Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: 1vjXrW5GB+Su5uhoNYVr4lNJnZE9WwEjWXSTz9W/QhI=
Subject key identifier: 75:19:5A:D3:9E:3B:8C:56:7D:D4:C6:3E:3B:80:EE:D3:1D:B9:D4:AF
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019A4E19101A651C507B9798FB7823AC5F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0F01
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: JoOPvNiZzFt1dZWWAtFjJ0qjLZr/xaOg+TghsNScXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:10:1a:65:1c:50:7b:97:98:fb:78:23:ac:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=75195ad39e3b8c567dd4c63e3b80eed31db9d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:1f:eb:62:29:33:98:15:0d:fa:99:e2:1d:
43:ad:46:4c:4a:31:62:60:60:49:75:2c:f4:95:5c:
06:6e:b9:62:00:88:fe:81:ec:ba:16:d9:01:f2:76:
48:00:1c:a3:07:a4:c0:6d:c7:10:08:1e:14:c0:7e:
72:72:e0:c2:0c:c8:5d:f5:bd:ab:de:79:a9:06:c5:
fe:be:c2:56:a6:36:98:ac:82:d0:74:88:cc:1b:0c:
3f:08:59:d2:e9:3c:e7:0a:48:07:d0:4d:66:23:ed:
af:04:ed:3d:8a:b2:45:f1:21:23:cb:d9:26:e4:30:
75:1a:c9:f7:b9:fd:3b:86:1d:6b:c9:fb:ff:fb:89:
26:b3:0b:00:b0:2e:48:80:0b:70:e8:bc:50:87:19:
4f:eb:b7:60:5d:32:e1:97:57:5d:e3:f2:74:2e:da:
22:22:1d:68:bc:e8:6c:da:a9:28:93:79:97:b2:5f:
0c:d5:16:07:45:89:82:9d:81:18:c0:cf:42:97:ef:
38:56:76:d4:13:b1:43:49:9f:93:44:31:2d:9b:af:
79:b1:32:b5:23:fe:56:cf:83:17:99:48:1d:51:1f:
f7:12:f2:c6:fb:29:66:54:3f:dd:f9:12:ee:9a:ac:
b4:c5:48:0a:07:63:9f:f9:31:2b:14:f8:2f:6d:0a:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:5A:D3:9E:3B:8C:56:7D:D4:C6:3E:3B:80:EE:D3:1D:B9:D4:AF
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:6f:67:db:09:86:f7:8f:8b:9f:5d:c6:20:89:55:bb:9d:
48:93:51:b2:c9:5a:d1:41:b3:2f:50:38:e6:3d:a3:9d:a2:d1:
c8:8c:93:65:6c:ab:46:2d:f5:b7:d0:d3:60:46:d6:15:52:e2:
eb:44:ba:73:a8:3a:5a:be:71:d5:ef:c5:a8:72:71:1b:6a:e4:
4f:01:a5:1c:36:bd:f0:2b:92:52:40:19:d6:29:c4:a0:92:82:
dd:a4:e5:22:dd:26:45:dd:d2:08:e5:c6:59:65:00:6b:9f:35:
50:1b:61:d4:60:be:59:39:25:ca:6f:f4:2f:ec:d4:b0:1a:20:
81:68:ba:66:f1:3d:7e:ab:de:7a:be:fd:23:ca:bd:1d:8f:41:
3d:25:db:cd:7c:cd:95:29:bc:78:fe:4b:5d:60:80:2a:af:10:
2b:94:17:89:c5:97:5d:fa:ca:d2:ef:2b:a0:71:23:a0:d6:dd:
c0:f5:79:c2:03:d0:f4:a6:95:7a:8d:5b:e5:22:03:88:2b:cf:
6a:08:35:91:d7:01:4e:f5:4f:4d:bc:96:8e:39:1f:a6:79:da:
17:1a:5a:38:86:d7:a5:2b:18:0f:2a:1a:21:d0:22:96:cf:ef:
5f:ab:86:06:ff:9c:3d:82:50:03:a3:63:1a:e1:93:e9:b8:b2:
9a:b8:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:39 2025 by rpki-client