
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: ZsjtjzIrLRovNKwR6IsXQlwmPgjham9/YkiataEkPH4=
Subject key identifier: CC:C7:FE:3C:6D:36:C3:D6:84:BB:C3:A2:B5:FA:A6:F5:39:C3:3D:11
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 0199FBEC33FD17157381F4E419EA54259753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: VWAijP/KBAqJewRMbq6SKKepNURedp5VRbqQL0HzBSA=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:33:fd:17:15:73:81:f4:e4:19:ea:54:25:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=ccc7fe3c6d36c3d684bbc3a2b5faa6f539c33d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:b9:dc:9d:dd:8c:37:13:0a:d8:9b:8b:b4:
51:dd:8a:93:78:d2:07:b7:70:59:2e:39:66:54:c7:
b8:03:4b:1c:c1:05:06:5f:d1:9d:13:3c:88:ac:e8:
ea:92:3d:90:1e:e0:70:46:75:7e:33:55:92:c8:75:
89:f2:bb:5b:86:b8:ee:ca:fe:47:e4:a8:c0:ea:3c:
c7:7c:15:16:15:0b:00:c0:45:c2:40:75:01:b0:b4:
39:01:a5:72:5d:f7:5f:a2:99:f3:15:58:64:b7:ad:
a9:3a:c5:77:84:8e:06:34:3a:7c:5e:7d:6b:f9:20:
06:4b:13:7b:ee:07:cc:1b:20:ea:6c:ff:aa:38:bf:
0b:72:e6:8c:91:6e:1c:a6:07:ff:2c:19:09:49:2f:
df:38:a8:af:79:e2:40:93:f7:e4:55:12:29:70:8e:
24:2c:6a:bb:a9:9f:40:54:48:bc:b7:13:59:7b:14:
0f:ed:14:39:41:19:32:b6:65:5c:1d:c6:b9:6a:82:
fc:49:2d:4b:6e:12:85:f4:61:8b:fd:56:60:0d:8e:
e3:fc:fc:b5:6d:fb:1f:46:4a:a8:e8:2b:dc:77:30:
a4:13:9d:6f:e4:56:00:eb:d7:a7:3e:55:00:07:52:
ce:3b:27:fd:83:5b:b0:13:8e:56:f4:ce:8e:aa:02:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:FE:3C:6D:36:C3:D6:84:BB:C3:A2:B5:FA:A6:F5:39:C3:3D:11
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:37:6e:a6:3e:61:25:2e:67:ae:f9:c9:e4:df:a0:4d:19:
b9:76:09:41:db:5f:27:cb:80:d1:29:b7:70:5c:c6:45:ca:5b:
9d:32:38:a6:12:d5:af:d2:2a:7c:8a:d4:1d:8f:c2:0d:bc:3d:
b2:a4:c0:bb:b1:b0:94:be:0d:ac:3c:05:54:26:cb:ff:ce:cd:
a6:49:d2:38:6f:ed:0e:81:45:dc:d3:a6:eb:1a:0e:2a:43:fa:
00:bd:e4:e0:19:e3:63:6f:23:ef:91:26:25:3f:c0:e2:d1:87:
71:e4:58:81:7c:00:08:82:cb:16:2c:46:6d:77:4a:ea:91:44:
44:62:96:7a:4e:d7:87:71:42:cc:92:0e:4a:1d:24:6b:49:c2:
9d:b8:f6:44:d2:2b:84:b4:f1:d1:69:b4:2e:02:1b:be:96:8e:
03:bf:0d:22:e7:62:cb:af:41:6a:fb:17:a5:a8:e6:6a:b9:f5:
57:53:cc:08:66:2d:ed:e1:bc:06:da:9c:bb:97:06:0b:8b:c8:
49:49:84:7a:73:51:5a:2d:26:ec:62:a5:f4:28:ba:28:8a:c3:
4c:ec:65:97:65:70:01:1a:2a:6c:f1:45:a9:b7:19:1a:70:8a:
f0:7a:0f:f3:3a:6c:93:a1:5f:6f:7f:17:63:5d:22:42:43:3a:
cb:a9:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:14 2025 by rpki-client