
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: U4hzOLRUXkFCBXtbOSSZ64Rh953dF0x3jeGbm7h0DDQ=
Subject key identifier: 96:77:03:45:B5:4F:4F:DF:6B:60:B8:0A:82:AE:4B:3F:00:27:F5:A9
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 019A1760F1671371D12AA99A5D0100B8409A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 0B9A
Signing time: Fri 24 Oct 2025 18:00:20 +0000
Manifest this update: Fri 24 Oct 2025 18:00:20 +0000
Manifest next update: Sat 25 Oct 2025 18:00:20 +0000
Files and hashes: 1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: o+SFT+7CIF+sAj/vTs4czYI7s65whE9bSr5ZHoV1h9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:60:f1:67:13:71:d1:2a:a9:9a:5d:01:00:b8:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Oct 24 18:00:20 2025 GMT
Not After : Oct 25 18:00:20 2025 GMT
Subject: CN=96770345b54f4fdf6b60b80a82ae4b3f0027f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:36:c9:ae:27:ea:d7:3e:7f:4b:4c:b3:58:
f1:53:bf:cb:8c:54:06:72:b4:c9:2a:c5:3c:2e:36:
15:eb:65:ab:a0:18:13:48:55:24:8b:ef:58:f1:e2:
1e:ad:9b:02:45:6c:a5:89:e8:92:1d:e5:4f:a8:37:
4b:7a:31:5f:88:2a:5a:92:9e:36:6a:68:ba:96:6e:
ae:6a:89:ba:d7:b7:be:a1:fd:00:7a:e6:eb:3a:36:
8d:2b:08:19:9d:56:2a:51:30:f4:52:7b:66:47:6e:
4c:14:2f:7b:10:ee:0d:95:b9:97:33:cb:52:06:35:
63:cd:0d:40:d7:38:f7:76:aa:15:dd:f7:f9:31:af:
60:22:07:59:7e:8d:d7:a8:7a:3b:bf:dc:1f:df:21:
5a:33:0e:5c:03:38:c5:81:de:29:bd:1c:5a:67:13:
7e:e3:57:66:50:cd:08:c1:10:a3:6c:59:37:a0:60:
a0:a0:5c:ce:56:70:55:51:8f:ad:59:a2:52:91:de:
ce:92:12:e5:68:8b:55:3d:a0:6d:a8:a3:e2:54:3a:
64:3a:21:07:be:78:1f:6a:06:92:42:8a:64:05:39:
87:85:16:b2:3d:d8:15:41:9a:07:81:cf:d3:60:e5:
dd:c9:de:0c:4d:51:ab:cc:6a:ef:33:ef:95:9a:f4:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:77:03:45:B5:4F:4F:DF:6B:60:B8:0A:82:AE:4B:3F:00:27:F5:A9
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:a8:c6:8a:3e:f8:14:37:89:87:13:7b:c2:4c:c7:54:d9:
f7:ac:99:58:c0:fc:99:f3:87:b6:4c:56:67:cb:db:1c:23:0c:
53:94:f4:2b:04:cb:41:a8:ec:7f:8a:01:9c:2b:5c:ff:e1:c4:
cc:55:bc:91:fe:12:04:95:60:95:45:c5:df:1c:5d:e9:44:6d:
e9:0d:e8:bf:63:0e:1c:44:07:09:ed:c0:57:a4:a5:f4:31:86:
8a:46:6f:ce:1f:b8:43:4f:d2:18:15:dd:a4:d6:ed:f6:66:ae:
cc:89:e2:2e:73:f1:ce:84:15:15:9c:fc:b1:57:fd:3d:44:82:
22:d0:97:8b:37:f0:b0:27:5c:43:77:3e:ea:ec:c9:b0:32:ab:
22:26:14:56:af:bb:25:03:da:b1:c2:27:3e:53:f9:bf:8a:dd:
c0:49:9b:70:39:0b:a1:ed:77:98:40:2a:e8:64:32:5f:dc:89:
a2:af:8f:77:12:a2:b8:f2:26:cf:80:fc:ce:f4:e3:4f:cb:7a:
76:00:0c:76:78:9e:25:0b:4a:d1:60:b5:5c:2e:21:5e:10:27:
75:23:5a:7a:29:1a:39:be:c7:c6:16:d7:58:a1:cd:f1:34:ba:
87:af:42:bf:85:25:c0:2f:75:e7:df:34:a5:1e:19:61:ee:44:
38:87:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:47:21 2025 by rpki-client