Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: abA9fNThCd7CK2ffzXlk0ZyP3/GTKiGsgK6o0BD+P+o=
Subject key identifier: A0:01:F1:84:51:24:A3:57:F0:D3:BB:93:9A:43:60:8C:B2:AA:C5:93
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 019A70DBDE9EE0370D882656EB3B42687277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:00:48 +0000
Manifest this update: Tue 11 Nov 2025 03:00:48 +0000
Manifest next update: Wed 12 Nov 2025 03:00:48 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: 9t712xTveZBi+Au1NTZtqKjN0rHRcsJmmJhC6VXM7Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:de:9e:e0:37:0d:88:26:56:eb:3b:42:68:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Nov 11 03:00:48 2025 GMT
Not After : Nov 12 03:00:48 2025 GMT
Subject: CN=a001f1845124a357f0d3bb939a43608cb2aac593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:e3:7c:a9:24:39:e1:a9:55:7c:37:60:d8:
0c:57:44:b5:20:45:c1:02:7c:2e:da:d1:88:d8:ac:
29:eb:cf:4b:bc:de:39:63:64:05:35:66:50:9b:cf:
5e:b6:4b:ef:7b:34:57:59:ca:71:ce:bb:00:13:68:
6a:26:84:20:cc:ba:d2:f7:ec:c7:f0:65:a4:83:78:
d9:c1:44:88:d3:f0:04:ef:b2:f7:49:cf:07:a3:02:
47:f2:75:ff:4a:fb:99:a1:07:57:d8:d8:5e:8c:4a:
b0:28:f1:2f:10:39:78:a5:e3:de:2d:61:c7:be:d9:
a0:f8:c0:4a:47:b7:2f:bd:24:85:01:80:92:a0:0d:
ae:6a:7c:04:6d:04:b1:16:17:7a:fa:ed:3f:ef:0e:
b2:52:5e:61:1c:42:69:cd:61:11:44:83:16:1a:61:
db:ae:9e:d3:91:00:3a:58:07:2a:91:fd:ad:b5:b4:
c9:4a:9f:37:03:b4:52:20:0c:1d:c5:cf:f5:cc:18:
90:32:9a:23:12:e3:05:8c:97:e3:a7:79:6a:5b:be:
66:af:8e:5e:54:11:2c:89:7c:a4:a6:df:52:21:a0:
81:6e:23:f4:9f:07:1a:f6:d3:66:9a:10:06:4a:a5:
a5:5e:c6:31:9f:63:a3:47:56:79:0b:6a:4a:21:bf:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:F1:84:51:24:A3:57:F0:D3:BB:93:9A:43:60:8C:B2:AA:C5:93
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:3c:f9:6f:fc:ba:50:4c:70:32:4e:63:0b:06:16:12:41:
2a:0f:01:13:a7:d9:b0:a9:8e:1e:35:14:2d:9c:27:ce:fe:9e:
08:c8:96:96:06:61:1e:df:52:b8:05:c0:f2:18:51:f1:78:e2:
3f:db:f6:b2:28:26:6a:f6:68:03:06:c9:78:a7:d2:8a:af:ba:
e4:4b:0e:91:b8:36:cc:de:95:f3:1f:32:a8:06:ec:3b:ab:be:
f0:e5:cc:9c:2a:3c:21:42:92:36:37:46:1f:7d:19:2f:e5:54:
8d:f9:55:03:07:1e:85:09:3d:50:11:96:62:2a:29:e2:75:93:
55:27:67:2a:dc:f8:62:4c:7e:af:77:d5:a7:b9:b2:75:c8:15:
ad:8b:e2:dd:71:df:d3:94:3a:55:dc:f9:20:a3:74:c2:95:5a:
59:82:e3:04:a3:de:e8:81:89:d5:f4:18:42:70:72:7a:5c:d7:
d7:e2:ea:bd:32:32:bf:0f:dc:07:e7:f6:21:ed:f4:6c:8b:5f:
93:c5:0e:f3:c5:98:fe:df:47:bb:fc:84:13:35:de:31:54:08:
16:e2:9e:22:7f:8b:e3:d3:d5:7a:51:f8:e9:5d:8b:25:9d:6d:
57:b6:72:83:8e:a2:b6:1b:4b:9f:60:7b:e0:f8:60:6b:cf:d7:
50:0b:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client