
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: N4SudThwQTfzIErdsXccnXWbjiHkVGQlEGG28tkTdA4=
Subject key identifier: D3:01:F1:C8:78:83:62:64:CA:11:B9:52:7F:7E:21:27:3F:A1:C5:40
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 01988FFE757AF01E038C48A47E37466F11AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0E1A
Signing time: Sat 09 Aug 2025 18:01:14 +0000
Manifest this update: Sat 09 Aug 2025 18:01:14 +0000
Manifest next update: Sun 10 Aug 2025 18:01:14 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: RGQ7W+qVA3ZBSmjY9QVBq0rRQ3TitA0pcLLrx5tkEyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:75:7a:f0:1e:03:8c:48:a4:7e:37:46:6f:11:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Aug 9 18:01:14 2025 GMT
Not After : Aug 10 18:01:14 2025 GMT
Subject: CN=d301f1c878836264ca11b9527f7e21273fa1c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:08:8c:48:8e:f2:99:81:55:4e:fa:eb:4d:
87:ef:4d:de:1b:a9:03:11:84:58:89:e5:0f:79:01:
4c:21:19:63:3a:a4:4d:95:5c:51:6c:86:27:f5:2b:
c2:b3:cb:9b:fb:c5:b5:7f:d8:9f:bf:d5:e8:95:14:
28:b6:19:b7:ad:f1:5f:23:f7:97:8b:db:b1:d9:68:
28:f0:3e:e2:c5:cf:22:78:92:4d:35:e3:4a:9d:cc:
6c:1c:3a:5c:0e:36:21:11:13:cb:06:2e:12:06:d5:
a3:29:68:4e:6d:1b:1a:6b:26:b8:f3:09:3a:ff:e1:
90:d6:a6:ab:3d:66:eb:b4:bf:29:41:76:45:3d:08:
50:4f:0e:7d:e2:56:17:dd:fe:ce:c0:a6:de:a5:48:
16:ce:9d:00:c2:e2:b4:a5:0c:66:44:91:be:80:95:
36:1f:f1:d4:0a:63:8b:cb:95:f4:af:ca:f3:f9:02:
9f:a6:b7:c6:93:9a:68:cb:01:74:c3:13:68:b6:f3:
9d:5a:4c:23:21:13:50:31:df:08:37:8f:7d:fe:28:
d4:ab:b5:77:2b:2d:9c:64:83:97:84:b5:a6:9b:94:
8d:6a:37:df:9d:8b:33:85:77:2e:45:3b:0a:0f:e8:
1c:1b:25:f8:52:89:f2:20:64:ca:f5:c3:ca:d8:07:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:F1:C8:78:83:62:64:CA:11:B9:52:7F:7E:21:27:3F:A1:C5:40
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:01:be:44:0d:a5:d5:59:7e:0c:da:2a:d8:29:65:ac:f1:
64:91:20:ab:42:7d:ee:05:00:2d:12:4a:41:fa:56:ba:54:d5:
99:c8:67:f8:46:de:ce:d7:33:d7:24:fe:98:65:39:86:80:7d:
df:a6:ec:ad:68:47:90:2d:b6:56:39:7b:8f:e2:6b:8c:18:5c:
e8:5b:45:05:07:39:59:c0:94:73:a1:34:94:bc:1d:60:65:7b:
7e:7f:81:6c:4a:83:83:51:e4:69:3c:29:b9:df:63:f2:83:71:
eb:39:d6:70:0a:96:b3:60:20:a1:9d:cd:ff:3a:b8:ac:47:34:
e2:d8:1f:ae:bf:c8:f3:f9:a3:8f:40:30:fc:dc:bb:50:28:75:
90:c9:77:7a:d7:15:7f:ed:da:38:5b:9d:4e:1a:9e:86:4d:d0:
4f:cc:5f:92:dc:d0:c9:96:73:86:00:23:bf:75:98:dc:ef:86:
07:ee:78:20:30:71:c1:c7:f2:94:4a:3d:6b:16:6e:44:4b:6d:
ae:b1:3c:bd:4c:3b:c4:86:28:8c:08:26:34:f0:fc:1e:75:51:
0a:12:80:02:46:e5:0f:a0:88:49:fb:f3:e8:a4:71:2e:15:6a:
26:9a:9a:fc:da:42:9e:b6:1a:be:cb:f3:ee:9a:69:cc:4b:79:
78:4f:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:12 2025 by rpki-client