Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: y9/683Cz/wqq2WGST8kooZmyGxMhq1Q1Hy3Gwhu/V+g=
Subject key identifier: 51:25:30:41:00:F6:03:ED:AE:FA:73:AB:87:61:EB:23:94:D0:7B:83
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 0198D583AA3CA9CCF2DAF8CA7CD37FA6AEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0E3E
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: fYn743qreFKprq0W+SZn2e85KJrAjleIoTIXb949BuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:aa:3c:a9:cc:f2:da:f8:ca:7c:d3:7f:a6:ae:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=5125304100f603edaefa73ab8761eb2394d07b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:39:79:24:39:fe:c8:1a:97:47:d4:ac:04:
4d:07:17:b1:d9:18:c1:63:36:b3:55:3e:24:33:83:
de:d9:f0:1f:75:82:b4:3e:53:fe:64:e3:eb:9e:cb:
60:0c:f5:ce:b5:1d:3e:61:9a:61:31:a6:f5:79:f2:
71:bc:1f:76:92:28:17:4a:15:4d:37:e2:61:91:fe:
18:3b:88:e7:26:9f:24:78:98:0e:1c:90:60:f2:20:
4b:d2:97:26:67:06:40:83:f6:af:d8:0f:02:52:af:
e5:7b:7b:e6:22:40:6e:5c:37:9c:3a:3e:08:a7:4c:
8a:82:9f:6f:08:a2:3c:8b:7f:b6:66:20:c2:c5:83:
c4:11:47:c5:e6:22:69:1b:a1:32:13:87:fe:4c:67:
90:d9:22:b2:d0:f7:86:95:ae:ac:4e:dd:33:a4:0a:
b4:1e:53:b7:9d:c8:e2:1d:90:f2:59:61:5d:03:40:
c9:8b:36:99:d7:b2:68:42:c4:67:cb:76:d0:39:4c:
7b:4d:f6:25:c7:88:64:86:10:ed:89:a3:2d:36:f4:
c2:c5:93:ec:df:7d:03:90:bd:75:53:60:f9:a6:be:
ae:10:b2:84:73:e3:c5:7c:ff:0b:7e:bf:88:de:6c:
32:85:00:29:e9:1d:c4:0b:2c:c6:3f:de:47:34:83:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:30:41:00:F6:03:ED:AE:FA:73:AB:87:61:EB:23:94:D0:7B:83
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d5:5d:75:83:dd:00:1b:2a:88:33:7e:20:3c:2f:31:6b:4c:
31:95:ff:be:83:8e:51:12:20:71:d1:c9:11:e1:17:c8:8f:92:
d2:75:f4:c3:d7:33:ba:3a:74:09:16:26:17:3b:39:a1:d3:da:
67:fd:ba:51:7d:b9:0d:ab:af:c1:45:b3:6c:51:6e:e6:90:ee:
f3:31:4d:e3:84:cc:e7:32:da:07:d8:b8:4d:a9:6a:e6:b5:f0:
25:64:7c:8b:26:18:9a:c4:18:55:44:a7:75:b2:94:06:3a:9d:
0f:5a:ae:e1:08:df:79:26:b7:07:c8:d3:70:40:c6:26:96:04:
2f:d5:1e:67:d1:54:48:7f:30:a8:13:42:3c:8d:66:bb:2a:40:
a1:fd:39:75:d7:1f:af:e1:37:ff:14:ce:1e:88:ab:c8:17:bf:
06:fe:94:e8:74:21:f3:f1:de:c0:3f:58:26:e3:17:c8:83:2d:
98:d0:b9:e3:ca:19:8e:5b:80:4f:18:38:5c:f9:ad:5e:8e:c1:
88:30:30:ad:55:02:4d:31:bd:68:e0:98:ed:41:c1:a7:fa:0b:
e7:26:c6:d2:9d:f0:0e:96:37:f0:2c:84:42:1e:62:26:b7:b9:
56:f1:62:96:c2:dc:4f:a0:45:88:42:15:a6:29:8a:eb:0e:98:
3d:e8:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:36 2025 by rpki-client