Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: 7nlzEIzEBWPStf01MDW14TJoeWx6UnZ10szmbiP/1D4=
Subject key identifier: 98:AD:59:2B:34:A0:D8:CC:1C:93:E7:B7:8C:30:57:D5:FA:23:71:65
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 019A7149A59E4C4DCF61FAD803B27ED8E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 065A
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: DopeT8dJhQFd9A6EbQX/wgtv3RuiCAEsfGfKSjqLEYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a5:9e:4c:4d:cf:61:fa:d8:03:b2:7e:d8:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=98ad592b34a0d8cc1c93e7b78c3057d5fa237165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:73:f2:c9:46:00:a0:31:78:14:3a:77:86:a2:
b2:ad:7a:1e:f1:30:3c:e3:13:c0:25:97:a6:b7:ca:
db:ef:60:3b:db:2f:1b:78:f1:e7:d2:86:2f:7c:64:
d8:a1:ee:fd:4e:30:ed:91:f3:1d:18:b3:6d:7a:79:
d0:6a:7b:a3:dc:89:0a:9b:90:37:55:65:f4:7d:36:
de:87:27:e2:ab:b1:ff:e0:a2:19:48:9b:e2:19:62:
f6:17:56:65:73:44:b7:ba:5d:d7:32:16:19:f3:6e:
4b:10:bf:84:21:b5:a1:a6:4e:85:98:17:98:9b:3a:
e0:39:f5:5f:fe:94:ea:fb:25:07:46:23:b3:cb:b4:
53:e3:b5:64:62:6b:4c:f5:c5:01:8e:05:ed:b5:a8:
20:c2:34:f4:f5:26:58:15:36:ef:82:04:45:6e:0d:
e2:3c:dc:8d:4d:c6:e6:89:82:ef:da:93:20:d5:36:
30:1c:38:7a:69:f7:5d:c6:36:e2:f1:ad:8b:59:31:
f6:4f:3c:bd:87:5c:ed:9b:41:0a:0f:82:09:65:cf:
c0:39:bd:56:06:0e:04:9a:b3:c4:d2:9b:6d:12:d5:
73:ce:88:cc:3b:ba:91:ed:86:d6:31:ff:e1:3e:cf:
d7:ea:8a:7a:f1:da:e3:1c:8f:3d:5f:d8:03:c3:2e:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:59:2B:34:A0:D8:CC:1C:93:E7:B7:8C:30:57:D5:FA:23:71:65
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:41:94:ea:51:80:10:43:38:3d:5d:b1:39:39:bb:3e:5e:ec:
b1:64:48:34:54:1a:6a:62:19:3b:27:80:68:95:34:ad:2d:c5:
9c:95:30:d2:dc:15:80:1d:75:77:3e:76:6d:2a:f9:ca:6b:e6:
42:5e:70:0a:39:dd:0a:32:dd:8e:68:fe:d9:06:8f:7b:5c:91:
0d:59:35:f4:5c:8b:cf:cf:f3:10:74:0a:b8:21:61:15:95:13:
5a:b9:72:44:d4:b0:7b:29:77:53:4f:85:fd:63:65:9b:5a:0e:
f4:d9:5d:46:2b:64:e5:7e:ff:0a:81:ce:e2:6c:4d:bf:d7:ed:
41:c3:34:26:93:8c:37:37:95:c1:31:b8:00:75:dc:45:eb:ec:
8f:91:07:f7:cb:74:be:b2:24:6f:9c:a4:4b:3b:70:00:d2:e6:
b3:4c:69:7c:c5:43:b1:29:c3:ac:a8:b2:94:ab:8d:84:97:31:
c2:be:d9:21:0e:34:63:9b:9f:c3:d0:43:2b:c5:d6:80:3d:d6:
2d:8e:d8:b1:f7:f7:db:ee:32:06:a0:30:04:99:b6:36:6b:f0:
34:f5:23:80:61:10:7b:7b:d3:16:c6:5e:e7:cd:55:55:2b:a7:
d4:29:49:07:35:b4:05:44:33:c6:3b:d7:f9:03:74:30:68:96:
18:11:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:11 2025 by rpki-client