Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: O9vSTDPPTrE+9zYFn5LH9d6uhpY2e+WO4sC/YWFJ7lg=
Subject key identifier: 03:C9:A4:B3:54:B8:96:7E:88:8C:AD:CB:15:D4:82:20:BA:8A:BB:51
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 019A21094B239979FA09B167E2618787FCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 1430
Signing time: Sun 26 Oct 2025 15:00:48 +0000
Manifest this update: Sun 26 Oct 2025 15:00:48 +0000
Manifest next update: Mon 27 Oct 2025 15:00:48 +0000
Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: 7nUftjNPaJuiTt7txtqNRRM5Gf6BJ37YayyQGfKrfNk=)
2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:4b:23:99:79:fa:09:b1:67:e2:61:87:87:fc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Oct 26 15:00:48 2025 GMT
Not After : Oct 27 15:00:48 2025 GMT
Subject: CN=03c9a4b354b8967e888cadcb15d48220ba8abb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:c0:52:65:d9:72:90:64:1a:73:ba:c3:41:
2e:cd:5e:63:0f:8c:30:6e:d2:87:6d:18:6d:d2:58:
cd:36:21:ab:f2:b6:03:b8:5a:9d:e3:9e:b3:b3:08:
81:c8:5c:86:b7:c6:de:81:8f:97:b0:19:2d:12:f5:
7a:d6:fe:ce:9d:e1:c2:ae:4a:61:6e:9e:9b:2c:ba:
b9:a7:48:4c:aa:50:98:e3:39:03:bc:f7:20:80:98:
3d:e9:03:44:78:dc:d8:92:cc:65:b0:10:0b:16:d1:
74:89:c7:ad:71:b5:1f:fd:85:79:c6:6f:af:7f:4f:
87:c9:21:fb:69:e6:0d:ed:24:fc:1e:c5:8b:9d:d5:
98:c3:b1:8d:a0:3b:3a:15:5c:da:08:1b:67:41:7c:
00:47:a9:d8:b7:3b:b4:bb:34:57:83:2a:a8:a2:48:
2f:87:d9:57:20:f1:78:91:65:92:4a:f2:5d:7d:cb:
8d:6d:f7:04:73:2f:37:c2:e0:96:16:11:b1:49:19:
b3:ef:ba:7a:8f:fe:f4:c2:ad:57:a4:77:20:2d:bc:
cc:69:f5:39:a8:71:e0:8e:fb:6e:93:0a:4b:86:1f:
c8:81:b1:fc:e0:a2:76:d4:bc:5a:4c:9a:29:1f:9b:
a3:15:a7:d3:02:8f:72:95:bc:06:38:88:7f:6f:e4:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:A4:B3:54:B8:96:7E:88:8C:AD:CB:15:D4:82:20:BA:8A:BB:51
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:83:b6:03:26:fc:61:97:e0:af:e9:6b:3f:2e:e9:16:cd:
96:55:e9:b0:ca:98:05:98:d1:5b:aa:23:11:fa:b5:ce:fc:b7:
fb:6e:ae:4c:13:82:d9:76:7f:ab:4a:06:df:0d:8d:67:f7:2e:
08:8d:14:37:43:31:25:4e:57:8a:75:e7:59:f4:aa:3b:1b:17:
03:a6:f3:ad:8b:52:14:d1:a5:d8:35:29:a9:7a:fd:c4:b3:43:
99:26:ed:d6:17:72:53:16:1d:22:1e:5b:3a:ab:23:51:ac:f7:
73:99:5a:b5:f0:0b:48:bc:e3:95:ba:8c:50:20:59:09:24:f2:
c5:63:01:d8:07:af:13:04:cc:be:8a:e4:54:4a:b8:d0:16:ef:
9a:7e:95:44:a6:c7:57:ab:f3:4e:f1:14:e4:57:8c:d3:07:fa:
55:ba:3f:4f:27:a1:0b:fa:c2:13:27:73:d7:d8:40:64:87:17:
e7:5c:b1:2a:64:6e:80:69:45:06:54:a1:bb:68:20:c0:fe:25:
b9:f2:b2:4d:c8:bf:63:2b:d8:55:e8:dc:3e:8c:93:6e:6e:c9:
27:81:cb:e1:58:bc:81:4e:25:6a:30:67:c1:f3:2d:5f:38:56:
5b:7b:36:dc:79:bc:28:72:94:55:1e:52:87:f4:6f:e5:83:b7:
8b:1d:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:51:46 2025 by rpki-client