Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: QLgXYJbr/wyNaOOJPCGVrqWEZe+mTmTwW+BOaksKads=
Subject key identifier: C2:71:2E:59:7E:FC:33:B5:28:18:F6:01:68:86:28:6F:CC:5C:50:3B
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019A71B7931D97C48AD9FAB13B8B57A29965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: 5sBS1zFlE3oX/rS/pXqUpJFwfqIJvDcUt+Gv2ZSeFxQ=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:93:1d:97:c4:8a:d9:fa:b1:3b:8b:57:a2:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=c2712e597efc33b52818f6016886286fcc5c503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:48:91:69:ba:8e:06:38:af:ba:d0:96:c7:
4b:90:df:58:01:1d:00:e0:17:fd:96:66:9b:f1:67:
38:82:b5:22:4c:a5:7f:f0:2a:14:77:83:f2:07:ce:
b7:44:30:3c:ef:18:e7:cd:6d:f2:81:4a:ff:dd:24:
1e:c6:68:de:d6:08:a3:da:68:07:ae:2d:b4:96:12:
08:d5:9c:22:c2:3c:c4:32:81:96:7e:9e:3a:8d:92:
32:79:13:50:60:10:2b:24:5e:4c:86:e9:f6:68:32:
a7:ea:da:f0:67:8d:14:a9:a1:a8:59:ea:7c:39:0a:
b0:df:54:e4:80:59:29:59:93:37:e2:9f:ef:d3:01:
64:0b:73:97:ef:ce:a3:e6:40:48:8f:b4:12:a6:bb:
0d:a2:b3:13:07:78:88:09:3f:36:21:61:83:c5:a7:
b5:67:8a:f5:7c:07:55:d1:8e:6c:11:e3:46:46:27:
c7:2b:48:89:4f:fc:a4:26:c1:5e:20:11:27:71:c4:
2a:60:c8:60:12:01:73:f0:d7:92:c3:ee:d9:c0:d9:
b7:51:df:1c:17:6e:3b:4e:2a:e5:47:4a:7f:d1:80:
2f:6c:18:56:f8:cc:05:f9:8d:16:5f:57:65:17:9a:
8a:4a:be:6a:10:b2:8c:50:cc:d1:02:6c:d9:b3:67:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:2E:59:7E:FC:33:B5:28:18:F6:01:68:86:28:6F:CC:5C:50:3B
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4a:da:4e:37:a3:18:c2:fc:f1:07:da:91:5e:cf:b6:52:ee:
6a:f0:bf:c3:02:6d:4b:cd:0b:b6:f8:52:69:51:c7:b5:a0:23:
b2:02:63:cb:ee:81:03:d2:2d:8f:2f:cb:de:27:49:9a:09:cc:
07:74:98:e3:39:e7:ea:9d:63:a3:e3:e5:80:c7:23:03:43:41:
a1:c3:65:55:42:15:cd:4c:a1:66:46:37:7f:ad:5a:c7:f0:88:
79:6e:76:a1:22:7c:77:c9:35:1a:f5:87:da:5f:c4:cb:a3:96:
2b:b2:66:c9:09:74:f8:1e:3b:00:5b:0e:c6:27:f3:ca:12:fb:
6b:1d:21:42:ff:27:7e:68:10:73:5a:a8:e1:21:43:c1:f0:bc:
39:96:05:5e:01:6d:13:40:39:b0:8e:f9:34:9d:22:e8:c8:ea:
ad:ac:37:ed:9d:ba:04:db:4b:8e:05:1d:20:cc:96:1c:cd:ed:
01:c9:19:a1:44:c8:7a:b3:f3:1e:ab:b9:53:18:c2:ba:db:f0:
84:8e:e1:d0:82:a3:65:7e:1c:11:f9:14:d3:98:98:67:e6:26:
94:c5:40:c7:b3:71:ec:fd:97:f2:75:9c:7c:49:71:69:98:b8:
20:51:9a:50:6c:55:c0:e6:6c:ab:f7:53:97:3c:58:6a:6a:a7:
1a:90:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client