Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File: eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier: Tg9K2yS0Y8WFuIAyJiWVpXGBtIWQagAIvVwf9twnbos=
Subject key identifier: 3D:4E:66:69:1A:70:1F:55:BC:33:C8:0A:E5:1A:28:15:42:DC:00:4E
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer: /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial: 019A4D3D2D50D7DD80328257B9DCD9F04A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number: 07D0
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: gbETCbRIO0xrS2XZRx1dRSS82DTOK3t2Rpzh7j+VGTQ=)
2: q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa (hash: Gog+17gwzclnNwGlh4/AMdyY5c+5OZ3UEQLglik+gVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2d:50:d7:dd:80:32:82:57:b9:dc:d9:f0:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=3d4e66691a701f55bc33c80ae51a281542dc004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:0d:73:9f:2a:0d:f6:f1:0e:66:75:ed:d7:
45:ac:58:e8:bb:8b:41:5a:4d:97:56:13:f8:c0:13:
b3:0a:5b:dc:20:43:1c:ab:a7:1c:84:d7:3a:db:e0:
34:36:f0:69:de:7c:de:96:7a:64:2e:2b:0e:eb:64:
bd:55:83:bd:76:97:ea:46:7d:22:4b:e2:b2:19:64:
90:e1:b9:97:7a:0d:31:43:8e:90:6f:12:9f:0d:d1:
50:94:69:57:a1:cf:33:a1:a6:60:3d:45:d5:21:67:
dc:44:d4:e6:80:ce:1d:05:7c:8b:f7:ce:1f:25:05:
cf:02:f6:c2:7c:84:f2:f0:8b:a0:3d:a0:1d:38:54:
68:05:db:01:ed:66:05:35:65:0e:89:66:7d:a5:4e:
4c:f9:49:38:62:69:a7:78:f1:0e:ee:e5:f1:40:02:
14:a9:8a:9c:96:f2:7d:04:b6:6d:16:62:58:e7:41:
05:0a:fa:e5:da:e1:dc:fb:5c:7b:0e:23:43:0b:08:
76:90:bd:9d:08:64:7a:6f:29:54:64:91:34:92:dc:
ee:6f:2e:c6:bb:cb:00:f6:d3:47:da:f6:99:e2:1c:
a3:c6:ae:b9:f0:fa:a5:c4:50:d8:6c:d6:19:34:fe:
ee:62:b8:65:c0:05:00:43:76:7a:b5:b2:4a:91:0f:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:66:69:1A:70:1F:55:BC:33:C8:0A:E5:1A:28:15:42:DC:00:4E
X509v3 Authority Key Identifier:
keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d0:f0:67:5a:cf:05:62:b3:d6:5c:c6:f2:9c:43:23:f5:27:
fa:cc:60:b8:db:0b:2f:1e:06:61:75:66:16:58:3e:e4:48:4a:
80:c3:25:27:38:7a:1e:08:63:19:52:60:28:0b:2e:b4:80:59:
b8:3c:04:26:92:a0:cf:c7:c7:01:1d:45:ec:d0:ba:aa:4f:60:
4a:51:dd:80:67:42:a4:e1:7f:18:a1:16:f7:6e:14:7a:78:5f:
af:bc:99:74:e2:c5:e6:55:60:de:72:9b:db:3b:08:cb:a9:e9:
8e:03:2d:2b:bf:35:87:06:ba:e4:2f:fd:fd:c3:90:ec:4c:89:
71:e1:24:7b:7d:f2:52:5b:fb:ec:b9:84:db:8d:c9:56:b9:47:
0d:49:f9:27:01:e6:97:31:54:0b:ec:7a:5f:c0:f3:6d:2e:a5:
59:ef:ac:d9:42:26:95:ad:34:34:8b:de:41:c5:fb:90:35:9f:
c0:48:6e:1f:9c:ca:75:35:09:ff:66:42:64:9a:ab:fa:0b:d9:
ad:48:98:99:9e:ba:91:2f:59:05:cb:80:d2:5f:cf:bd:e3:a0:
a7:ab:51:17:d0:b8:b1:dc:78:3b:6e:7f:8b:b8:07:ad:d6:63:
3a:3d:59:ac:ac:5f:f6:2d:e5:cb:4c:e4:78:dc:3e:3f:06:39:
c8:a6:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:24 2025 by rpki-client