a1:15:2e:7a:1d:ea:05:7b:72:de:ee:59:63:4a:30:dd:
52:71:a2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDo1Yw1Y1XlGxE9eANveG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTk2NjljMmI3YzBiMjVjMDdlNzkzMmI4YTFmOThiMGJi
ZWRjNGMwHhcNMjUxMDIwMjIwMDI3WhcNMjUxMDIxMjIwMDI3WjAzMTEwLwYDVQQD
EygxMzViY2FlNDY3Zjg3Yzk2YjA3NTk3MThiMDM2YjI3Yjg1OTI4YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WcqCGwwbrQnCSpOtz4UfKEk4W5H
kaB3iqVhpmU1yksBGIMBHnVsfQAkpmr/cL4s23oNlwoG8nV3+h+MQGWWnbelEudd
ag/7C5m/8ATZJUjOwZvyhbG2iEj3EYyb5+8pN6tEUyYiSM6JTl4grCazXEA4LgP7
viyVMS8wxvLUYDM28Afuk9Df/b+0h0lhc38XChyg6afVYBhyAm32lvpvSJ8g4l0b
0f/gEGwyo9BVcMluFMc4ep4Dj53oX5V+ycbQOEbSNuFyLfxUpk3iyFKrfg/ogHEV
PH6cDhNLkMITtMb/6wPxF9F+1XLK66Vs5zxZ6/8eacaWVvKejuWN5tBYYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNbyuRn+HyWsHWXGLA2snuFkosCMB8GA1UdIwQY
MBaAFHhZZpwrfAslwH55Mrih+YsLvtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2Njkt
ZmMzNTU5Njk2MjQ2LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2NjktZmMzNTU5Njk2MjQ2
LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvJw9iKM
bKycT5N/ap4L+3nEOyeX3qRZaVH3gqv0f24HYQC3uc0XXODk8n+EFOm/QbBMGgbK
2NIpwDXmJviwrLRIZ96vKGpQnBgUvRfegQsY33nic6HcYWpaInlctPU0shSobA4a
90kebKWzAjSybPJXpfg2euxNOERFcA+DrMa+/x6uxviRORmiTU2YAvRD3z8yxRs2
FFItF15IkAGTiI2ZdIGzlkyH9bomJ/ulb2fWLkm3tRK+A/d8iIxeIVzSC0chShjB
ae44b+on7WHfbxFWPMFXt5e9gl+LabE91klhmKZLsNEaXPget6qhFS56HeoFe3Le
7lljSjDdUnGiyg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:48 2025 by rpki-client