Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: nhyy5/O9pr7N0s1uOqZzv+vqjtGbNwxjndZ5khaLseI=
Subject key identifier: 53:AC:C7:29:5D:DD:05:0D:58:86:03:87:C0:31:1E:CD:F0:7F:F6:FD
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 0199228C3CCE6F5F66F0FAB47C9A4E61D886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 05DE
Signing time: Sun 07 Sep 2025 05:00:39 +0000
Manifest this update: Sun 07 Sep 2025 05:00:39 +0000
Manifest next update: Mon 08 Sep 2025 05:00:39 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: fZt3VJy2lQxJnEP8DYurv1XX230sFWLThzLktqcdy3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3c:ce:6f:5f:66:f0:fa:b4:7c:9a:4e:61:d8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Sep 7 05:00:39 2025 GMT
Not After : Sep 8 05:00:39 2025 GMT
Subject: CN=53acc7295ddd050d58860387c0311ecdf07ff6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:3b:af:e2:be:74:16:2e:8c:91:00:58:75:
ad:d6:47:cc:ac:a6:7f:69:58:ab:ad:db:87:77:88:
e3:ff:20:03:26:43:fe:f7:66:69:83:05:a3:b3:f2:
63:46:4f:21:22:47:3d:5f:cb:6e:84:6e:dc:60:09:
17:ce:25:14:aa:3e:9f:91:7b:e0:d1:b4:83:89:68:
81:33:96:34:c5:75:1f:05:43:aa:20:20:ed:93:bf:
d2:be:a2:dd:d8:72:d0:ce:9b:ac:04:1c:f9:50:a3:
72:c0:b0:8d:fe:65:e4:f8:e6:ed:19:81:e8:ce:db:
18:9e:91:ba:79:4b:3f:fd:25:c0:cf:11:50:7a:02:
81:ed:17:c0:66:dd:86:ff:04:28:b4:7d:d3:ef:53:
e9:07:43:8e:c2:d5:2e:04:91:1d:36:fe:4c:60:3f:
17:c1:de:9d:80:00:ae:1f:9f:84:c1:2e:3d:7a:43:
9a:35:f8:fa:56:8d:b2:99:a2:9b:64:c8:f2:9b:19:
33:86:d3:10:f5:a3:e8:f5:de:3b:92:5a:06:80:34:
b7:c7:f6:0c:8b:97:17:01:c2:61:58:da:2b:5a:08:
53:ce:c9:b8:90:0f:45:ab:a2:7d:af:7f:54:8f:2b:
23:23:36:f7:0f:07:9a:d1:ca:b5:f9:57:6c:c1:d1:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:C7:29:5D:DD:05:0D:58:86:03:87:C0:31:1E:CD:F0:7F:F6:FD
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:39:c0:ef:99:75:00:03:ef:cd:af:7f:10:75:bd:63:56:
b1:a3:ec:69:7d:89:ef:25:4a:90:45:e9:d0:3e:f4:54:ce:f4:
97:6e:8a:83:d9:f2:f5:cd:df:54:1a:73:2e:75:13:ba:23:57:
d1:cb:cd:6f:1b:c2:cf:e9:e6:ed:04:52:42:ec:8c:f5:26:41:
47:68:01:ff:cf:9a:72:ab:b2:c9:29:f6:80:0b:d9:1d:30:d3:
e1:83:60:87:f7:b3:35:a2:0b:6d:75:9f:d9:1f:a0:31:5f:d2:
ac:58:c6:05:46:15:1f:1e:33:e2:f0:c7:cc:34:c4:c3:b0:85:
14:08:0d:7c:76:a0:10:55:3b:75:46:bc:a4:58:43:f6:14:6f:
b5:66:bf:f2:e7:c5:6d:3d:ca:d5:5f:41:7d:48:f3:f9:41:7e:
f8:a3:d1:31:dd:ca:d9:78:ce:e0:4d:29:82:0d:92:19:8c:6f:
81:74:be:91:3d:6b:d6:df:07:6c:48:ff:f4:65:08:ce:6e:18:
f9:39:fa:b8:c5:3d:f2:b0:14:a1:62:5f:73:0a:22:5f:83:03:
4a:15:df:eb:78:c6:69:9c:2b:3f:1f:46:3c:b6:b3:70:c0:4b:
b4:ed:26:f1:04:34:92:18:7a:54:bf:c8:3c:14:02:7d:a2:cd:
20:6b:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:53 2025 by rpki-client