Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: ForOvEL+pQR98lgX21J0ITbFmJzyYfOp+z0F6Ca4ygM=
Subject key identifier: A6:23:06:D5:57:51:22:64:00:0B:59:90:46:D0:60:D0:F3:01:BA:3E
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 01984BC1F8F25D6DECE9333B2218D870D0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 133D
Signing time: Sun 27 Jul 2025 12:00:59 +0000
Manifest this update: Sun 27 Jul 2025 12:00:59 +0000
Manifest next update: Mon 28 Jul 2025 12:00:59 +0000
Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: 5fR6RI63ZqNorQJMhG6dhEx1wwVm+peIjDig7aBUnPk=)
2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:f8:f2:5d:6d:ec:e9:33:3b:22:18:d8:70:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Jul 27 12:00:59 2025 GMT
Not After : Jul 28 12:00:59 2025 GMT
Subject: CN=a62306d557512264000b599046d060d0f301ba3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:c0:1c:b8:25:ef:7e:6d:fb:3f:61:ae:af:
d1:3c:41:f2:bb:39:9d:fe:bd:b9:27:f4:8b:e5:ed:
4c:e9:55:46:e0:f5:78:e1:10:04:48:36:5d:1b:77:
de:f3:7d:ac:3b:52:10:e3:cd:72:a4:88:26:9a:dc:
42:7e:68:e3:12:c1:07:b0:3c:99:cc:88:8f:3b:5c:
46:04:db:47:93:17:56:10:9f:ca:e6:65:34:fb:52:
b8:75:0d:22:14:e4:da:67:7d:5c:33:77:19:b8:63:
59:7e:60:a0:c6:da:fa:4b:09:10:fb:3a:6b:f1:da:
83:3c:58:4c:46:a2:d7:bf:ef:f1:a5:dd:ff:1e:60:
59:19:8b:4f:c6:41:b4:72:4c:4c:2d:cc:a1:1b:50:
da:4b:8a:e9:da:60:82:90:c2:48:8d:41:af:d6:c0:
31:f8:d1:17:be:23:b7:44:ed:ed:1f:32:2f:04:90:
bd:ab:14:3b:32:2e:36:c6:43:79:da:25:c5:9e:1a:
2a:9a:a4:ff:85:06:54:c5:44:c4:e0:09:62:67:48:
b7:02:81:93:52:84:14:5c:48:10:1a:9d:29:5a:6f:
fa:d3:04:b8:0b:0b:e3:b9:a4:32:19:d1:ca:1a:8d:
41:cb:49:5b:04:9a:34:e5:38:37:c0:54:da:b2:f5:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:06:D5:57:51:22:64:00:0B:59:90:46:D0:60:D0:F3:01:BA:3E
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:32:16:d3:7e:7d:1e:06:c4:9a:95:1f:d8:c0:39:7b:85:
9c:3b:c5:c6:13:dd:c3:16:6f:d5:af:9d:bd:ac:d3:13:41:0f:
83:40:18:6f:0b:bc:88:b7:01:53:d9:27:09:b3:36:43:c3:d8:
90:ed:99:58:c9:5a:93:a6:15:2d:aa:3a:84:1f:cc:03:08:73:
87:4e:d8:47:53:5d:a9:c9:4d:d0:7f:cc:89:05:ae:79:16:c3:
57:84:eb:66:06:da:48:b1:21:1d:aa:24:32:f0:77:53:f1:c3:
57:3e:c9:38:56:a2:d0:de:d3:c1:c7:77:41:f5:ea:36:b9:fb:
1a:56:1b:0a:fe:ca:de:2e:a2:72:38:c7:5a:2b:c1:91:9a:13:
4d:a7:a3:96:14:51:0e:4b:46:75:5e:c2:f1:e5:94:e5:2f:74:
70:4a:55:d8:24:54:04:e1:fa:5e:db:61:b4:83:86:87:d7:10:
46:0c:99:1d:0e:da:b0:93:c5:c8:15:1c:8a:c9:d2:a6:b4:13:
6a:08:38:3c:9e:5d:d8:08:58:01:c6:09:49:6f:47:71:e1:3d:
69:74:52:e0:bc:53:6e:c0:52:f7:2c:57:95:88:f4:59:da:dc:
1b:93:c1:00:71:8d:fe:14:88:2c:c4:6d:80:fa:99:2e:20:85:
f2:b8:6b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwfjyXW3s6TM7IhjYcNDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi
MTk5M2MwHhcNMjUwNzI3MTIwMDU5WhcNMjUwNzI4MTIwMDU5WjAzMTEwLwYDVQQD
EyhhNjIzMDZkNTU3NTEyMjY0MDAwYjU5OTA0NmQwNjBkMGYzMDFiYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9LAHLgl735t+z9hrq/RPEHyuzmd
/r25J/SL5e1M6VVG4PV44RAESDZdG3fe832sO1IQ481ypIgmmtxCfmjjEsEHsDyZ
zIiPO1xGBNtHkxdWEJ/K5mU0+1K4dQ0iFOTaZ31cM3cZuGNZfmCgxtr6SwkQ+zpr
8dqDPFhMRqLXv+/xpd3/HmBZGYtPxkG0ckxMLcyhG1DaS4rp2mCCkMJIjUGv1sAx
+NEXviO3RO3tHzIvBJC9qxQ7Mi42xkN52iXFnhoqmqT/hQZUxUTE4AliZ0i3AoGT
UoQUXEgQGp0pWm/60wS4CwvjuaQyGdHKGo1By0lbBJo05Tg3wFTasvXARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYjBtVXUSJkAAtZkEbQYNDzAbo+MB8GA1UdIwQY
MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt
NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5
LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShcyFtN+
fR4GxJqVH9jAOXuFnDvFxhPdwxZv1a+dvazTE0EPg0AYbwu8iLcBU9knCbM2Q8PY
kO2ZWMlak6YVLao6hB/MAwhzh07YR1NdqclN0H/MiQWueRbDV4TrZgbaSLEhHaok
MvB3U/HDVz7JOFai0N7Twcd3QfXqNrn7GlYbCv7K3i6icjjHWivBkZoTTaejlhRR
DktGdV7C8eWU5S90cEpV2CRUBOH6XtthtIOGh9cQRgyZHQ7asJPFyBUcisnSprQT
agg4PJ5d2AhYAcYJSW9HceE9aXRS4LxTbsBS9yxXlYj0WdrcG5PBAHGN/hSILMRt
gPqZLiCF8rhrSA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:19:25 2025 by rpki-client