Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier: cMt+eOFif50SIteZsS+mQaoOCkPnzwI23DcsPQe2Tio=
Subject key identifier: FD:9A:B6:AD:54:43:89:8A:CA:7E:4C:B1:0B:B2:EF:82:7F:E2:35:BB
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial: 019A51877CE170C61E350093DF24CFCB4A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number: 10DD
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: 7RoZj6aa+wax3Y1BuyhNNYjFpY13krpEudwAkkiqX5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7c:e1:70:c6:1e:35:00:93:df:24:cf:cb:4a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=fd9ab6ad5443898aca7e4cb10bb2ef827fe235bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:c2:99:fb:31:ee:90:b5:4b:aa:e4:6e:d0:
af:a0:1a:17:33:79:47:d2:3a:a7:b2:87:1a:57:6c:
b8:ad:7e:23:ca:36:33:69:0b:e0:99:ae:2d:c6:c4:
09:b6:a1:94:8f:e6:af:71:75:10:cc:41:be:a2:80:
2a:b9:e7:aa:d8:78:c9:05:6f:4e:b7:8a:90:6d:58:
d7:ff:51:b0:2b:7e:55:55:5b:6b:25:7d:f9:b2:c9:
b9:a2:1f:c5:29:f6:20:66:ac:4f:41:a4:50:da:aa:
27:06:b2:ac:7a:f9:c8:65:a2:8f:65:30:ef:c2:a6:
20:53:f9:0b:df:02:ae:ba:06:b6:f2:20:19:a6:2e:
5a:e1:83:f4:1e:d7:22:d9:61:a2:ee:28:ea:fa:be:
7f:2d:df:d0:4d:40:68:a6:d1:1a:53:29:79:60:7e:
d0:12:4a:3f:98:cf:7d:2e:52:56:20:34:59:f4:90:
ee:16:e9:33:db:f8:33:85:95:2e:1c:02:06:61:95:
81:d5:e1:5f:25:f9:50:16:5c:a5:cb:25:35:60:8a:
09:9e:3a:3a:5d:41:7e:89:bc:2c:16:01:da:7f:b2:
7a:82:6e:1f:4c:81:9d:c9:6e:4f:47:6a:a0:e7:2c:
64:71:13:d6:d2:0b:74:96:cf:f6:80:b6:db:ff:f4:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:B6:AD:54:43:89:8A:CA:7E:4C:B1:0B:B2:EF:82:7F:E2:35:BB
X509v3 Authority Key Identifier:
keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:37:f8:73:a7:f6:33:3e:d3:dd:bf:55:1a:b1:da:17:da:
34:10:f2:50:e0:f4:ed:36:63:94:27:6f:43:21:c7:56:e6:03:
4b:4a:b2:cf:be:64:2a:78:59:44:d2:cb:82:b3:21:21:fc:93:
63:5a:c2:ff:66:73:57:38:36:e8:46:d0:23:81:90:5d:18:01:
04:54:57:56:5c:90:b6:bb:41:72:62:7e:68:a8:6a:51:43:a7:
aa:81:8e:f1:34:76:c9:34:b1:76:9a:2a:9c:04:c2:fb:f8:95:
06:b9:25:a1:2b:8b:88:69:81:02:78:d9:30:ab:63:36:5c:90:
2a:c3:17:f0:18:63:74:41:0b:c6:5b:1e:dd:c9:29:35:cb:9b:
6d:01:ca:39:7a:f0:48:62:f4:a0:1d:bc:ab:84:a9:18:6a:7d:
db:14:2d:51:3e:16:15:d8:6b:73:64:3b:27:5f:9d:13:b6:15:
77:2f:dd:ed:56:cf:b5:6d:cd:41:4b:92:b3:4d:75:7b:fa:95:
f7:d1:75:52:6a:03:51:b1:5c:e9:e4:95:59:a5:6f:54:78:51:
4c:be:80:04:c1:48:87:d6:0f:8e:87:38:1a:e6:e1:e6:fb:fb:
87:61:92:f6:11:4a:42:72:24:a3:cb:01:12:f6:b8:a8:93:75:
b2:80:48:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3zhcMYeNQCT3yTPy0oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj
Y2RlODgwHhcNMjUxMTA1MDEwMDI1WhcNMjUxMTA2MDEwMDI1WjAzMTEwLwYDVQQD
EyhmZDlhYjZhZDU0NDM4OThhY2E3ZTRjYjEwYmIyZWY4MjdmZTIzNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR/Cmfsx7pC1S6rkbtCvoBoXM3lH
0jqnsocaV2y4rX4jyjYzaQvgma4txsQJtqGUj+avcXUQzEG+ooAqueeq2HjJBW9O
t4qQbVjX/1GwK35VVVtrJX35ssm5oh/FKfYgZqxPQaRQ2qonBrKsevnIZaKPZTDv
wqYgU/kL3wKuuga28iAZpi5a4YP0Htci2WGi7ijq+r5/Ld/QTUBoptEaUyl5YH7Q
Eko/mM99LlJWIDRZ9JDuFukz2/gzhZUuHAIGYZWB1eFfJflQFlylyyU1YIoJnjo6
XUF+ibwsFgHaf7J6gm4fTIGdyW5PR2qg5yxkcRPW0gt0ls/2gLbb//QviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2atq1UQ4mKyn5MsQuy74J/4jW7MB8GA1UdIwQY
MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt
YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3
LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8A3+HOn
9jM+092/VRqx2hfaNBDyUOD07TZjlCdvQyHHVuYDS0qyz75kKnhZRNLLgrMhIfyT
Y1rC/2ZzVzg26EbQI4GQXRgBBFRXVlyQtrtBcmJ+aKhqUUOnqoGO8TR2yTSxdpoq
nATC+/iVBrkloSuLiGmBAnjZMKtjNlyQKsMX8BhjdEELxlse3ckpNcubbQHKOXrw
SGL0oB28q4SpGGp92xQtUT4WFdhrc2Q7J1+dE7YVdy/d7VbPtW3NQUuSs011e/qV
99F1UmoDUbFc6eSVWaVvVHhRTL6ABMFIh9YPjoc4Gubh5vv7h2GS9hFKQnIko8sB
Eva4qJN1soBIpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:23 2025 by rpki-client