Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: 9B8cu+qRjPlLWG2OYIRL0D+2OkscPocukHu4NjBfKDE=
Subject key identifier: BC:28:26:C7:91:A2:12:AF:92:72:E0:9C:BA:29:F9:2B:1A:9C:CA:DC
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 019A70A4F854C3DD7526E7A26EA1461F6EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 068B
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: m1c2M9sn1RFvOCi+h6m15QFoulzIK3GmEYFK0P/+10E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f8:54:c3:dd:75:26:e7:a2:6e:a1:46:1f:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=bc2826c791a212af9272e09cba29f92b1a9ccadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:b9:9b:06:58:90:92:f6:dc:2a:6b:8a:be:
b8:d7:5a:18:92:c9:11:97:a6:67:e1:e9:f7:49:46:
93:b9:aa:b3:d8:bf:45:42:7d:91:5e:08:43:5a:1c:
81:49:4b:f3:9e:f7:fd:1b:ab:51:4a:98:9c:9d:be:
86:73:ad:0d:8e:a1:f4:80:e0:f1:00:a1:02:a6:0e:
13:e2:03:6f:73:7f:73:16:bf:4f:87:c5:29:45:5a:
50:fb:fb:25:7f:7f:08:99:4d:e1:48:2a:08:95:d7:
a2:38:71:b4:6c:38:31:f3:af:52:b3:74:2c:11:a5:
cd:01:03:73:6e:43:b4:0d:ef:0b:f2:fc:eb:c6:6f:
37:eb:a7:86:8c:81:db:9a:a9:82:93:68:e2:e1:51:
55:51:ca:7f:eb:fd:f8:f2:00:fd:d6:8c:1a:5a:e2:
05:cb:bc:59:47:b1:f5:9d:8d:87:38:38:ea:39:ce:
21:f3:7e:6a:7f:11:bb:f5:5e:cc:ff:5b:dd:a1:64:
23:e7:6b:dc:d1:08:fb:ee:5d:0a:b5:ab:9b:78:f6:
de:a6:d6:26:51:8f:23:43:e0:29:f8:d0:c9:f4:56:
69:b7:62:9e:d8:91:e7:6f:46:b0:c3:4c:4f:11:3e:
c4:03:d1:4d:74:eb:61:db:f5:f8:20:8b:11:50:48:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:26:C7:91:A2:12:AF:92:72:E0:9C:BA:29:F9:2B:1A:9C:CA:DC
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:c2:a9:a4:42:4e:50:c4:5b:1d:dd:7f:43:da:e3:ab:ae:
70:e5:6e:01:8f:37:b9:40:17:ef:c4:2a:02:20:78:58:c5:1f:
d8:75:87:10:18:92:fc:44:7a:12:02:e9:58:6b:20:e5:09:a8:
74:80:2a:73:9b:33:ef:02:5b:4c:99:fd:b0:90:f5:4f:f9:ee:
0d:20:a2:d4:fa:42:18:69:17:d6:4e:d6:ea:9d:43:16:21:25:
ec:ba:7a:02:57:c3:a3:24:87:fd:02:da:c9:65:67:f8:b7:cb:
7b:a3:cc:4b:0a:73:f2:44:47:d7:65:71:fa:2b:24:4a:50:d8:
59:99:cd:19:f8:64:b0:1e:ef:8b:ad:cb:1f:a3:c2:be:17:84:
ed:83:0f:16:a1:11:9e:1d:19:15:df:7b:fd:cd:aa:f8:a4:80:
68:85:37:f6:fe:96:08:0f:c5:e5:ab:1f:5b:0b:48:ef:2a:cb:
a4:11:5c:b0:00:91:9e:67:84:11:b6:0b:fb:d5:9b:f2:5c:c7:
d7:2c:9b:14:24:52:83:79:63:22:d1:85:19:52:84:4b:0c:ba:
6a:99:05:a9:23:96:5c:33:58:83:17:75:13:17:70:41:4d:59:
45:5f:a5:9c:d9:af:6a:c2:02:93:2d:34:c7:63:35:11:64:a3:
ba:c8:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:27 2025 by rpki-client