Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: +vnc3Vrqkm741Hdg2EGuzw/thNjoQltH+29V6T08xUk=
Subject key identifier: 5A:4F:B0:29:A5:94:00:98:CA:FB:99:75:59:DC:D8:C1:52:A9:51:04
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019922C348913C0A77CB808BB5DFC95AA0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0E66
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: m+4XQzwPjXAwVNZOGwhBsAt+sMMb2xhgyld157n5XJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:48:91:3c:0a:77:cb:80:8b:b5:df:c9:5a:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=5a4fb029a5940098cafb997559dcd8c152a95104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:36:43:51:c0:e6:d1:59:f5:cc:ac:9e:52:
16:e6:74:9f:84:60:d1:a0:95:16:5f:f1:a3:d9:91:
5d:9b:c4:89:f5:80:4a:a6:be:88:39:9a:28:2a:f2:
9c:52:00:61:0d:48:78:9e:c4:34:3d:cc:c0:e7:ff:
32:3e:dd:1c:23:c3:8b:2c:c1:cc:22:39:9d:f3:f3:
74:56:c7:3a:33:cf:b4:98:81:b5:fc:ff:8d:04:97:
97:59:a4:c3:7a:97:aa:39:61:8e:b6:67:22:c1:d6:
08:34:73:a2:9a:33:7b:9d:1f:24:3a:4d:b8:72:c4:
0a:70:46:d4:20:11:e7:d7:88:ec:7f:de:21:f9:0b:
84:d9:82:95:b6:a9:f5:75:e1:30:8b:c0:6b:00:86:
d7:94:56:fb:2e:bc:04:ed:8a:8d:58:93:4a:7b:39:
e2:81:03:aa:53:e3:ca:c0:3e:ec:8b:1c:49:6c:53:
3b:be:0d:e7:40:6e:4a:19:21:24:77:d3:1d:a6:16:
2d:c1:99:b6:5d:54:bd:9e:9e:82:b2:0a:d1:47:c1:
e3:b7:6a:d4:5b:4d:1b:98:f0:25:bb:4e:42:19:54:
19:d9:39:88:8e:0a:54:40:11:89:0c:4a:67:22:89:
a8:a8:ed:e6:50:ca:ef:2f:9c:a3:48:12:90:39:99:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:B0:29:A5:94:00:98:CA:FB:99:75:59:DC:D8:C1:52:A9:51:04
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:0d:d1:e8:7e:3e:26:2e:1b:5a:1b:26:5b:68:96:a5:13:
c9:15:50:29:42:42:88:98:dc:47:ef:28:62:2e:7f:64:9b:a4:
c1:5b:c0:cf:5b:06:22:79:61:94:a2:9e:02:13:de:a1:31:39:
3f:6e:fc:bd:0e:22:64:7d:d6:c6:1b:59:86:2e:66:ae:c2:7e:
3b:1f:a7:e4:2f:7c:4c:89:67:a0:10:3f:ab:3c:34:b4:3b:eb:
54:66:64:49:70:11:54:f9:8e:2a:27:aa:b8:e0:48:3d:21:10:
5d:b2:66:38:fc:8e:9d:07:4b:6a:d2:6e:eb:cc:5e:ef:55:93:
77:8e:5e:f7:1d:51:ec:af:d6:44:99:93:14:16:57:00:50:31:
1c:3f:83:b1:db:ea:da:51:f5:d8:fe:52:2b:d1:40:2f:4b:14:
db:86:17:81:74:58:e2:e4:d5:3a:19:6a:bf:47:db:2c:cb:9a:
fb:d1:da:ec:cc:38:13:b5:6d:4d:20:93:d8:34:74:60:a0:01:
8f:e5:10:03:aa:f7:c0:e9:ff:1c:04:1e:f4:78:ca:7b:df:ed:
d6:56:14:2e:d4:33:b9:aa:ca:94:8b:a7:91:90:d1:5c:e5:64:
d7:ab:21:a6:b6:9b:24:9c:5f:36:51:5b:3c:60:ba:42:93:7b:
83:a1:56:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw0iRPAp3y4CLtd/JWqDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjJlMzViM2M1NTliNmQ4NDM2NjdjYWQ1ZGFjNjc0ZTAx
Yjk2YzMwHhcNMjUwOTA3MDYwMDQ3WhcNMjUwOTA4MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg1YTRmYjAyOWE1OTQwMDk4Y2FmYjk5NzU1OWRjZDhjMTUyYTk1MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgw2Q1HA5tFZ9cysnlIW5nSfhGDR
oJUWX/Gj2ZFdm8SJ9YBKpr6IOZooKvKcUgBhDUh4nsQ0PczA5/8yPt0cI8OLLMHM
Ijmd8/N0Vsc6M8+0mIG1/P+NBJeXWaTDepeqOWGOtmciwdYINHOimjN7nR8kOk24
csQKcEbUIBHn14jsf94h+QuE2YKVtqn1deEwi8BrAIbXlFb7LrwE7YqNWJNKezni
gQOqU+PKwD7sixxJbFM7vg3nQG5KGSEkd9MdphYtwZm2XVS9np6CsgrRR8Hjt2rU
W00bmPAlu05CGVQZ2TmIjgpUQBGJDEpnIomoqO3mUMrvL5yjSBKQOZn3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpPsCmllACYyvuZdVnc2MFSqVEEMB8GA1UdIwQY
MBaAFBHy41s8VZtthDZnytXaxnTgG5bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUt
MjUwYTllNjcwOGQwLzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQw
LzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo4N0eh+
PiYuG1obJltolqUTyRVQKUJCiJjcR+8oYi5/ZJukwVvAz1sGInlhlKKeAhPeoTE5
P278vQ4iZH3WxhtZhi5mrsJ+Ox+n5C98TIlnoBA/qzw0tDvrVGZkSXARVPmOKieq
uOBIPSEQXbJmOPyOnQdLatJu68xe71WTd45e9x1R7K/WRJmTFBZXAFAxHD+Dsdvq
2lH12P5SK9FAL0sU24YXgXRY4uTVOhlqv0fbLMua+9Ha7Mw4E7VtTSCT2DR0YKAB
j+UQA6r3wOn/HAQe9HjKe9/t1lYULtQzuarKlIunkZDRXOVk16shprabJJxfNlFb
PGC6QpN7g6FWuw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client