Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: OGwR7tuwQNZ82PUdQyv11zBWeYyQBZZhB9KauNo7+P8=
Subject key identifier: A8:34:5C:C1:22:D0:2A:E1:4C:55:86:6E:16:82:5A:5C:5B:9C:45:92
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019A53AC936AE7D56F47CB343FF991424739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 168F
Signing time: Wed 05 Nov 2025 11:00:10 +0000
Manifest this update: Wed 05 Nov 2025 11:00:10 +0000
Manifest next update: Thu 06 Nov 2025 11:00:10 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: Kih2+m068tUBmCmIJ4JbdSiQYyACPuu0pWX+jPpoUkY=)
2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:93:6a:e7:d5:6f:47:cb:34:3f:f9:91:42:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Nov 5 11:00:10 2025 GMT
Not After : Nov 6 11:00:10 2025 GMT
Subject: CN=a8345cc122d02ae14c55866e16825a5c5b9c4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:02:2b:ea:c1:58:85:e2:34:05:4f:0c:66:
3c:42:52:f1:49:69:ee:fb:88:37:c0:b1:7c:d0:a2:
1f:4b:69:25:40:98:e9:93:cf:22:65:dd:03:81:ca:
32:9f:64:0b:93:f1:71:e8:a3:0f:99:d1:7c:ab:d8:
4e:d5:84:55:8e:b9:b8:d9:7a:d6:ef:25:32:9b:2b:
95:e1:d1:16:52:1b:f5:42:a8:a8:08:35:a2:91:19:
d2:ed:5c:1f:3e:65:58:8f:0f:3a:05:f7:79:14:ca:
c1:e8:91:e0:74:64:99:81:fd:00:ac:e8:b6:55:2e:
e7:94:f0:3e:81:21:48:4a:fd:a8:e3:32:62:33:bc:
fe:e1:f1:37:04:1a:be:b6:cf:0f:03:3f:6a:1f:4b:
3a:2c:50:aa:01:60:89:1e:9d:7f:3f:20:d0:ce:ee:
ba:49:9a:34:06:ea:2f:c0:67:66:68:92:b9:be:a8:
a6:51:01:8f:50:bc:b8:3a:5a:34:1d:c6:68:a2:b4:
ad:bd:e5:92:45:56:20:a9:14:69:a6:0f:7e:82:16:
0c:a8:0b:2d:cf:9c:15:93:83:aa:0f:fd:a7:23:8f:
67:e3:3c:0e:cb:67:2f:97:8d:08:36:c6:22:37:2d:
63:cd:7c:66:f0:a1:40:a5:14:63:fc:6a:d7:cf:5f:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:5C:C1:22:D0:2A:E1:4C:55:86:6E:16:82:5A:5C:5B:9C:45:92
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:cf:e0:20:af:4c:4c:93:09:74:85:6a:b6:28:79:c3:03:
1e:4f:a8:0b:41:36:f0:7e:e5:ad:ec:3c:fa:8a:4c:6a:a9:9e:
9c:10:45:37:29:d8:45:c1:90:29:c9:4a:0e:1b:1f:2c:cf:19:
91:8e:92:11:11:cb:cf:75:71:20:b2:ec:d8:45:de:35:46:39:
ae:ff:de:95:3c:21:a8:30:03:e0:97:d3:10:bc:58:31:23:d8:
52:14:77:33:e8:c5:8a:6b:6d:1a:b8:f5:13:ef:80:25:b4:87:
70:81:a1:0b:a2:48:c9:e8:49:1d:e9:ed:ad:87:08:d4:9e:c2:
de:30:98:3d:ee:8f:2e:6b:4c:d4:93:ac:c1:7f:3e:16:bb:11:
44:78:ac:f3:a6:36:97:a9:9d:6d:91:a9:6f:2f:dd:45:d3:65:
6f:af:45:50:f1:44:83:66:37:e4:42:69:96:4f:81:31:12:40:
80:e4:20:31:54:cf:28:94:f6:c0:92:b9:3b:fe:25:62:34:8f:
69:50:cc:b3:75:9f:23:08:e8:53:e1:3e:53:63:10:1b:ca:ff:
b8:9a:1f:9c:8e:fd:54:9b:25:d1:fc:fd:29:58:24:e5:4b:95:
f1:c6:10:6f:87:6b:58:53:46:0b:5a:e8:66:f8:fb:0b:de:ac:
ec:32:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:09:52 2025 by rpki-client