Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
File: EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json)
Hash identifier: gsnw2KSQEG1yFuvG9kxA599/UF9SXDfWayCD+0JDo2M=
Subject key identifier: E2:E0:20:B0:36:96:A2:31:F2:0C:5C:C7:77:48:F7:6F:A5:55:F5:FF
Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
Certificate issuer: /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Certificate serial: 019A714A02EB53C0413BB8FDF75BD6D8034B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
Manifest number: 013A
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: jTSWMCWRTlQV7l+cNKWGeDdQz7G14zWg5up/RY4bDAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:02:eb:53:c0:41:3b:b8:fd:f7:5b:d6:d8:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=e2e020b03696a231f20c5cc77748f76fa555f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:70:ef:fc:7f:ee:53:5d:f3:89:4c:12:a6:
93:a8:23:5b:93:e7:57:ff:71:a7:a7:58:bd:b6:dd:
2d:45:5c:55:25:db:32:c1:e0:c9:32:a4:fa:d9:5d:
da:e1:ca:92:74:85:d9:51:27:01:8b:b0:1a:3f:44:
4a:f3:23:fb:2a:1d:da:74:6b:b3:23:b3:7e:ec:41:
3f:53:67:de:b4:91:4f:de:a1:76:60:82:40:fc:f2:
90:17:12:22:fa:1d:3d:84:67:fd:07:6c:08:e4:e2:
19:82:15:70:84:43:1b:d2:c7:cf:55:e7:dc:f5:d7:
a1:2b:3b:e6:e5:62:79:b2:04:a7:04:ec:d8:90:37:
c5:99:9e:26:0a:e7:f3:53:f8:a9:b6:45:e8:cf:59:
42:1f:e5:4b:66:10:cc:61:0d:74:86:80:1c:77:56:
5f:3d:db:32:28:e7:3d:8a:a4:79:99:d2:46:fb:bf:
a1:c6:5a:4f:7b:ff:ca:00:2b:ae:a5:0f:a2:5e:3d:
89:81:d7:d3:b1:db:a5:9b:a1:fe:5a:31:88:3a:43:
cf:3b:82:4d:74:95:7d:df:8c:a8:7e:f2:c0:40:c9:
17:8c:ff:2e:6a:da:c7:35:2a:f5:cc:f3:9c:cb:4d:
8e:e5:17:16:2b:2a:09:11:aa:9e:05:a5:fa:cc:d0:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E0:20:B0:36:96:A2:31:F2:0C:5C:C7:77:48:F7:6F:A5:55:F5:FF
X509v3 Authority Key Identifier:
keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b1:6d:f1:5b:8f:9a:f4:93:e9:c8:c5:e8:1c:f9:a7:57:ee:
a8:1f:5d:af:c3:87:5d:45:f4:0d:04:64:f9:91:1e:7d:14:8e:
1e:48:1b:07:d3:af:a3:42:d7:4b:26:44:62:79:3e:07:37:81:
2b:3c:80:1a:a8:c1:52:58:8e:54:76:1d:d4:1c:d3:1a:f9:b8:
1d:e3:d7:8a:26:2d:05:54:52:f6:47:97:2e:57:57:20:45:30:
28:79:b2:89:5c:ad:6f:69:f4:da:da:be:d3:ad:21:ab:9e:41:
3c:f3:4a:7e:c7:de:86:ea:02:fa:46:4a:d4:78:3f:c3:8b:78:
f4:b2:82:db:24:66:78:a2:98:4c:b1:c1:45:bc:f7:07:a4:f3:
9a:3d:24:3a:79:34:d5:eb:0e:04:63:6a:a9:80:37:65:05:bb:
39:1f:f5:db:ca:5f:fe:f9:6c:2e:7e:23:c3:8b:35:75:03:8a:
0a:ea:13:b1:3b:7e:09:74:5c:32:36:ea:f4:b0:eb:c4:f9:69:
ee:e8:7f:ab:37:62:15:c7:91:57:7e:9a:5f:20:60:76:80:f4:
6a:1c:d8:ce:b9:75:66:1a:a8:06:a2:b1:b9:5c:bc:28:85:a4:
f0:36:6e:74:2c:d2:30:13:7a:71:6b:d6:06:0b:2d:d6:8f:ad:
e7:9c:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client