Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier: c5Q0SIYDCI+KNGdwjMdJZcXuQNcHxk/+zVZZiOUNMBc=
Subject key identifier: 3B:15:86:17:4E:F6:1B:8F:A3:24:41:87:A1:49:C2:D7:7E:D5:CD:77
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer: /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial: 019A4EF4BD246D827573589D66811C1C0FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: GRLyNB9kRll0uGSyyGJt5B4d0GN46PBXPJMtzKmZd3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bd:24:6d:82:75:73:58:9d:66:81:1c:1c:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=3b1586174ef61b8fa3244187a149c2d77ed5cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:51:bc:62:21:da:c7:06:01:7b:81:55:7e:
e9:69:d2:ee:16:b0:16:fc:48:c4:f4:ab:d3:4b:5d:
d2:a2:09:39:66:bf:90:40:f5:7a:15:5e:1b:4c:e7:
94:83:76:59:e6:f6:42:fe:86:f8:d2:ec:14:fb:0b:
54:74:fd:9d:ef:48:c6:f5:af:73:32:db:d8:91:d0:
e6:61:45:3d:d3:6b:27:df:1f:c1:fa:6f:10:44:fa:
09:a1:56:89:82:0d:ea:90:b5:a3:fe:9b:92:24:a0:
65:ef:7e:0f:88:1f:c2:88:a6:fb:03:60:ac:24:41:
33:cf:dc:65:4a:05:13:e6:50:9a:3f:6f:8f:1f:e3:
da:85:e1:a7:98:8d:96:fd:9d:c1:20:0c:50:b2:cd:
4f:98:35:15:94:8d:66:79:b9:0c:e9:68:e5:ca:c0:
16:0d:e2:c9:58:89:97:11:d6:82:f7:28:47:d5:2a:
29:90:03:43:1b:05:be:31:95:32:e4:b8:cb:d1:19:
30:3b:50:38:93:20:9b:1a:6e:ba:5a:c2:27:eb:31:
bd:10:fb:31:6d:55:09:09:bf:f5:14:f5:46:4f:30:
cb:fa:75:c4:1f:02:46:dc:d1:5e:b6:47:67:6f:f3:
c4:8c:2b:4f:39:33:1e:d7:4f:21:1d:03:47:47:63:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:86:17:4E:F6:1B:8F:A3:24:41:87:A1:49:C2:D7:7E:D5:CD:77
X509v3 Authority Key Identifier:
keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:73:04:9b:dd:97:7e:c6:e1:20:2c:14:77:3b:b1:ce:1c:
e3:a1:11:af:3f:ab:20:2f:d4:d6:27:b1:38:a2:74:70:18:c8:
90:d7:90:ef:0d:a6:7c:69:f5:a8:11:de:a4:e0:6f:00:d0:c2:
27:1b:0d:ff:96:e1:0c:72:14:f3:bb:5a:a5:a4:cb:81:5e:2f:
96:dd:a6:e2:89:26:84:a0:a6:d9:db:cb:24:8f:ce:c2:7b:cb:
68:34:91:24:c9:de:27:47:8d:98:c1:54:d5:13:39:65:e3:cc:
fa:00:8b:a3:42:9a:ce:0a:a8:0c:0f:e6:bf:19:75:ea:62:c8:
c7:1b:48:94:32:84:7b:42:79:e2:6d:c0:ab:90:17:53:c2:4a:
5c:e5:b1:d9:70:a8:69:fc:12:c3:38:81:f2:f8:35:2a:99:cd:
89:09:53:a0:0e:2e:9a:90:d7:b9:80:8c:22:06:19:e1:4e:58:
91:ae:ed:e8:10:7b:d7:a1:20:9c:c8:c8:f8:c1:5c:ac:35:4c:
97:0b:31:27:34:57:6e:fa:4e:97:63:6a:3c:6e:f5:0b:5e:05:
48:c7:cb:6e:d2:e3:f4:d6:8f:36:05:37:a3:58:c7:97:1f:16:
f9:4a:83:64:c4:3f:8b:75:f7:89:99:10:cc:ef:c8:20:8b:29:
91:bb:35:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9L0kbYJ1c1idZoEcHA+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTk2NjljMmI3YzBiMjVjMDdlNzkzMmI4YTFmOThiMGJi
ZWRjNGMwHhcNMjUxMTA0MTMwMDUzWhcNMjUxMTA1MTMwMDUzWjAzMTEwLwYDVQQD
EygzYjE1ODYxNzRlZjYxYjhmYTMyNDQxODdhMTQ5YzJkNzdlZDVjZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX5RvGIh2scGAXuBVX7padLuFrAW
/EjE9KvTS13Sogk5Zr+QQPV6FV4bTOeUg3ZZ5vZC/ob40uwU+wtUdP2d70jG9a9z
MtvYkdDmYUU902sn3x/B+m8QRPoJoVaJgg3qkLWj/puSJKBl734PiB/CiKb7A2Cs
JEEzz9xlSgUT5lCaP2+PH+PaheGnmI2W/Z3BIAxQss1PmDUVlI1mebkM6WjlysAW
DeLJWImXEdaC9yhH1SopkANDGwW+MZUy5LjL0RkwO1A4kyCbGm66WsIn6zG9EPsx
bVUJCb/1FPVGTzDL+nXEHwJG3NFetkdnb/PEjCtPOTMe108hHQNHR2P3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsVhhdO9huPoyRBh6FJwtd+1c13MB8GA1UdIwQY
MBaAFHhZZpwrfAslwH55Mrih+YsLvtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2Njkt
ZmMzNTU5Njk2MjQ2LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80YjU0OTUtMTA3Mi00ZWYzLTg2NjktZmMzNTU5Njk2MjQ2
LzEvZUZsbW5DdDhDeVhBZm5reXVLSDVpd3UtM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGadzBJvd
l37G4SAsFHc7sc4c46ERrz+rIC/U1iexOKJ0cBjIkNeQ7w2mfGn1qBHepOBvANDC
JxsN/5bhDHIU87tapaTLgV4vlt2m4okmhKCm2dvLJI/OwnvLaDSRJMneJ0eNmMFU
1RM5ZePM+gCLo0KazgqoDA/mvxl16mLIxxtIlDKEe0J54m3Aq5AXU8JKXOWx2XCo
afwSwziB8vg1KpnNiQlToA4umpDXuYCMIgYZ4U5Yka7t6BB716EgnMjI+MFcrDVM
lwsxJzRXbvpOl2NqPG71C14FSMfLbtLj9NaPNgU3o1jHlx8W+UqDZMQ/i3X3iZkQ
zO/IIIspkbs1Uw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:34 2025 by rpki-client