Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier: +9BypFO9eZm4B5YuxeNCtGbkur5d0OkL6jXwbHjSqC4=
Subject key identifier: FE:83:D8:05:16:9B:6D:B5:3B:E6:1D:EB:43:05:43:81:48:43:7C:37
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial: 019A725CAAF8877C6526828312705ABA6B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number: 10EE
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: l4krIuPfPx78KJH6yRQnOT5QEQhI6Rk1c/rxsmIdi30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:aa:f8:87:7c:65:26:82:83:12:70:5a:ba:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=fe83d805169b6db53be61deb4305438148437c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:3a:17:2e:1e:ff:4d:14:86:f1:6c:65:31:
f9:6c:ee:c1:fb:5e:06:74:27:88:94:71:59:69:41:
e9:02:7c:e2:aa:6d:29:8d:c4:9c:9c:27:ca:dd:cc:
1b:c9:00:9b:5d:0a:64:e4:45:d4:f5:60:9d:65:5e:
ac:fb:36:5d:ab:b0:28:e0:25:69:42:82:16:80:fb:
2f:44:6c:9d:e8:19:5a:17:f7:e2:e1:15:1d:2c:09:
db:ab:dc:ff:6b:cc:f2:50:a9:99:06:23:81:ce:35:
1a:86:a1:c3:fb:bc:2c:6c:dc:3e:7b:e4:93:c3:cf:
89:2f:4e:7a:0c:27:47:4f:f7:27:35:e2:4a:eb:d0:
a7:15:88:05:ad:51:a6:1a:49:0a:87:e0:9f:07:4a:
d5:42:9c:7c:8f:42:47:e0:e3:f8:24:cc:79:9c:6e:
cb:b5:d2:23:40:a0:d3:35:10:39:db:ad:4a:bb:04:
ed:c0:bf:bf:7c:0f:5e:21:fa:f2:dc:2e:1d:b1:ea:
78:ae:71:3e:47:d0:d6:9b:87:7b:ba:e2:b6:c9:8e:
f9:96:eb:bc:2b:2f:28:6b:4d:ec:36:ad:39:61:e5:
4d:2b:0a:05:8d:bf:b8:03:4b:da:05:f0:31:80:69:
ef:ca:60:17:b1:b3:0a:07:b6:33:3d:24:05:aa:97:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:D8:05:16:9B:6D:B5:3B:E6:1D:EB:43:05:43:81:48:43:7C:37
X509v3 Authority Key Identifier:
keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:6c:58:00:27:1c:5f:2c:e8:fd:5a:59:f6:50:85:83:df:
2f:bf:c6:9e:b9:8c:4b:1b:a7:d0:ed:f1:a6:89:da:f6:3c:a2:
23:03:c6:ae:6c:6c:d8:fd:c4:b3:5a:ca:46:8d:c4:78:15:57:
f5:a7:35:03:05:69:01:de:2f:1e:19:94:3f:4f:cf:45:bb:9e:
b9:f1:66:77:09:c1:36:61:14:b6:87:49:64:d4:95:c1:73:56:
7c:b6:af:85:34:9a:5a:e8:76:d4:e3:38:83:8b:26:ac:57:62:
b2:59:98:4a:2d:55:43:53:ab:e5:8e:8c:42:c2:c5:74:60:8c:
14:52:59:fd:1e:3d:32:0b:bb:ea:e5:d0:a5:76:ee:65:66:90:
e4:04:ba:8a:0f:4a:e1:b5:a4:26:5b:7e:18:54:23:8f:d1:18:
98:2a:71:45:db:d0:00:f4:dc:12:82:cc:00:68:4e:33:c3:9b:
ce:e6:0c:b4:e7:cd:b3:64:8f:72:ed:51:16:d2:36:bf:78:ce:
8a:ac:ef:25:17:36:49:71:99:25:73:0c:33:ad:6e:94:4f:bf:
8d:3b:3a:56:15:a8:83:54:4d:87:0e:88:df:69:ae:1a:20:f9:
41:d2:88:4a:f5:76:3b:77:0a:5e:c8:03:03:35:81:2d:32:4e:
4c:06:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:57 2025 by rpki-client