Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File: EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier: WdAVnbPBUPjKupMo5VW5VnOEgx7+gHSWxstRA0GUYl4=
Subject key identifier: 8B:52:AA:50:D0:FA:4B:46:B6:5B:23:9A:4A:06:1F:EA:86:D1:7F:D0
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer: /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial: 019A4EF5FCDDA39E22F7ABD3B26972A85DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:02:15 +0000
Manifest this update: Tue 04 Nov 2025 13:02:15 +0000
Manifest next update: Wed 05 Nov 2025 13:02:15 +0000
Files and hashes: 1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: yWsycGH5TuZtdIb3Gsfc2h1/DZThGu6XJN67XF8iJZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:fc:dd:a3:9e:22:f7:ab:d3:b2:69:72:a8:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Validity
Not Before: Nov 4 13:02:15 2025 GMT
Not After : Nov 5 13:02:15 2025 GMT
Subject: CN=8b52aa50d0fa4b46b65b239a4a061fea86d17fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:4a:92:ba:fa:75:47:7e:ab:43:86:bf:0a:
35:cc:61:72:a8:45:ed:ff:7a:29:31:cc:7b:82:85:
8d:2b:58:ff:3e:cd:a8:7c:cb:d9:62:a9:95:f8:0e:
02:19:82:c7:67:8c:83:21:29:da:09:05:5b:d3:31:
fd:0e:cf:78:d3:0f:1d:06:ae:52:9c:84:c2:e4:0f:
13:95:41:bf:3a:8c:fb:22:45:be:30:ca:cb:b0:f1:
6f:f5:10:c1:5b:fc:0f:47:ae:3e:19:d5:3d:79:a6:
cf:29:57:2e:f3:80:e8:64:e3:51:f6:f5:99:55:99:
42:0a:3a:32:9a:4f:ff:66:98:03:4d:47:76:71:b0:
3c:e3:77:05:a7:87:b5:49:29:9a:e7:89:26:68:a4:
76:f6:30:19:d3:9f:5d:41:d1:d4:96:81:60:09:9f:
33:1a:36:8d:81:59:71:a4:d7:48:3e:c7:a0:87:40:
d2:0e:11:36:dc:0f:94:93:77:46:a3:fb:0f:da:4f:
7c:4f:21:18:20:b1:54:48:1d:ea:91:78:ca:b5:5c:
03:a3:55:bd:e2:f3:e3:b1:2a:2e:24:da:ea:7b:5a:
61:c2:84:e5:96:11:ab:22:87:0e:e7:d5:01:29:35:
3c:6f:ec:bc:a7:30:55:56:a7:59:15:44:4c:ed:8e:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:AA:50:D0:FA:4B:46:B6:5B:23:9A:4A:06:1F:EA:86:D1:7F:D0
X509v3 Authority Key Identifier:
keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:2e:6b:7c:5c:cf:c3:1c:63:f3:41:4e:eb:9c:05:78:d1:
ca:eb:3b:c3:5b:f8:fb:b9:21:34:ba:3e:d8:c7:35:73:90:86:
b9:d6:c3:2d:0a:42:e3:b3:0d:81:4a:67:5d:33:c6:3e:c6:fc:
69:bf:8c:c6:af:55:79:da:2b:1d:8a:c5:90:fe:8d:bc:77:65:
93:03:d5:bb:26:99:93:c3:33:55:0d:09:f8:74:46:4e:26:95:
ca:87:06:dd:73:28:d6:b9:0a:32:95:94:e5:6a:3f:78:69:f5:
d4:cb:83:aa:21:63:df:6e:d1:4b:3e:8f:bc:d3:1d:cd:fe:9c:
86:5f:60:de:ae:95:b6:9d:97:1a:ae:d5:f8:91:fa:d5:80:dd:
e7:a3:75:06:80:04:95:1a:b5:2e:df:3c:8a:43:87:2f:4a:da:
a5:33:fc:2c:ff:34:e6:ca:e0:1e:91:f2:4b:08:c2:12:23:5a:
8d:0e:2b:03:4a:2e:b6:af:ac:8c:22:7f:de:16:d5:04:f7:9d:
69:56:ec:24:9c:ef:90:ab:b8:c4:d2:d0:17:aa:44:13:e1:a2:
f3:d5:4e:0f:9e:d6:52:2b:c0:07:8d:b5:85:36:d2:ec:ba:63:
c7:63:af:81:ef:43:4e:20:73:ee:bc:20:dc:b1:a9:9e:20:d7:
eb:18:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:54 2025 by rpki-client