Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: 1WrBg1N3MpO84k3DVVeh6bKF1L4Ak4hff5ej+OxfsG4=
Subject key identifier: 51:FB:75:B1:41:2F:61:6F:5B:DC:F2:ED:9F:7E:21:D9:F9:FD:40:47
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 0199FEEBC2A871A18FAC52F891B4BA73042C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0ED8
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: fvth7kegahEAfYfb2gII3VJ/WOL6Fqy6obp6J4eOm7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c2:a8:71:a1:8f:ac:52:f8:91:b4:ba:73:04:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=51fb75b1412f616f5bdcf2ed9f7e21d9f9fd4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:e9:b0:14:59:23:3d:85:6d:a7:19:a4:61:
9f:1f:f0:1b:0d:52:56:f9:87:9c:50:3d:d9:72:72:
b5:cd:d2:c6:69:1d:f9:46:c3:95:73:12:03:f5:08:
56:5d:c8:72:63:70:c8:6d:20:d6:15:ed:01:c0:3d:
28:8e:12:a6:46:d6:5e:09:02:74:df:69:60:c1:4f:
74:40:0b:24:c0:70:f2:36:1b:15:7c:85:4c:b4:77:
44:f1:47:e7:1d:2e:7a:9f:29:62:c8:2a:33:24:4a:
7d:d6:86:6b:c0:f5:fc:13:31:e7:ac:59:9e:f8:7f:
fc:33:da:61:ca:41:d7:05:a2:0f:49:ca:74:1d:f7:
a6:60:23:7c:18:32:ff:cf:72:9f:e6:0e:9a:7e:c0:
92:25:9b:7e:5e:a8:26:42:b2:e9:da:38:03:6e:3d:
9c:db:8b:ee:e1:c7:b1:7a:ad:b7:92:ab:52:4c:67:
35:e5:ee:44:a4:54:32:d6:86:1b:07:f1:06:06:0c:
c1:cb:7e:a0:de:f7:43:6d:f3:fc:21:26:c1:cb:be:
e2:54:16:84:26:37:a5:08:51:03:b8:05:a4:94:82:
13:5d:fb:f4:4d:6a:7b:28:fd:57:cb:21:a2:3f:cd:
dd:05:ab:bb:89:23:4a:1f:7e:85:5e:bb:42:20:46:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:75:B1:41:2F:61:6F:5B:DC:F2:ED:9F:7E:21:D9:F9:FD:40:47
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fb:51:2e:f8:ef:cc:ac:9b:05:27:6b:ef:f1:b8:6b:2b:60:
23:21:07:dc:f8:7a:76:17:69:36:37:d5:8b:1e:df:20:87:ee:
f6:f8:fb:5b:51:2c:40:51:84:c9:4c:56:ff:ca:cb:42:25:6f:
b7:2d:28:40:ad:29:cf:a2:8c:00:78:ca:d5:dc:3f:b0:d1:46:
d9:fb:55:fe:10:95:e6:fb:3e:a4:6e:46:ff:c7:5a:e1:cf:a8:
cb:61:03:d2:f7:96:46:db:8c:a5:1d:39:3e:f7:e4:89:dd:0b:
c5:08:4a:68:ff:b3:74:6d:ee:91:14:cc:da:4c:9b:f3:9e:4c:
11:2b:b7:12:8c:d2:5d:1d:3c:eb:f8:b5:56:df:5b:bd:6c:8e:
d0:7e:f0:38:6f:c2:ab:f5:a1:b1:6b:ed:e2:1c:8b:3f:ed:11:
ce:ea:dc:e7:9d:c5:44:46:06:67:40:e4:7e:5c:86:cc:25:8b:
57:30:72:19:61:99:3e:59:cc:50:4c:c7:a5:a8:1c:9f:cf:fd:
13:de:aa:7e:8b:3b:6a:4f:b4:7d:9f:68:a5:5c:d0:a9:f1:05:
fc:07:50:25:46:dc:dc:d9:ca:e3:43:71:d0:b1:39:f1:e8:23:
3a:fd:59:19:80:78:d5:c9:7e:94:00:94:3d:c2:06:9e:cb:2a:
c6:4f:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:57 2025 by rpki-client