Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: /P+Kj/fJdsi+ilP2PltDQnJ6lsbV0wvwUr9q5LFcSeo=
Subject key identifier: 0C:C6:D0:43:67:A4:02:5E:BD:BF:69:7C:77:60:D7:27:BC:8B:ED:A1
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 01984BC21CCB784CEB4D2B3FC05DBB2D6F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 0F98
Signing time: Sun 27 Jul 2025 12:01:09 +0000
Manifest this update: Sun 27 Jul 2025 12:01:09 +0000
Manifest next update: Mon 28 Jul 2025 12:01:09 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: KkffjKgIKYX8qPG54tSaBwG3UDTDrouLT2Y5MQi8vR0=)
2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:1c:cb:78:4c:eb:4d:2b:3f:c0:5d:bb:2d:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Jul 27 12:01:09 2025 GMT
Not After : Jul 28 12:01:09 2025 GMT
Subject: CN=0cc6d04367a4025ebdbf697c7760d727bc8beda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:48:1c:c2:af:54:11:71:28:f9:51:5f:56:
d3:3a:1c:60:33:61:25:b4:c7:74:b0:74:3a:b5:62:
c6:e2:54:7f:f4:14:c1:46:3d:25:5b:4e:ed:d3:26:
96:f3:fc:7c:07:23:55:53:d3:2d:9c:92:ff:54:7a:
99:1c:c6:93:e4:77:3d:21:31:a3:3e:9b:8f:dc:2e:
74:ff:9c:8c:1f:a6:a1:67:ac:ab:ec:d3:ef:2e:26:
03:69:ea:ad:47:9f:31:1e:6a:d8:7f:2b:b9:d1:bb:
5b:63:f5:b7:90:6d:6a:7d:72:02:5f:87:61:61:6d:
b6:8b:16:da:bb:2d:ed:34:f7:1e:31:a5:96:c0:a2:
49:fe:cf:6b:b8:74:f1:39:9a:6a:24:65:c6:94:89:
f2:57:e3:c5:41:b9:88:fa:56:fc:bd:24:eb:a6:34:
dd:ae:b4:4e:73:f5:01:b2:e2:ca:e9:40:f6:80:a9:
60:44:9a:8a:6d:36:e8:17:3c:2d:7f:af:25:c8:9c:
96:c0:2d:85:a7:4a:6c:bf:e8:95:ef:69:f8:93:b8:
8f:22:43:fe:02:21:ac:e9:d6:f4:38:c3:30:78:1c:
a6:54:10:dd:a5:3f:90:29:b4:6f:a7:f4:5b:83:3c:
e3:be:f4:4f:34:31:0b:19:30:d4:bc:8a:ff:11:85:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:D0:43:67:A4:02:5E:BD:BF:69:7C:77:60:D7:27:BC:8B:ED:A1
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:1c:1e:98:02:b1:06:e9:91:3f:72:8e:86:4d:49:26:4a:
8f:59:ce:6c:bf:d2:06:62:8d:cc:f1:e4:23:2e:52:aa:df:b4:
f1:d3:81:e0:b5:ff:04:1d:44:1d:2a:af:a2:f4:50:9d:14:e6:
c6:2e:2b:98:5f:5f:0e:92:58:05:6c:e2:32:16:22:5d:5c:61:
66:a4:c9:3a:40:20:90:5a:2a:ac:0b:27:0a:ba:cf:7e:d6:75:
e7:59:da:eb:54:88:e5:3e:ce:62:85:7a:38:a9:2b:e3:f4:17:
e6:d4:ef:d2:bf:78:0c:95:c8:0c:d9:e3:a7:18:8b:3a:27:e3:
93:98:c1:63:22:be:98:82:d2:dd:e2:b7:90:4b:c5:0e:0f:62:
ac:cb:b6:e6:34:ae:ac:9e:38:40:cd:b9:8d:d8:d1:b0:2c:57:
d8:92:4e:f8:74:01:b5:88:f0:78:54:7b:0a:24:91:e3:fb:8d:
e1:1b:d7:68:77:81:a4:12:1d:85:51:b9:62:02:ff:99:8b:8f:
d7:4c:d1:00:23:4c:40:0d:78:ab:43:68:a7:f2:f1:a4:33:7d:
92:8e:d3:ec:a7:66:63:33:32:91:41:98:a6:a6:cb:23:aa:65:
ea:73:6a:2c:16:03:9e:69:8a:7a:7a:bc:91:c0:0d:df:76:bf:
be:b3:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:46:24 2025 by rpki-client