Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: Usz81PshCOAt9znp3YeE9CW7LnCqQLkRP91oKjQKuVA=
Subject key identifier: 60:1F:9C:D1:85:12:04:F1:B1:A1:28:76:49:56:76:B6:B0:22:1B:6F
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019A4EF535419BD4E5D4D07420752CF3A309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:23 +0000
Manifest this update: Tue 04 Nov 2025 13:01:23 +0000
Manifest next update: Wed 05 Nov 2025 13:01:23 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: v1mhFBLUHoJVRteFux+VWnObC4oAnQHgC1Tc1P3TZ2Y=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:35:41:9b:d4:e5:d4:d0:74:20:75:2c:f3:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Nov 4 13:01:23 2025 GMT
Not After : Nov 5 13:01:23 2025 GMT
Subject: CN=601f9cd1851204f1b1a12876495676b6b0221b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:60:ec:15:99:e6:07:3b:7d:78:2a:bf:23:
4f:70:36:97:a1:79:14:e9:42:a5:37:69:2f:e1:69:
24:7e:4d:f1:2b:dc:7d:25:9e:a9:b6:07:97:f8:51:
09:8e:51:4d:12:02:66:ad:66:d0:68:8a:f0:40:34:
2b:36:11:42:8f:df:84:38:48:fa:61:20:bc:f7:4a:
e0:c9:d4:e5:d8:fb:f9:56:d7:0b:34:c0:99:2c:fe:
e0:67:9f:65:0b:55:d8:70:e5:e7:ec:cb:51:c9:0a:
43:13:96:a8:f9:33:9b:36:5c:9f:0f:f6:c1:75:90:
73:f3:a6:01:ad:0f:aa:b9:90:7a:c0:bb:c2:e9:a6:
81:86:b6:38:9c:c0:88:71:e2:b6:a7:10:e3:e3:9b:
ed:0d:d7:b0:14:ff:49:b3:fa:3e:96:0b:97:5a:8c:
56:54:e5:e3:2a:69:2e:8a:6f:e0:f6:1c:b5:6d:78:
4f:d9:4a:57:0c:99:51:18:85:14:5d:4c:77:db:0d:
2c:c9:59:c2:35:df:ae:f5:48:39:bd:12:8e:4c:06:
a2:d9:e1:c5:4b:a8:cf:9c:d7:86:cb:55:75:5d:aa:
f1:bc:d0:5e:8f:da:32:8e:4d:d1:2d:c9:f2:58:bc:
b3:6c:39:e8:55:e1:86:d1:5b:ec:10:14:5d:af:fa:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:9C:D1:85:12:04:F1:B1:A1:28:76:49:56:76:B6:B0:22:1B:6F
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:9f:9b:2f:49:7b:e3:b5:e1:07:6e:af:f0:0f:54:4e:52:
45:f4:a2:2c:97:68:26:1b:e3:63:ed:95:e4:cd:a5:8b:7a:13:
e8:8e:52:2f:d0:f4:0d:5c:40:86:82:eb:62:0a:47:9b:c0:77:
91:d6:2a:02:50:9b:6e:7b:b7:4e:ad:fe:14:ea:72:2d:e0:33:
75:a3:ee:ca:ad:04:35:02:a4:5d:36:05:53:20:8f:53:dd:33:
d7:9d:dd:0d:c7:93:bb:c9:6a:d3:a9:03:77:4a:56:ea:87:60:
1a:ff:05:c4:45:c6:42:70:f0:14:71:21:74:41:7f:dd:38:71:
dc:94:18:c3:ed:1d:83:8c:ee:d9:f7:b4:4d:c3:0a:e7:da:85:
ef:92:3e:87:ae:25:f2:10:50:86:e8:85:2e:e8:a3:db:2d:f2:
8d:77:68:6a:6d:14:e5:c4:5a:cf:e0:1e:79:ea:2e:06:47:ac:
42:4b:54:7c:b5:8c:40:c0:7e:6d:8f:33:2c:bb:3b:c1:44:85:
a1:25:a8:72:11:8f:00:b4:ab:62:6c:f7:fc:c6:bf:36:3c:2f:
44:45:6d:0f:3a:c9:90:02:18:a5:0b:8e:ed:1b:95:1d:14:d6:
c6:1d:18:72:ca:8a:c2:b9:d6:c7:d0:db:ea:4b:6c:2c:2b:30:
03:b9:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:19 2025 by rpki-client