Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: yWKhj+mnebU9lvxU+L2ypSfEYjDb3kBneS3l0H8uihs=
Subject key identifier: 3B:9D:5F:13:E1:0E:90:64:5C:93:06:E4:F5:26:91:4F:A6:77:A1:4D
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 019A725C3A52AA8DEFC7DF7DA0C359B48103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: UzLUKDhJ4L5gljIP4MB5eIKZmX428C26N4cpuFq9EZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3a:52:aa:8d:ef:c7:df:7d:a0:c3:59:b4:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=3b9d5f13e10e90645c9306e4f526914fa677a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:65:f8:cd:7c:3a:d0:b0:d6:bd:66:46:5f:
b4:21:72:70:e3:95:fb:35:c9:57:f7:b2:3a:36:5f:
78:34:c4:bb:ef:48:0d:6e:e3:cc:9d:4a:56:15:9f:
9a:4c:60:1f:15:56:da:f9:92:b2:2c:c7:d6:62:9b:
a8:3c:2b:12:28:24:ad:ea:44:a7:6b:64:f8:a0:72:
db:14:b0:7a:ae:d9:70:09:b4:f1:87:9b:d6:eb:6f:
db:05:86:46:9a:c7:1d:6d:7f:27:3f:04:d9:bb:c6:
84:c2:1f:ed:4f:e0:1a:ec:f0:46:ae:e0:bb:fd:4b:
07:2e:3c:08:6b:48:e0:e2:ac:96:d4:ee:9c:8a:11:
0b:41:e0:b5:e5:c2:89:6a:9f:21:1e:8a:9d:8a:43:
b8:49:04:64:be:ad:64:a6:6a:1d:de:e2:fc:d8:52:
15:53:e6:78:23:39:a1:52:9e:99:55:bd:12:df:88:
df:d9:7a:d8:99:10:13:e2:ac:fd:e0:2d:4d:73:57:
d2:e4:76:ef:c0:75:0c:4d:3f:c8:f3:00:19:90:30:
42:b4:0f:a0:69:25:4f:fc:44:a1:64:89:de:d3:36:
20:0b:3c:46:fe:fb:32:90:46:98:d0:d6:12:4f:d1:
9b:ed:22:ef:20:2d:b7:e4:c2:11:b2:c6:c3:a4:46:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:5F:13:E1:0E:90:64:5C:93:06:E4:F5:26:91:4F:A6:77:A1:4D
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:4f:e7:e7:48:32:0d:87:bf:ee:72:a7:cf:c0:f5:3e:7a:
82:9a:da:57:5e:c5:9a:df:49:a0:9b:04:3f:6a:58:5d:3e:46:
de:ae:2a:42:c4:6e:ed:0f:d7:6e:b0:8f:18:9a:7b:c2:67:a1:
f4:1b:ea:ad:6e:30:4b:6a:3a:48:be:80:9d:3e:77:20:ef:0b:
91:ab:56:76:18:c4:65:3c:17:11:39:82:95:a2:88:5e:e6:ab:
d1:6e:85:d3:1b:49:d4:2e:59:d9:07:fe:f3:4a:2b:f4:5c:0f:
9c:70:41:de:b7:e2:f3:9c:d6:70:95:a8:02:f3:10:70:38:e4:
d9:f4:f2:61:34:82:ea:14:82:00:ba:c3:96:90:3c:c1:36:87:
b5:20:ea:76:c6:ff:ad:76:e3:35:ee:ce:30:52:a5:4d:a0:c7:
0e:1b:65:39:38:a3:e9:a9:dc:2e:49:72:34:6a:ea:c2:2f:63:
e5:d9:94:63:6c:e6:c4:6c:f7:4e:0f:a9:12:86:4a:d2:94:d6:
af:50:d6:c7:5b:2b:33:4c:d2:be:bf:71:c6:8f:ef:70:85:41:
37:41:d5:3f:c9:f5:26:a5:49:47:88:23:4a:98:8a:bf:8c:9a:
2e:e9:ee:8d:40:9a:74:e9:d7:19:4b:8f:13:bc:39:88:d0:f5:
da:0b:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:31 2025 by rpki-client