
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier: veDy9lkjtUb32WzZIwrRqRb3lhser6lobjxPBAuMH54=
Subject key identifier: 02:F9:67:98:86:CD:1E:8F:E5:9A:4E:35:CA:1D:A5:45:64:70:32:25
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer: /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial: 019A5375E98B6A143104289498862B3F3848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: YJ1kIA2H0dU/Gp0q8d64PKlg/RxY2BDUUWHOCjkMSwY=)
2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e9:8b:6a:14:31:04:28:94:98:86:2b:3f:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=02f9679886cd1e8fe59a4e35ca1da54564703225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:ad:33:de:cb:6f:87:07:d3:12:bc:f0:1c:
71:65:5c:ac:aa:e5:f7:16:bd:fc:92:ab:41:1f:58:
9f:f7:db:d8:18:04:d3:00:f0:bd:9f:a0:c2:11:5e:
20:66:d3:20:fa:2d:83:d4:01:e8:e5:c7:5d:f0:45:
56:63:6e:b0:c5:3d:d1:4d:52:2f:46:fc:af:c7:eb:
34:99:da:35:c7:b1:01:bc:74:bb:47:c0:8f:55:c3:
ac:4a:3b:3b:ac:de:b7:ee:06:c8:70:80:bb:24:2a:
8d:aa:90:7d:7a:46:c5:f6:00:24:9b:4d:ce:d0:96:
70:c5:bf:70:75:e0:b5:79:1d:65:b9:12:e3:aa:38:
85:6b:12:68:ca:b9:ae:0c:5f:c2:20:46:2e:32:8c:
f8:e6:11:87:79:1c:c6:1e:7c:2a:d9:bc:46:0a:e8:
62:1f:9a:10:30:d5:10:39:6a:2a:21:3c:63:fb:e0:
e7:fc:f5:01:82:79:00:e4:b0:93:01:c3:b7:4e:48:
4c:34:92:e6:bd:c3:d7:2f:4d:43:35:cd:4e:49:03:
09:33:d1:d5:c4:37:8b:e0:82:4d:6c:b3:25:bd:e2:
5e:6f:ef:ed:6e:ec:52:6e:28:55:0e:9f:17:fe:f4:
4b:4b:79:3b:bc:40:19:8e:58:d9:a0:ab:14:ca:a0:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:67:98:86:CD:1E:8F:E5:9A:4E:35:CA:1D:A5:45:64:70:32:25
X509v3 Authority Key Identifier:
keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:3a:1c:c9:2a:c1:87:c0:81:1f:a7:8d:a2:eb:01:23:c1:
da:d7:a5:d3:6a:62:92:d8:de:52:a7:76:17:67:25:ac:04:5f:
56:db:04:a2:79:19:e5:4e:e1:b4:b9:38:5f:40:50:98:e8:bf:
63:e2:79:1a:7f:2d:42:e7:3e:42:8a:04:6e:d8:ad:1a:24:09:
d0:76:bb:c3:25:bd:0c:43:2f:ab:d6:64:0c:23:85:2f:00:0d:
06:39:e4:50:9f:22:d3:15:8a:fb:11:e8:f3:d2:d8:bf:8f:02:
ce:8e:86:4a:d7:7b:0c:c0:0e:ec:f6:00:1c:1f:2e:81:33:ee:
02:ba:de:95:9e:38:69:80:d3:c3:6d:ac:d7:49:ef:54:38:cd:
17:3c:66:b5:12:68:4d:d3:93:5c:52:99:96:d6:a5:3a:cf:cb:
b1:63:bf:9c:2a:51:60:f7:c8:fc:ac:6f:6f:6c:49:4e:df:3b:
fd:47:f4:d2:c8:a2:8b:0a:12:f4:c7:05:26:99:cc:08:f9:4a:
db:57:29:b4:9c:22:d1:cf:fa:24:9f:be:9f:a2:e0:f3:42:95:
2c:22:ba:35:8e:0e:14:68:f9:35:c9:a3:69:f7:8b:6d:b4:cd:
cc:b9:b1:f8:a1:11:02:96:03:c3:58:ed:1e:15:15:27:da:95:
c4:0d:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:42 2025 by rpki-client