Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File: eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier: lKsh/hNT6z80eUaxV/ohacWcrw9mCl+6JzDFKhqDIE0=
Subject key identifier: CB:49:34:D0:3C:5A:88:18:FB:13:FB:E4:B2:7F:CB:87:56:31:BA:84
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer: /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial: 019A71B80631BDA211094AC5B448A1790469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: hWnt3phAjU+VwYLNG0+cV8H2pBOSLVjMxJR7hkHM0Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:06:31:bd:a2:11:09:4a:c5:b4:48:a1:79:04:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=cb4934d03c5a8818fb13fbe4b27fcb875631ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:ae:72:64:8c:ba:bf:54:23:d4:a5:11:e7:
ca:01:c3:25:8a:0e:93:2f:47:95:d5:3c:80:c0:60:
94:49:93:81:93:4d:54:b7:74:65:ac:1e:c5:73:eb:
01:94:af:c6:47:07:23:78:e0:49:d3:bd:23:0f:06:
36:ac:56:5e:83:41:68:24:35:7b:5b:e3:cf:1d:41:
ef:8d:e0:30:c2:b3:a6:d4:3a:e9:c2:13:70:14:72:
77:17:fc:db:f2:7f:32:d9:fc:9d:a2:65:f6:7c:b4:
82:85:cf:4c:ed:bf:31:ea:f4:f4:02:24:7f:9f:5e:
04:40:49:38:e5:52:78:f7:8f:b9:4a:b8:62:19:80:
92:08:74:ca:20:44:53:c3:f2:a1:f1:07:f5:65:bc:
ac:c3:60:fb:dd:c9:eb:b3:86:b4:53:75:dc:20:ff:
45:a7:d3:4e:f2:9e:43:e5:ab:6e:11:e9:96:ee:15:
ec:a0:28:f2:ac:e8:61:5f:46:e7:27:38:3a:ff:98:
ed:c2:80:fc:69:31:f8:58:04:63:04:cd:3f:8e:e4:
ee:55:38:4a:d5:a1:c2:22:0a:e2:f6:01:06:70:3b:
87:8d:34:87:08:8d:49:ac:88:ea:c0:11:2c:57:57:
a1:3d:10:c2:dd:44:57:00:fb:fe:d9:99:5b:71:01:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:34:D0:3C:5A:88:18:FB:13:FB:E4:B2:7F:CB:87:56:31:BA:84
X509v3 Authority Key Identifier:
keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:2d:bc:e6:bf:bc:d8:28:cc:8b:47:5e:96:f2:3b:cd:d1:
bf:17:87:c3:1b:16:aa:a5:65:b4:cb:a2:d1:b7:3d:a4:24:01:
6d:6d:38:ca:b6:20:47:25:60:f6:25:f2:22:f1:e4:d7:39:84:
34:b7:ff:f5:e2:4f:57:fe:d6:1e:53:1d:ff:c6:54:82:42:ef:
a1:25:72:cd:36:a4:d9:81:b4:de:52:f1:0c:aa:33:c8:da:b0:
98:71:45:a5:7e:15:63:69:d0:68:f5:b9:1a:99:bf:40:e1:93:
27:67:e0:d3:bb:b4:e4:88:a7:51:7d:7e:f0:85:d2:c7:d4:ed:
26:96:88:0b:36:22:68:a2:62:b9:13:4f:50:03:b3:7b:08:1d:
8c:f8:d5:34:4c:40:15:40:7e:75:b3:36:c4:e8:dc:0f:16:19:
48:1e:0e:7b:e7:16:b0:47:91:ae:b0:73:12:e2:f5:2f:dd:a8:
b7:7d:04:6c:72:09:28:3f:4f:93:23:a5:9e:ad:03:b8:95:f1:
2d:5b:3b:57:7d:fd:98:46:7e:c7:a2:b2:0f:67:9c:2f:8e:58:
88:c7:2f:e6:cc:6f:d2:88:68:42:98:8a:77:cc:25:33:e0:5b:
02:5e:46:24:a8:58:50:80:80:89:7c:75:ee:73:f2:43:9b:e7:
4c:3b:94:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAYxvaIRCUrFtEiheQRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2IyMDNiYmMyZGJkMTQ2NGI1NDJiN2FhZGM5OWFkNDAz
ZjUxMGYwHhcNMjUxMTExMDcwMTE2WhcNMjUxMTEyMDcwMTE2WjAzMTEwLwYDVQQD
EyhjYjQ5MzRkMDNjNWE4ODE4ZmIxM2ZiZTRiMjdmY2I4NzU2MzFiYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoViucmSMur9UI9SlEefKAcMlig6T
L0eV1TyAwGCUSZOBk01Ut3RlrB7Fc+sBlK/GRwcjeOBJ070jDwY2rFZeg0FoJDV7
W+PPHUHvjeAwwrOm1DrpwhNwFHJ3F/zb8n8y2fydomX2fLSChc9M7b8x6vT0AiR/
n14EQEk45VJ494+5SrhiGYCSCHTKIERTw/Kh8Qf1Zbysw2D73cnrs4a0U3XcIP9F
p9NO8p5D5atuEemW7hXsoCjyrOhhX0bnJzg6/5jtwoD8aTH4WARjBM0/juTuVThK
1aHCIgri9gEGcDuHjTSHCI1JrIjqwBEsV1ehPRDC3URXAPv+2ZlbcQEPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtJNNA8WogY+xP75LJ/y4dWMbqEMB8GA1UdIwQY
MBaAFHjLIDu8Lb0UZLVCt6rcma1AP1EPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lOTY2NDYtMGM5MS00OWIxLWExNDAt
ZTM5MjRmNzhkODQyLzEvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lOTY2NDYtMGM5MS00OWIxLWExNDAtZTM5MjRmNzhkODQy
LzEvZU1zZ083d3R2UlJrdFVLM3F0eVpyVUFfVVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIItvOa/
vNgozItHXpbyO83RvxeHwxsWqqVltMui0bc9pCQBbW04yrYgRyVg9iXyIvHk1zmE
NLf/9eJPV/7WHlMd/8ZUgkLvoSVyzTak2YG03lLxDKozyNqwmHFFpX4VY2nQaPW5
Gpm/QOGTJ2fg07u05IinUX1+8IXSx9TtJpaICzYiaKJiuRNPUAOzewgdjPjVNExA
FUB+dbM2xOjcDxYZSB4Oe+cWsEeRrrBzEuL1L92ot30EbHIJKD9PkyOlnq0DuJXx
LVs7V339mEZ+x6KyD2ecL45YiMcv5sxv0ohoQpiKd8wlM+BbAl5GJKhYUICAiXx1
7nPyQ5vnTDuUoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:24 2025 by rpki-client