Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File: EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier: XAnG5mzQcqQb2/HMeQ4/NdZS9xydPTaSaAnoCoaw/Z8=
Subject key identifier: E8:BF:30:E2:6A:DB:1E:E1:78:C5:FB:3F:AC:D7:3A:DC:F7:BB:36:3F
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 019A2B55F74BA42C0B77028C557650A52033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number: 0DE3
Signing time: Tue 28 Oct 2025 15:00:45 +0000
Manifest this update: Tue 28 Oct 2025 15:00:45 +0000
Manifest next update: Wed 29 Oct 2025 15:00:45 +0000
Files and hashes: 1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: EIC2uNr51mp2PBDwSYwlcqUl7TT1ExbLzsLBNYA88w0=)
2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=)
3: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=)
4: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=)
5: fw-BT1lvrjBkddYCCHDg1oZutT4.roa (hash: iAaplhiCg6/Cmk5M9afSn42FhZ9hgGQtswmLjCZlPus=)
6: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=)
7: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=)
8: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:55:f7:4b:a4:2c:0b:77:02:8c:55:76:50:a5:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Oct 28 15:00:45 2025 GMT
Not After : Oct 29 15:00:45 2025 GMT
Subject: CN=e8bf30e26adb1ee178c5fb3facd73adcf7bb363f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:14:e2:8c:c3:48:d8:0a:06:71:49:70:6c:
de:5b:12:7c:3f:09:23:c7:d1:bd:d5:80:7f:ae:81:
60:21:95:ce:e5:35:f7:41:7a:cf:98:66:db:b9:f8:
ca:61:9d:4f:f8:00:05:fe:03:a1:ce:92:98:50:1a:
6c:bd:1b:7c:24:4e:62:66:3b:7a:48:19:7e:f3:e6:
47:c2:66:14:12:dc:55:a0:0c:b7:69:54:24:a6:72:
9f:78:4d:54:44:45:54:f6:d2:f7:b3:0c:09:7f:fb:
9b:78:6c:60:6c:d8:b4:7b:4b:c2:58:93:c2:bd:9a:
3b:33:61:24:45:c4:d4:b9:ee:3a:1e:45:44:ff:67:
7e:65:8b:e7:45:07:36:da:43:24:53:b8:8d:a5:f9:
f9:89:22:c3:66:9c:ec:47:cb:19:9b:2f:f4:15:07:
ce:4a:97:98:00:47:40:c9:b7:e0:4a:0e:ad:67:8f:
1b:2d:f9:85:f2:cf:1f:da:3b:58:84:54:36:09:79:
7e:a2:c8:bc:5a:a6:29:e8:1e:0b:fd:86:65:a2:ec:
71:df:d5:ce:78:0b:e1:17:61:ea:c6:9c:3d:3f:7a:
24:f5:41:9e:61:b2:df:50:e7:af:9b:4f:f9:5c:a5:
7d:b6:54:8c:4d:02:15:82:0d:d2:0b:76:b1:d1:34:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:30:E2:6A:DB:1E:E1:78:C5:FB:3F:AC:D7:3A:DC:F7:BB:36:3F
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:89:af:c0:e1:f7:9d:3b:de:ca:ca:6c:ae:4d:c2:59:5f:
59:66:68:4c:ec:08:3c:8d:16:e4:e2:b3:7f:fa:7f:6c:37:4d:
ba:b3:3a:f3:53:6c:da:d7:19:ef:22:20:c6:a9:42:bd:1b:f7:
0d:8e:55:63:95:10:9e:47:6c:22:84:c7:65:8f:2f:9e:e2:92:
a5:20:ad:c9:06:5d:5a:b8:fd:0e:85:35:b3:8d:fe:74:b0:2b:
6e:3f:e5:4a:c7:b5:8e:6f:7d:9c:2d:0f:8e:33:be:e6:ca:92:
a6:f3:23:66:cc:6c:af:f9:05:9b:84:25:0a:0f:45:55:2f:0b:
82:16:8d:82:7d:cf:96:b6:69:d4:40:61:7e:04:1b:a0:96:fc:
45:ed:35:ff:68:72:37:db:ba:12:3b:46:9c:d5:30:60:3a:aa:
5b:37:b1:1b:a6:95:a3:58:54:b7:a3:4f:dc:98:38:0e:2d:84:
41:51:9e:b6:3f:55:fb:d2:e9:b2:32:62:28:43:bc:9d:a2:e4:
78:e4:98:8e:27:56:3d:49:d6:0d:69:26:9b:fb:66:78:5d:5a:
53:88:16:d2:18:11:f0:c0:ac:47:ab:e1:e3:b8:dd:b5:35:1d:
28:46:53:bf:66:ad:40:7c:bd:6e:c4:1e:17:68:c2:fd:75:72:
09:50:96:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorVfdLpCwLdwKMVXZQpSAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3
MjhlM2IwHhcNMjUxMDI4MTUwMDQ1WhcNMjUxMDI5MTUwMDQ1WjAzMTEwLwYDVQQD
EyhlOGJmMzBlMjZhZGIxZWUxNzhjNWZiM2ZhY2Q3M2FkY2Y3YmIzNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62gU4ozDSNgKBnFJcGzeWxJ8Pwkj
x9G91YB/roFgIZXO5TX3QXrPmGbbufjKYZ1P+AAF/gOhzpKYUBpsvRt8JE5iZjt6
SBl+8+ZHwmYUEtxVoAy3aVQkpnKfeE1UREVU9tL3swwJf/ubeGxgbNi0e0vCWJPC
vZo7M2EkRcTUue46HkVE/2d+ZYvnRQc22kMkU7iNpfn5iSLDZpzsR8sZmy/0FQfO
SpeYAEdAybfgSg6tZ48bLfmF8s8f2jtYhFQ2CXl+osi8WqYp6B4L/YZlouxx39XO
eAvhF2Hqxpw9P3ok9UGeYbLfUOevm0/5XKV9tlSMTQIVgg3SC3ax0TRGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi/MOJq2x7heMX7P6zXOtz3uzY/MB8GA1UdIwQY
MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfmJr8Dh
95073srKbK5NwllfWWZoTOwIPI0W5OKzf/p/bDdNurM681Ns2tcZ7yIgxqlCvRv3
DY5VY5UQnkdsIoTHZY8vnuKSpSCtyQZdWrj9DoU1s43+dLArbj/lSse1jm99nC0P
jjO+5sqSpvMjZsxsr/kFm4QlCg9FVS8LghaNgn3PlrZp1EBhfgQboJb8Re01/2hy
N9u6EjtGnNUwYDqqWzexG6aVo1hUt6NP3Jg4Di2EQVGetj9V+9LpsjJiKEO8naLk
eOSYjidWPUnWDWkmm/tmeF1aU4gW0hgR8MCsR6vh47jdtTUdKEZTv2atQHy9bsQe
F2jC/XVyCVCWiw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:43:56 2025 by rpki-client