Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: pFSfmNsYrse27W+xTkt00uxgDuo/1pvQXV46UXQYl7I=
Subject key identifier: 4B:AC:BD:09:1F:9A:D7:B6:95:A9:9A:D1:4A:62:A0:B3:27:E7:6C:00
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019A51514AEB98DD361B0E5AE9E4B6F4626A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 10A4
Signing time: Wed 05 Nov 2025 00:01:13 +0000
Manifest this update: Wed 05 Nov 2025 00:01:13 +0000
Manifest next update: Thu 06 Nov 2025 00:01:13 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: MtIOMOUKBs7lMYgz6g5DiqWyEo8cPFTbdKPJ8cdt9Tw=)
2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4a:eb:98:dd:36:1b:0e:5a:e9:e4:b6:f4:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Nov 5 00:01:13 2025 GMT
Not After : Nov 6 00:01:13 2025 GMT
Subject: CN=4bacbd091f9ad7b695a99ad14a62a0b327e76c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:f7:d8:23:3d:27:f0:6b:ea:8b:0a:eb:e7:
17:4c:3b:6f:47:9b:f2:ec:9f:4b:b9:3c:d9:42:18:
4f:6e:36:88:79:bd:e6:4f:b4:10:f5:fc:6d:4b:e2:
33:53:bd:ce:68:7c:87:d9:38:fa:f1:d4:3c:5a:ac:
82:f3:c0:b1:8c:37:88:42:db:a8:b8:24:d4:dd:7e:
15:34:8b:7f:10:72:0e:51:41:6c:ea:cb:c7:94:b5:
f6:32:2f:6d:38:f1:fb:4f:5c:30:88:e1:d3:9d:0b:
7a:f5:17:cc:f1:19:04:04:9a:51:b0:3e:fa:a9:86:
96:fd:95:35:02:1a:71:d8:74:b9:2e:3a:9e:39:6a:
a8:09:9b:5f:2e:2c:21:d8:c4:fc:a1:c3:ad:3c:a5:
8b:a0:4c:63:4a:b4:02:6c:19:0c:ce:9a:32:c1:3a:
0b:19:8f:28:6a:c1:d2:66:97:2d:8e:a2:a3:1e:25:
70:a9:16:5d:2f:72:48:dc:94:dc:28:54:1c:ca:a6:
fd:6a:dc:4d:7c:5d:ff:e5:6f:1f:e7:45:a3:45:c0:
79:06:69:f1:c0:a2:41:9a:c0:e6:d7:07:0e:6a:60:
af:19:24:7d:43:9b:7a:f7:d1:77:5e:11:51:8e:c3:
ba:d6:97:c1:be:b5:82:f0:79:08:f8:c6:48:7c:d4:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:BD:09:1F:9A:D7:B6:95:A9:9A:D1:4A:62:A0:B3:27:E7:6C:00
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8f:ab:fd:f0:c6:d0:8d:07:0b:0d:a3:a8:4a:12:0b:d9:6c:
6e:78:0b:f5:df:39:fe:00:25:af:a2:a3:61:13:16:04:e8:5a:
1a:a1:20:d2:e3:08:75:3e:ca:a4:b3:59:a9:fb:3e:2f:ec:fc:
7a:8b:ab:f3:4e:24:20:55:d2:5a:1c:05:0f:42:09:87:db:ef:
90:16:18:27:cd:02:af:5e:1f:b4:56:9d:39:79:cd:58:14:bf:
af:2e:21:d4:76:3c:de:58:0a:59:22:7d:ec:cd:0b:81:16:c5:
39:59:d8:d8:a6:60:86:ef:0b:c3:51:60:13:f2:cb:d5:57:8d:
bf:c7:82:9a:74:19:d9:e3:82:39:a6:87:70:96:b0:03:82:68:
d4:e6:23:51:66:74:2b:72:d9:90:1a:1e:7b:0b:2d:ae:92:eb:
72:04:37:c0:46:6f:b7:aa:a5:69:80:4b:bc:33:50:d1:cb:8f:
d0:ca:2e:a7:63:6b:16:de:6d:e9:87:a0:58:36:bb:d4:a7:e6:
2a:d1:60:5e:e4:cf:78:48:58:95:96:37:09:85:e8:6a:32:4a:
4f:db:a0:78:32:c1:c3:47:9e:eb:27:f2:68:32:8a:fa:c5:3a:
7a:92:f0:80:84:ef:40:11:29:bd:8d:91:4a:f4:a1:47:f2:86:
bb:f7:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:40:01 2025 by rpki-client