Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: JC3/qTmvmSJ5FwWsfO56sUCCLacepGD+XutHTdWed4I=
Subject key identifier: 52:E9:C2:11:1F:94:8C:EE:E7:8B:84:88:11:B9:FA:62:36:F3:8D:F2
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019A72CACC9B891F2DEC1A98651D1CD476A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0F14
Signing time: Tue 11 Nov 2025 12:01:24 +0000
Manifest this update: Tue 11 Nov 2025 12:01:24 +0000
Manifest next update: Wed 12 Nov 2025 12:01:24 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: t+d1jPoaDszbpwlCDFwuEVsU1YQ7YAYoT4D/zsC5w0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:cc:9b:89:1f:2d:ec:1a:98:65:1d:1c:d4:76:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Nov 11 12:01:24 2025 GMT
Not After : Nov 12 12:01:24 2025 GMT
Subject: CN=52e9c2111f948ceee78b848811b9fa6236f38df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:80:c9:7c:39:bc:61:56:01:45:18:d8:8b:
22:95:c0:92:d0:41:2e:67:dd:22:69:f8:ad:16:43:
24:05:f1:5d:dd:eb:83:e3:bb:78:ef:74:ab:b7:ee:
d6:58:9d:2b:45:15:f5:93:d7:5a:6b:eb:2d:3b:cc:
ab:92:24:f4:df:b8:50:54:23:40:d3:02:8b:24:d4:
f5:61:18:1e:94:aa:61:6b:54:89:c0:26:d1:a5:71:
b1:c1:56:53:c4:c8:2d:84:b2:d0:43:e1:e9:84:d6:
7f:5f:cb:91:a2:49:43:8e:3d:bd:95:c2:fc:a8:23:
6c:92:81:ee:88:0d:9c:f2:2c:b4:fe:00:1e:ab:10:
f7:16:9a:15:c5:e9:77:52:76:b9:cc:cb:a6:1a:bb:
b7:76:cc:ce:e1:0c:81:92:41:a2:59:e9:e5:6e:94:
09:66:2f:c4:9d:2d:fa:48:8f:1b:5c:f1:6a:d4:b4:
b3:3a:81:e4:61:4d:5a:bd:be:f4:d7:f3:80:b0:bc:
94:61:df:39:e1:36:8c:cb:fc:29:1c:ec:3b:e0:e3:
5d:ab:50:23:d1:e7:a1:2a:69:cf:94:b6:68:89:e0:
45:5d:b4:a9:5a:fa:ac:33:ef:44:58:59:26:55:77:
2b:e8:75:60:d6:62:83:5d:97:02:83:d4:95:0e:3c:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E9:C2:11:1F:94:8C:EE:E7:8B:84:88:11:B9:FA:62:36:F3:8D:F2
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f9:63:6a:33:76:cc:e6:b8:97:b4:4f:33:42:5f:1d:31:72:
24:de:f4:75:b4:8b:69:98:3d:cb:94:cf:bd:8b:e5:d1:02:d0:
69:3e:61:29:c6:a6:d4:be:3b:5e:0c:3a:8c:36:f3:25:b7:85:
07:02:9b:cb:05:73:c7:d8:82:df:30:57:32:4b:7f:86:10:3f:
45:1a:d7:f2:22:69:e0:b4:1c:9e:76:c1:e1:d0:ab:86:dd:86:
79:fd:0f:bf:33:39:dc:eb:65:b3:49:91:51:55:12:f7:47:40:
7b:28:9c:51:8b:50:73:44:bf:cf:dc:0d:08:c5:7a:c8:cc:03:
1c:46:32:1c:c2:5f:4c:91:dc:d1:58:87:d5:b6:6a:d0:33:a8:
51:c6:1c:99:39:fb:f6:77:0d:8c:a4:b4:8c:4e:5d:91:a5:32:
31:72:87:a9:51:fc:f2:57:b1:03:c0:eb:95:02:d9:79:a1:f6:
91:1b:ee:71:4e:51:4d:31:31:70:b3:ac:97:aa:8e:4c:28:2e:
5a:cb:ac:be:35:ab:97:a2:5c:85:b8:39:06:3d:b9:9b:c0:cf:
cf:76:16:a7:a7:46:fe:46:a7:b6:a5:e9:05:b2:e1:e3:37:ab:
38:b7:e4:71:81:33:c6:35:df:c5:bf:54:7e:7c:72:09:ae:3e:
46:61:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:44 2025 by rpki-client