Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier: ojluQQqbRAdyMMb04+vgkRucsXRhnrwrSDPWekokqOU=
Subject key identifier: 93:7E:77:FA:99:E4:E4:70:86:07:62:1C:05:F3:6D:28:AC:B2:89:30
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 019A72CA9A12C02A333406CC42BA621B3C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number: 0D46
Signing time: Tue 11 Nov 2025 12:01:11 +0000
Manifest this update: Tue 11 Nov 2025 12:01:11 +0000
Manifest next update: Wed 12 Nov 2025 12:01:11 +0000
Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: SOCAF+0a4/s521tdu1bhocwBzccdMw2C+2JC3Q/g1JY=)
2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9a:12:c0:2a:33:34:06:cc:42:ba:62:1b:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Nov 11 12:01:11 2025 GMT
Not After : Nov 12 12:01:11 2025 GMT
Subject: CN=937e77fa99e4e4708607621c05f36d28acb28930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:05:44:0b:21:d8:0d:75:8c:0e:4c:b8:ce:
70:15:ea:8f:fc:52:d4:42:db:e6:41:07:61:9c:b8:
81:6c:d4:bb:cc:29:9d:c9:7d:1f:1c:e0:6b:9f:6f:
24:c2:ad:6d:92:8d:88:a5:8e:42:00:97:35:48:c0:
57:90:9a:17:db:21:05:9d:d5:9c:11:94:a1:1c:81:
21:7b:7e:19:4f:c4:d4:0c:d0:0f:df:70:96:cc:07:
d0:8f:de:d1:aa:e7:1b:91:fd:db:7a:8b:b4:55:34:
1a:d1:b5:7a:7a:ad:65:09:a6:8d:bc:25:24:fe:d8:
30:5a:9e:bd:5e:6f:70:3f:6d:a1:04:b5:1b:f1:8f:
9a:f1:c9:8e:ba:d7:64:83:91:bb:69:e9:05:d3:26:
14:c7:c9:99:ef:94:aa:dc:c2:4f:4a:dd:36:46:69:
5b:ac:44:3c:c1:9b:16:1c:8f:24:b5:de:72:1f:f6:
26:67:87:46:80:c8:33:36:5b:2f:53:ef:f3:db:2d:
f6:c7:3d:ee:5a:7e:7c:aa:a4:0f:92:e3:83:c9:77:
4f:c9:40:d0:ad:ea:55:b9:f0:f0:ff:69:3e:a8:d0:
13:7f:01:31:1b:50:22:8e:50:9a:7b:9c:35:24:b5:
2c:5e:79:49:91:9f:1c:d8:e3:fc:f5:5d:28:b0:b2:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7E:77:FA:99:E4:E4:70:86:07:62:1C:05:F3:6D:28:AC:B2:89:30
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:34:89:dd:7a:a9:ff:ad:5f:1d:0e:7e:7e:f6:59:18:dd:fa:
f1:41:bf:a5:c4:f1:03:c6:e8:4a:7d:a7:56:24:b8:31:ca:1a:
42:90:cd:85:31:e4:9b:aa:67:43:0c:1b:a0:1a:31:d8:81:fe:
e9:28:43:f3:ee:de:83:92:e5:7f:ac:3a:c8:d4:0a:08:da:ff:
8b:98:34:30:60:36:21:5e:6d:07:e3:19:91:a1:30:c6:27:27:
a1:cb:52:b7:7a:2c:c5:7c:42:fa:9b:5e:7a:06:f9:4b:2d:a1:
68:ff:ec:ba:7a:1c:30:56:f6:e4:9d:4e:69:64:51:56:5d:1a:
f2:15:34:41:e1:bd:eb:12:73:9b:75:a0:93:8f:8f:65:9a:84:
9c:2d:ea:42:ac:42:a7:0e:fe:7f:02:d9:3a:1d:92:4f:c1:70:
ec:93:ee:31:77:cf:d0:18:e4:fe:2c:f9:d9:49:9f:b1:34:82:
f0:28:72:53:60:06:bb:b7:8d:43:11:74:e1:89:c4:a6:f7:e8:
a0:47:97:eb:38:ef:0b:0c:68:9f:67:6b:20:96:d0:a0:19:01:
e5:80:6a:f5:12:9f:32:ed:f4:33:71:cc:e8:c1:60:af:52:4a:
9c:37:36:13:35:3b:d4:41:85:bc:b3:42:1f:d9:0a:19:42:68:
b7:55:a0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyypoSwCozNAbMQrpiGzwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjUxMTExMTIwMTExWhcNMjUxMTEyMTIwMTExWjAzMTEwLwYDVQQD
Eyg5MzdlNzdmYTk5ZTRlNDcwODYwNzYyMWMwNWYzNmQyOGFjYjI4OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS8FRAsh2A11jA5MuM5wFeqP/FLU
QtvmQQdhnLiBbNS7zCmdyX0fHOBrn28kwq1tko2IpY5CAJc1SMBXkJoX2yEFndWc
EZShHIEhe34ZT8TUDNAP33CWzAfQj97Rqucbkf3beou0VTQa0bV6eq1lCaaNvCUk
/tgwWp69Xm9wP22hBLUb8Y+a8cmOutdkg5G7aekF0yYUx8mZ75Sq3MJPSt02Rmlb
rEQ8wZsWHI8ktd5yH/YmZ4dGgMgzNlsvU+/z2y32xz3uWn58qqQPkuODyXdPyUDQ
repVufDw/2k+qNATfwExG1AijlCae5w1JLUsXnlJkZ8c2OP89V0osLI8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN+d/qZ5ORwhgdiHAXzbSissokwMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDSJ3Xqp
/61fHQ5+fvZZGN368UG/pcTxA8boSn2nViS4McoaQpDNhTHkm6pnQwwboBox2IH+
6ShD8+7eg5Llf6w6yNQKCNr/i5g0MGA2IV5tB+MZkaEwxicnoctSt3osxXxC+pte
egb5Sy2haP/sunocMFb25J1OaWRRVl0a8hU0QeG96xJzm3Wgk4+PZZqEnC3qQqxC
pw7+fwLZOh2ST8Fw7JPuMXfP0Bjk/iz52UmfsTSC8ChyU2AGu7eNQxF04YnEpvfo
oEeX6zjvCwxon2drIJbQoBkB5YBq9RKfMu30M3HM6MFgr1JKnDc2EzU71EGFvLNC
H9kKGUJot1WgBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:42 2025 by rpki-client