Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: zOKeVvE/bZUYkFMJyPcEqFFS04CMaDC8OEFO7nT8Aw4=
Subject key identifier: EA:CE:FB:A5:33:9F:AF:75:E5:B9:55:7F:43:AE:47:06:EF:60:A5:5D
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 0198D65F6600C0B267A8701F3B2BF0596DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: 8sYX7K+MbT1kV1M9eUeIZVXsD9kaG9bvroRp5x03KAg=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:66:00:c0:b2:67:a8:70:1f:3b:2b:f0:59:6d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=eacefba5339faf75e5b9557f43ae4706ef60a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:0f:59:83:d3:fa:72:d4:7f:fe:65:7b:ab:
3e:1b:38:18:66:19:fc:b1:00:6a:a0:3a:e9:4b:aa:
a8:a0:56:d8:f6:79:65:d0:11:c7:1c:a8:4f:ea:0d:
56:72:be:40:01:91:f0:8f:c5:fd:32:d0:63:5e:12:
63:8c:26:f2:af:d5:3b:c2:de:05:cd:0d:c9:bc:88:
be:f7:11:09:cf:23:9b:e0:e2:af:c2:eb:27:c0:00:
62:d2:5f:e2:54:97:9c:78:a3:04:1f:63:8b:ee:b7:
fd:d2:1e:d7:a5:2e:eb:ea:a8:cd:e3:b4:d5:c1:b0:
1c:86:39:c0:86:7b:62:98:15:cc:e9:25:48:5d:5b:
08:b6:df:4c:5a:ff:b0:27:e4:4c:80:bc:e0:6e:b2:
43:af:82:94:25:b9:60:8d:42:1e:35:e4:fb:c1:5c:
dd:3d:f8:62:e6:fc:61:b7:2e:16:67:4d:0a:2f:28:
20:d7:ad:a4:ec:cc:98:3b:20:d4:f9:f9:e5:9f:4e:
ff:3b:fb:74:05:f2:f1:12:2d:10:4b:52:49:84:d6:
e0:04:2b:c5:1c:49:b2:84:54:d1:b6:13:63:f2:ac:
51:96:27:3e:05:17:b5:f9:16:ea:8b:63:a7:0d:5d:
7e:1b:d0:dd:11:fe:50:94:8c:80:37:58:41:d0:a9:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:FB:A5:33:9F:AF:75:E5:B9:55:7F:43:AE:47:06:EF:60:A5:5D
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:c7:48:5b:44:32:40:08:11:9d:95:31:01:d4:56:3e:da:
15:d2:e1:76:3c:22:a8:55:18:e8:a0:2a:78:10:cc:66:7d:48:
fc:f0:3a:82:6e:54:80:0e:4d:a6:29:8a:98:0a:fb:64:a7:ce:
e2:11:1c:32:b3:07:9c:eb:b7:c9:49:58:7d:f6:00:b1:22:b1:
2b:df:18:ca:e8:ae:02:3f:09:f7:62:09:7c:5e:56:55:b7:7d:
09:b1:a9:d2:85:8a:e8:a1:9b:8c:f9:5f:49:af:28:56:85:aa:
a5:21:8a:f9:c7:87:7b:1a:71:98:4d:82:28:b4:1f:11:af:4c:
39:95:48:05:61:b6:0c:0e:76:60:c8:e3:1d:71:21:f2:1b:91:
a2:59:fe:8f:e5:09:e9:bb:19:39:45:24:da:6f:a0:09:f4:8c:
9f:5f:7b:6b:01:cb:b7:c1:19:99:97:bc:a6:8f:0c:a3:8c:ab:
47:0b:9f:b5:7f:97:d5:03:42:6b:82:75:4e:d7:a8:bd:b1:2f:
68:e6:64:21:ee:21:a3:63:90:a0:ea:dd:28:a0:51:ee:67:c4:
66:4b:c0:07:80:4e:c5:9f:96:4d:ca:71:b6:c8:51:38:ff:7e:
cd:6d:f0:27:bc:cc:2d:a5:e4:a1:dc:c8:a4:e8:68:1a:e4:d1:
60:c3:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:44 2025 by rpki-client