Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File: _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier: RysQTC4BNKJN4eIJd2WCy7yUXtbnihfXHl6nA4zKOhE=
Subject key identifier: BF:F6:E8:83:EA:04:DD:EC:EC:1A:CC:70:1B:BC:21:D9:94:4D:E7:63
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 019A53E3F828E0757057E9BE2A70BC7B6443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number: 0BF4
Signing time: Wed 05 Nov 2025 12:00:40 +0000
Manifest this update: Wed 05 Nov 2025 12:00:40 +0000
Manifest next update: Thu 06 Nov 2025 12:00:40 +0000
Files and hashes: 1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: ZyXRCvIHfptvt/uC93aQ2pDsIN4jdjVkSGfzb/o6Tbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f8:28:e0:75:70:57:e9:be:2a:70:bc:7b:64:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Nov 5 12:00:40 2025 GMT
Not After : Nov 6 12:00:40 2025 GMT
Subject: CN=bff6e883ea04ddecec1acc701bbc21d9944de763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:9d:31:3c:93:8d:20:30:5e:42:87:c6:8b:
b0:aa:52:a9:03:ef:71:b1:17:e0:65:6c:0e:82:3a:
58:bf:6d:20:e7:99:fb:85:bf:a5:2e:4b:5b:40:2a:
54:7a:c6:6a:0d:1a:7c:42:7d:b8:3f:64:d1:8b:94:
24:0d:aa:35:eb:39:a7:52:3a:9e:ff:52:db:c7:ee:
8b:3c:b0:bf:a0:b5:05:35:fc:b4:fb:f5:1e:a3:fa:
a5:5b:4f:39:f5:ae:a6:0b:a7:c2:de:cc:4b:fe:87:
ea:25:a5:1f:3a:b1:24:c8:65:59:54:a8:39:56:9b:
92:d1:2b:8f:70:85:9a:ed:39:fd:93:71:5a:27:32:
23:4a:09:90:78:ec:ae:c8:27:43:bc:30:26:07:54:
e1:35:ec:a2:ea:b9:74:99:84:59:79:3f:7e:35:1b:
ff:33:1d:1c:c3:d8:91:be:99:59:3c:53:8d:c1:5f:
e4:73:ee:85:1e:1d:b1:30:59:fb:29:b6:b6:ff:7c:
79:35:ec:98:29:da:0f:63:56:8c:51:4f:18:37:a5:
9f:86:bf:43:a0:d7:28:5a:5a:66:7d:d7:ce:58:5c:
14:35:6f:bd:9a:f4:ef:b2:8d:46:3c:b2:a4:fa:65:
4d:34:90:74:c5:f8:a3:c5:3b:8c:34:80:4a:f2:fd:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:E8:83:EA:04:DD:EC:EC:1A:CC:70:1B:BC:21:D9:94:4D:E7:63
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:18:58:78:f7:1d:97:b6:c0:b9:8f:34:60:09:d9:2e:39:88:
f9:48:7c:0a:77:59:15:99:17:fb:ef:3d:f9:6d:60:9b:29:10:
6e:0b:38:23:95:56:cb:47:ea:28:73:3a:9b:7a:4b:5f:c7:cd:
51:0d:d4:8e:0d:4f:19:85:49:5b:7f:eb:f8:f6:6f:53:b7:db:
c5:08:f3:e6:fe:25:88:30:16:48:b7:3c:14:90:d0:10:b9:0f:
4c:20:2d:d1:19:6f:91:e5:f4:3c:dd:1b:f8:dc:a0:c3:4a:cf:
4d:a7:0b:b7:cc:44:5d:02:2b:72:ca:cf:67:ca:90:33:7b:25:
df:f8:7b:f6:ae:93:d5:48:bb:4a:9a:21:6f:67:7e:ca:1e:05:
89:79:ee:52:87:21:68:2c:b4:43:4b:a7:14:e2:ed:c6:1b:44:
6a:6a:bf:78:b6:cb:ed:ac:70:d4:7a:7a:1f:d4:f0:c8:c2:f4:
04:b4:65:b0:d0:38:01:24:0a:62:0f:54:ed:46:3a:74:e8:ea:
e2:d6:5f:7b:2d:f7:06:ed:25:60:0f:00:81:48:e8:af:8f:bb:
f3:03:9f:19:f4:6e:51:93:01:c5:99:41:da:5c:1d:4f:ba:26:
ab:ed:66:cd:81:19:67:66:dc:a3:e8:c2:c5:cc:cb:f3:27:9a:
28:31:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:10 2025 by rpki-client