Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: LcmbOGHdOy2KaWnoR02XqtjROTFScPDqaYSKdzrob+8=
Subject key identifier: D5:1F:A6:F4:B2:65:ED:75:8D:6D:21:33:73:2C:69:F2:5E:40:78:D7
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019A4D747C0EE24469465F6A03657B01311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 06F0
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 4YcylAobC6qZNOt7G4ZVdDArTbltiJEVkkPegLFRDe8=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7c:0e:e2:44:69:46:5f:6a:03:65:7b:01:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=d51fa6f4b265ed758d6d2133732c69f25e4078d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:45:47:49:ba:da:74:7b:5b:eb:a9:35:d7:
96:96:f1:1e:40:9c:5f:4d:85:e8:b9:66:6e:aa:f5:
e0:19:ac:29:de:c2:e7:c7:93:b3:f8:e3:d1:59:ab:
6f:77:93:9d:fb:f2:3c:df:9c:46:e5:03:c2:1a:b6:
06:4a:54:24:b1:40:0e:4d:60:8c:9c:60:4e:e4:31:
60:0a:ff:d8:12:cb:e7:d7:b7:60:a1:3e:08:08:7c:
5f:7c:bb:af:aa:ac:99:cc:40:fe:96:b4:0f:14:d4:
e7:15:26:2d:28:f3:be:9d:cc:c1:4c:35:fb:13:f0:
00:99:3d:67:d2:6f:fb:0b:5c:30:e6:a7:33:86:8d:
ac:82:d3:e2:5f:8e:90:ba:6e:0b:a8:9b:a2:7a:a2:
68:8a:57:c9:0d:45:0b:6e:ae:93:b9:7e:69:fa:95:
d5:06:f0:89:d3:c8:e2:70:31:53:8e:36:9f:fe:5a:
a6:e2:89:dc:36:7b:41:17:49:6f:b2:11:49:74:9b:
c3:90:1d:68:c9:77:01:ac:6b:62:d6:1c:e6:cc:0e:
13:c1:a6:78:40:c7:6b:fb:47:75:42:80:90:b5:ac:
2a:26:4e:0f:00:c9:c0:21:c3:8f:8c:d6:87:e8:27:
7f:74:62:0e:f1:64:55:7f:ac:d8:8e:78:5d:2e:9f:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:A6:F4:B2:65:ED:75:8D:6D:21:33:73:2C:69:F2:5E:40:78:D7
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:83:8d:9c:c2:40:6c:7b:98:33:f3:0b:52:40:3d:73:00:
75:07:17:34:f8:37:c8:51:d1:ae:db:90:32:e2:7b:b6:d6:bb:
c6:c2:1e:d1:27:c7:f2:1b:1b:71:37:c1:75:56:cb:42:03:8f:
00:77:c0:24:2e:dc:27:81:e7:6b:8e:2a:c5:ca:72:05:79:88:
f6:24:70:fd:75:56:89:0c:b2:21:a5:a2:f8:9c:17:28:ea:ed:
c6:f3:1a:d8:f3:3b:19:26:6d:7c:75:2d:c7:85:04:40:a3:00:
47:66:a9:e9:28:dd:2b:65:db:21:fa:35:b6:77:a0:b3:02:86:
13:ff:ed:2b:7f:4d:ef:c7:98:28:59:32:8d:a6:ef:ec:25:7f:
39:49:46:0e:bd:d9:3f:6d:73:35:64:b4:a6:c3:12:b5:e6:47:
88:f6:c6:2d:c4:4b:81:d0:d0:09:9d:91:41:5e:68:82:ab:ee:
f7:91:d1:fd:e0:79:5b:7f:95:3b:b1:be:cd:7c:65:1c:9a:a9:
7b:c6:f4:f3:da:ca:af:07:d9:3f:0c:e9:66:44:72:bb:4e:42:
eb:fb:8e:92:c9:bc:a5:27:47:37:9c:e2:ef:95:ec:59:cd:ba:
57:78:df:85:78:2b:2e:5c:fc:b3:9d:db:b6:f6:d0:21:58:5f:
c7:0e:91:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHwO4kRpRl9qA2V7ATEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm
ZTJjNTIwHhcNMjUxMTA0MDYwMTEwWhcNMjUxMTA1MDYwMTEwWjAzMTEwLwYDVQQD
EyhkNTFmYTZmNGIyNjVlZDc1OGQ2ZDIxMzM3MzJjNjlmMjVlNDA3OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJpFR0m62nR7W+upNdeWlvEeQJxf
TYXouWZuqvXgGawp3sLnx5Oz+OPRWatvd5Od+/I835xG5QPCGrYGSlQksUAOTWCM
nGBO5DFgCv/YEsvn17dgoT4ICHxffLuvqqyZzED+lrQPFNTnFSYtKPO+nczBTDX7
E/AAmT1n0m/7C1ww5qczho2sgtPiX46Qum4LqJuieqJoilfJDUULbq6TuX5p+pXV
BvCJ08jicDFTjjaf/lqm4oncNntBF0lvshFJdJvDkB1oyXcBrGti1hzmzA4TwaZ4
QMdr+0d1QoCQtawqJk4PAMnAIcOPjNaH6Cd/dGIO8WRVf6zYjnhdLp9l7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUfpvSyZe11jW0hM3MsafJeQHjXMB8GA1UdIwQY
MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt
OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj
LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiyDjZzC
QGx7mDPzC1JAPXMAdQcXNPg3yFHRrtuQMuJ7tta7xsIe0SfH8hsbcTfBdVbLQgOP
AHfAJC7cJ4Hna44qxcpyBXmI9iRw/XVWiQyyIaWi+JwXKOrtxvMa2PM7GSZtfHUt
x4UEQKMAR2ap6SjdK2XbIfo1tnegswKGE//tK39N78eYKFkyjabv7CV/OUlGDr3Z
P21zNWS0psMSteZHiPbGLcRLgdDQCZ2RQV5ogqvu95HR/eB5W3+VO7G+zXxlHJqp
e8b089rKrwfZPwzpZkRyu05C6/uOksm8pSdHN5zi75XsWc26V3jfhXgrLlz8s53b
tvbQIVhfxw6RBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:18 2025 by rpki-client