Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File: EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier: bJhTtj9Xr7elbjmEIlX9Q9+XwVa4Y2N7N0L+LM4tlWU=
Subject key identifier: 69:F6:4B:10:95:7C:9D:A5:69:4E:1B:3B:B8:BF:27:A1:FA:91:27:6B
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer: /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial: 019A71B8DBE4FF3A56EDA5D2656F222F70E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: VQeJFy8qRhx8qifL6sPTamfs4LFTgAQ4XXzFLctBM0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:db:e4:ff:3a:56:ed:a5:d2:65:6f:22:2f:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=69f64b10957c9da5694e1b3bb8bf27a1fa91276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:4a:aa:b3:c3:46:3c:bc:cd:e6:63:78:d3:
73:02:36:be:fe:4e:ce:47:93:64:d0:7a:74:fb:31:
8d:38:41:e0:38:88:28:8e:f1:40:fe:e2:f4:42:0f:
69:56:6b:5d:23:84:a9:a6:e9:9a:e4:27:6d:ca:fd:
94:d2:9d:ff:04:15:9d:5f:b2:f4:20:b6:ea:2c:7b:
cd:ed:90:94:78:60:dc:ab:0f:c0:28:05:c5:be:87:
78:ed:c0:21:62:9f:6f:6d:c4:ec:bd:a5:36:e6:47:
43:ef:fe:e4:15:00:20:31:a1:21:d7:69:14:27:69:
18:c6:e9:f1:ad:35:70:72:91:8f:65:bd:df:4b:0c:
88:58:7a:db:f6:b8:bd:c7:32:6b:d1:b9:57:d8:b5:
fb:58:4e:90:c2:47:41:2c:a0:40:aa:f1:af:23:ba:
16:17:5c:1d:27:63:b4:28:36:d2:99:f8:c5:9a:00:
44:b4:0d:85:b1:15:eb:7a:a3:fc:ef:ff:9e:2a:b4:
99:b7:ae:01:bb:0e:b7:43:26:d2:03:66:f6:c4:0c:
92:c1:03:00:02:ee:7c:d1:55:40:1c:75:f3:3b:a4:
8a:3f:88:81:7f:56:dc:48:01:15:1b:2f:85:81:20:
aa:e9:eb:32:f8:78:f9:27:47:d3:f2:cc:04:84:46:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:4B:10:95:7C:9D:A5:69:4E:1B:3B:B8:BF:27:A1:FA:91:27:6B
X509v3 Authority Key Identifier:
keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:57:23:f4:cd:70:4b:a2:7c:b2:4d:b7:97:45:31:af:f4:e4:
5c:e6:41:5b:a3:3e:d4:ce:4a:ea:67:0e:5f:9b:a6:6c:d1:a8:
4f:ca:6c:16:20:a5:43:2d:3d:f3:55:2c:00:f2:a4:e7:5b:79:
b2:e1:5c:63:86:5b:de:9e:c5:e7:88:58:f1:56:78:8d:cc:68:
13:4f:ae:05:9e:4c:b7:f6:76:43:1e:0e:b1:29:9b:94:22:08:
6c:05:91:37:1d:90:7f:61:10:bc:e2:49:3b:51:17:35:20:94:
7e:26:8e:88:7e:e6:46:1f:1d:a5:fa:12:40:48:05:13:74:8d:
30:a9:d9:0e:9b:1f:36:a8:da:4b:53:f0:c2:ac:c0:a1:a3:ea:
db:90:e7:aa:07:5f:43:01:6f:f5:70:26:3c:6d:20:32:4f:e2:
79:0b:c5:0f:29:c9:33:a1:d8:ce:b4:ca:21:fd:af:25:fe:9a:
47:89:53:22:0a:2e:88:74:3c:f7:52:34:59:92:c6:6f:55:9f:
46:55:b0:6c:eb:94:c9:cd:c4:32:a6:a4:ec:d5:3e:c0:e5:2b:
a0:46:4f:66:8b:51:d2:b1:4c:97:f3:47:25:a5:6c:30:5e:13:
e1:06:23:cb:c6:be:6e:bf:23:28:ff:72:fa:f2:37:a1:07:8f:
07:0d:1e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNvk/zpW7aXSZW8iL3DlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzRlMmM1NjJkZjk0Y2NjYTliNDgyMDgyMTBmZDE2Y2Zi
YTkyMzUwHhcNMjUxMTExMDcwMjExWhcNMjUxMTEyMDcwMjExWjAzMTEwLwYDVQQD
Eyg2OWY2NGIxMDk1N2M5ZGE1Njk0ZTFiM2JiOGJmMjdhMWZhOTEyNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjNKqrPDRjy8zeZjeNNzAja+/k7O
R5Nk0Hp0+zGNOEHgOIgojvFA/uL0Qg9pVmtdI4Sppuma5Cdtyv2U0p3/BBWdX7L0
ILbqLHvN7ZCUeGDcqw/AKAXFvod47cAhYp9vbcTsvaU25kdD7/7kFQAgMaEh12kU
J2kYxunxrTVwcpGPZb3fSwyIWHrb9ri9xzJr0blX2LX7WE6QwkdBLKBAqvGvI7oW
F1wdJ2O0KDbSmfjFmgBEtA2FsRXreqP87/+eKrSZt64Buw63QybSA2b2xAySwQMA
Au580VVAHHXzO6SKP4iBf1bcSAEVGy+FgSCq6esy+Hj5J0fT8swEhEaJxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn2SxCVfJ2laU4bO7i/J6H6kSdrMB8GA1UdIwQY
MBaAFBDE4sVi35TMyptIIIIQ/RbPupI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMt
NmE1ZDAyMjU4MjBkLzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84MzAxOTktZTc4Mi00Y2EzLTlhMWMtNmE1ZDAyMjU4MjBk
LzEvRU1UaXhXTGZsTXpLbTBnZ2doRDlGcy02a2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVcj9M1w
S6J8sk23l0Uxr/TkXOZBW6M+1M5K6mcOX5umbNGoT8psFiClQy0981UsAPKk51t5
suFcY4Zb3p7F54hY8VZ4jcxoE0+uBZ5Mt/Z2Qx4OsSmblCIIbAWRNx2Qf2EQvOJJ
O1EXNSCUfiaOiH7mRh8dpfoSQEgFE3SNMKnZDpsfNqjaS1PwwqzAoaPq25Dnqgdf
QwFv9XAmPG0gMk/ieQvFDynJM6HYzrTKIf2vJf6aR4lTIgouiHQ891I0WZLGb1Wf
RlWwbOuUyc3EMqak7NU+wOUroEZPZotR0rFMl/NHJaVsMF4T4QYjy8a+br8jKP9y
+vI3oQePBw0edg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:21 2025 by rpki-client