Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: UJRH+U0nOt4w1U1WkCLySlY/DQgxjcfRyeJ2kYRGcAY=
Subject key identifier: A7:49:B3:A9:23:4F:17:0E:B9:AF:C1:BB:A8:7C:FA:96:3D:F1:59:CE
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 019A047F5A85ED2C1C45558E33BCA2868047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 0653
Signing time: Tue 21 Oct 2025 02:00:46 +0000
Manifest this update: Tue 21 Oct 2025 02:00:46 +0000
Manifest next update: Wed 22 Oct 2025 02:00:46 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: c1HXM6TAhCp+8HGPDUGw7Rc3ZnvriBhIV5Vi71fl7nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:5a:85:ed:2c:1c:45:55:8e:33:bc:a2:86:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Oct 21 02:00:46 2025 GMT
Not After : Oct 22 02:00:46 2025 GMT
Subject: CN=a749b3a9234f170eb9afc1bba87cfa963df159ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:2d:99:5a:f2:3f:d7:63:8d:a1:46:be:d2:
36:90:ef:66:bd:7f:cb:33:fb:77:16:7c:22:72:cb:
11:cd:df:40:08:66:1f:41:a7:fd:a6:84:bb:7e:78:
c8:0b:f8:ee:54:60:42:dc:71:ee:84:06:6d:d9:1c:
0e:8c:df:d9:6d:4a:f1:0a:60:cc:37:32:a9:cb:df:
b4:b5:ba:3e:25:23:ea:45:d9:f4:05:72:60:b9:53:
13:58:18:e1:04:4f:14:7d:88:3a:2a:38:39:e2:df:
48:b8:bd:4b:59:3c:bd:85:8d:a2:13:c3:ab:1f:19:
8d:34:30:9a:4c:76:09:38:3f:d3:69:c9:da:be:fe:
9e:4d:65:30:55:4e:71:2a:5d:c0:a4:33:4c:06:bc:
7a:a4:34:80:f7:8a:85:ec:6b:93:c2:0d:b0:68:d7:
c6:dd:de:fc:84:72:2e:1b:3c:44:08:9a:15:e5:f5:
88:9d:22:7d:59:e6:a7:37:11:73:30:4a:6e:3d:c4:
db:ba:4e:0f:e7:68:3c:1a:42:26:13:c9:be:52:8b:
d1:8e:65:78:89:e7:57:3b:6e:ff:fa:ab:de:ef:2b:
02:e8:38:cd:f0:bc:88:19:47:86:ec:24:ff:5a:46:
02:05:04:43:64:8f:c6:1f:f3:af:33:0a:c7:54:23:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:B3:A9:23:4F:17:0E:B9:AF:C1:BB:A8:7C:FA:96:3D:F1:59:CE
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:59:37:b0:b7:9f:97:c2:88:65:9d:09:30:39:07:89:75:
40:29:5d:4d:bd:91:7d:8e:4c:4f:ce:47:41:b9:8c:3e:09:54:
03:dc:99:57:e0:a5:c8:37:80:05:53:1e:73:d2:ce:ba:fa:94:
26:4e:3f:c7:47:40:bd:fc:75:f3:05:f2:73:a5:17:06:9a:2e:
ab:ee:f4:cf:7a:ae:9f:61:fe:5b:5e:e9:a0:0b:e4:00:a4:af:
46:2c:ff:3b:9a:9b:8e:93:ee:69:75:c3:8f:c5:74:cf:69:63:
3d:08:be:90:9e:2f:64:87:48:c8:2e:a2:eb:b1:45:bb:d9:2c:
6c:4e:2a:c6:6d:4a:d5:b9:82:8f:18:93:5a:08:67:25:5e:5d:
71:2a:42:e4:8a:e6:df:97:27:19:8a:a5:e5:0f:51:80:8f:e5:
41:2a:17:95:88:6f:31:bc:28:61:3f:42:c8:22:70:f0:68:6e:
3b:f8:00:79:0c:17:5c:2d:7f:1d:5a:86:83:a2:9c:07:fd:f1:
b1:10:f7:23:50:62:38:e5:56:ed:97:b1:a4:e6:9b:ed:13:23:
e9:e3:dd:16:6d:65:9b:51:ca:26:23:b0:0a:0f:20:8b:fc:62:
67:aa:0b:d1:c7:0c:c1:b8:8c:12:84:6f:e3:77:8a:0e:2d:84:
6e:ec:dc:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEf1qF7SwcRVWOM7yihoBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTkwNWMyY2Y4OGFmMzJhYWFjYmRkNjcxY2QzY2MzYWNm
ZjkyZDEwHhcNMjUxMDIxMDIwMDQ2WhcNMjUxMDIyMDIwMDQ2WjAzMTEwLwYDVQQD
EyhhNzQ5YjNhOTIzNGYxNzBlYjlhZmMxYmJhODdjZmE5NjNkZjE1OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZstmVryP9djjaFGvtI2kO9mvX/L
M/t3FnwicssRzd9ACGYfQaf9poS7fnjIC/juVGBC3HHuhAZt2RwOjN/ZbUrxCmDM
NzKpy9+0tbo+JSPqRdn0BXJguVMTWBjhBE8UfYg6Kjg54t9IuL1LWTy9hY2iE8Or
HxmNNDCaTHYJOD/Tacnavv6eTWUwVU5xKl3ApDNMBrx6pDSA94qF7GuTwg2waNfG
3d78hHIuGzxECJoV5fWInSJ9WeanNxFzMEpuPcTbuk4P52g8GkImE8m+UovRjmV4
iedXO27/+qve7ysC6DjN8LyIGUeG7CT/WkYCBQRDZI/GH/OvMwrHVCPnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdJs6kjTxcOua/Bu6h8+pY98VnOMB8GA1UdIwQY
MBaAFBBZBcLPiK8yqqy91nHNPMOs/5LRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAt
NDUzYWQwZGYwZTEwLzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82NTE4ODctNTE2YS00MDM3LWI4YzAtNDUzYWQwZGYwZTEw
LzEvRUZrRndzLUlyektxckwzV2NjMDh3Nnpfa3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2lZN7C3
n5fCiGWdCTA5B4l1QCldTb2RfY5MT85HQbmMPglUA9yZV+ClyDeABVMec9LOuvqU
Jk4/x0dAvfx18wXyc6UXBpouq+70z3qun2H+W17poAvkAKSvRiz/O5qbjpPuaXXD
j8V0z2ljPQi+kJ4vZIdIyC6i67FFu9ksbE4qxm1K1bmCjxiTWghnJV5dcSpC5Irm
35cnGYql5Q9RgI/lQSoXlYhvMbwoYT9CyCJw8GhuO/gAeQwXXC1/HVqGg6KcB/3x
sRD3I1BiOOVW7ZexpOab7RMj6ePdFm1lm1HKJiOwCg8gi/xiZ6oL0ccMwbiMEoRv
43eKDi2EbuzcLw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:35 2025 by rpki-client