Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: 7Z9kQbZ1UgxlGBpEZwGyNqdgrkTySHA2mYwShZqTRJ8=
Subject key identifier: 4B:03:23:AA:00:1E:8A:58:14:42:8F:F2:CB:EC:8B:A4:35:E1:B6:E5
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 019A4D7413860D87BC07DA08B3ED2EBB5180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 1447
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: aXfnyLWmfy5T6eL+ahuZpBj0vdk2jWHVZ62fZOqQ5hs=)
2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:13:86:0d:87:bc:07:da:08:b3:ed:2e:bb:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=4b0323aa001e8a5814428ff2cbec8ba435e1b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:19:ab:be:ac:a9:90:73:a9:e2:1f:1e:c6:
bb:ea:8c:45:7c:41:b1:90:32:12:bb:b6:d0:37:f6:
59:3e:48:4a:45:de:54:db:e3:4b:6e:3f:69:0c:22:
76:53:23:fd:16:76:6e:9e:ff:6a:f9:1f:ee:35:a0:
75:ba:0b:27:2f:83:7f:46:59:78:1a:8f:01:a5:da:
d7:36:4c:25:4f:1f:bf:77:6d:81:00:a0:3b:b4:db:
ab:de:a0:29:2f:ad:95:ea:38:a0:99:c8:72:94:70:
e5:3f:43:74:c9:30:83:56:64:33:51:cd:45:54:34:
0e:e6:e5:2b:a8:be:ca:c3:6c:6d:f5:48:e0:5d:41:
3b:a5:a9:fe:3c:86:4d:c7:f6:c8:59:c9:97:e1:ce:
1f:c3:cb:86:fc:3b:f3:45:07:6d:39:66:84:cc:4e:
10:26:8d:fe:2e:f1:9e:73:c4:6c:c5:89:74:76:5a:
41:55:21:a2:f8:f3:7a:98:d2:01:de:65:b1:40:03:
36:0d:70:de:f7:97:48:b8:9c:40:cb:b2:d7:64:b8:
c2:8f:ea:96:1b:f2:b1:95:0f:a6:62:1f:b9:93:df:
3f:18:f0:0f:9a:5d:8f:8e:15:37:10:a4:ef:90:c6:
e1:d9:04:a0:9a:84:a6:fb:33:51:9a:cb:85:be:bd:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:23:AA:00:1E:8A:58:14:42:8F:F2:CB:EC:8B:A4:35:E1:B6:E5
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:19:5f:76:bd:18:0c:06:6e:da:3a:30:bb:84:e9:df:74:
96:5f:45:91:fd:d4:e6:24:bb:10:6c:2a:de:cd:fc:f9:be:f3:
51:6a:1a:04:a0:40:49:85:87:99:a7:61:38:36:13:67:12:03:
b6:72:ab:11:7a:a7:60:b2:2c:a8:56:bf:d8:29:e5:2f:8c:1e:
ae:44:5e:51:fc:2d:11:c0:b6:55:eb:49:6b:22:4c:59:0a:33:
e9:21:b3:a7:e2:d7:19:15:38:fe:c6:8e:c3:49:f0:94:db:04:
69:b0:f7:ee:54:ea:4f:1f:17:ba:b2:51:23:23:0c:ef:75:a7:
cc:10:c2:6d:3a:1e:67:f6:16:fa:1f:ab:ad:0b:3a:6e:62:31:
73:de:31:e9:bc:1f:ab:2a:2e:19:f7:36:93:3d:af:dc:90:2f:
c0:a6:d9:34:82:56:49:7f:9f:b4:d4:26:cc:2d:d6:e3:47:d8:
ad:f0:8e:7d:4f:6e:96:c9:16:40:f7:02:00:bf:49:92:62:55:
fa:de:8d:63:a0:6b:6a:dd:ac:9f:09:a8:f1:8f:a6:12:a1:b2:
7e:60:1b:93:cb:39:fd:a9:e1:16:76:ad:8f:0d:56:f2:c0:e1:
e5:23:a7:51:c3:b6:ba:86:91:27:ef:26:41:71:65:76:9f:86:
ae:f7:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:48 2025 by rpki-client