Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: uevYNwtHa7f58ulYXEjKLKnaXapeuOABgWgy8JXD8/4=
Subject key identifier: 23:25:C7:9B:66:DC:C1:57:63:08:C6:27:FB:26:0A:14:6F:FE:D4:3A
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 019A4DE1FE3BBF7AE06500D496A28159B247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 0679
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: vs1crCd9mngWw7saVeSK1dwrOLdjcbrm96eQ33gFnMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fe:3b:bf:7a:e0:65:00:d4:96:a2:81:59:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=2325c79b66dcc1576308c627fb260a146ffed43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:6a:e7:52:9c:67:a5:fc:9f:32:e3:74:14:
fe:c8:e1:36:51:95:af:02:a9:70:c4:6a:98:f8:26:
ea:b5:7e:5f:42:57:62:c8:93:38:9d:18:ef:26:c5:
a0:dc:04:e2:81:6e:0e:e8:77:fd:56:36:b8:3f:6e:
ee:a5:94:5d:2c:af:39:fb:fb:43:73:a2:be:c7:54:
35:67:53:78:89:84:70:f5:63:bf:4a:28:47:ad:05:
83:c4:65:f8:71:a5:6d:ae:95:9b:04:3b:82:59:e0:
19:0f:5f:b9:62:89:20:69:f8:aa:1f:d6:ea:45:71:
d8:8a:dc:18:44:03:83:12:08:0f:58:42:c5:f1:ca:
83:d1:6e:85:a9:97:32:86:05:23:51:55:14:56:cd:
8a:1f:1d:47:b8:fe:4f:6f:42:8b:ee:d7:7a:33:27:
33:96:3a:67:c8:35:6d:ea:a5:e8:71:ff:72:e3:fc:
9f:9d:52:b5:15:a1:42:2f:8a:d8:af:c0:28:dd:9f:
8b:7a:d2:0f:48:3a:c1:26:87:8d:96:60:23:d7:75:
97:52:96:82:a5:5e:83:a2:16:e3:2f:32:17:8e:01:
38:1b:5f:f2:10:3a:e2:50:b3:df:00:50:c1:b8:cf:
6e:69:6c:62:93:2c:bf:61:8e:fc:5b:02:23:d2:02:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:C7:9B:66:DC:C1:57:63:08:C6:27:FB:26:0A:14:6F:FE:D4:3A
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0b:06:86:e8:1e:5e:70:dc:df:b1:22:b7:df:d5:00:81:32:
61:17:d9:8e:b6:f9:83:9b:37:22:c8:6e:dc:61:07:d0:56:d6:
98:a4:bf:f7:36:e0:59:82:1c:a0:c0:b0:7c:12:1e:12:26:5d:
ba:36:0b:74:cd:31:70:ac:54:42:a5:9f:87:7d:18:81:f4:c1:
39:89:d2:d2:fd:12:f0:91:e3:2f:42:0a:b9:ff:50:00:be:75:
61:2f:19:f5:fc:10:45:00:b8:b2:c7:14:39:db:b1:1c:20:ca:
e9:32:f5:a9:e7:e4:97:63:38:3f:0a:34:aa:29:14:86:23:39:
54:1c:3e:61:1a:45:f9:07:66:42:2e:57:0a:3f:7a:a3:20:b0:
94:28:e2:b0:2e:6d:68:75:35:ee:55:16:8d:71:a7:9a:7d:70:
81:ee:9f:cc:50:e3:79:29:da:ca:a9:57:64:81:6c:8b:a3:4f:
76:46:5b:67:8e:75:ce:2b:05:11:da:a3:82:bb:92:fd:e8:08:
fb:8b:0a:63:f1:46:e5:c0:44:18:78:62:a0:19:18:c4:15:1f:
cb:1f:86:0b:35:be:3d:c9:0b:80:1a:44:11:8a:88:dd:b9:2c:
2a:ce:de:2a:6e:54:82:a3:20:9e:bf:3d:5d:de:97:69:9b:bc:
b1:ed:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:24 2025 by rpki-client