Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: kBxRkj/m2cRmzupslZSICtiPWtt0+G7D4nQeVB44PgI=
Subject key identifier: 91:41:88:BB:65:5C:20:39:A5:1A:E6:8B:D3:00:11:C7:B4:ED:94:43
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 0199172CD920D8647918D6AF1A39E19769F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 1670
Signing time: Fri 05 Sep 2025 00:00:38 +0000
Manifest this update: Fri 05 Sep 2025 00:00:38 +0000
Manifest next update: Sat 06 Sep 2025 00:00:38 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: uKbiZH8Y/0wk7wmHATy1kgBWZ2spELOTIRyEDeFEC0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:d9:20:d8:64:79:18:d6:af:1a:39:e1:97:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Sep 5 00:00:38 2025 GMT
Not After : Sep 6 00:00:38 2025 GMT
Subject: CN=914188bb655c2039a51ae68bd30011c7b4ed9443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:37:da:f1:b6:82:b1:dd:dd:50:fb:e9:47:
e6:d0:ab:f2:5e:1e:8b:ad:fc:74:fa:64:44:ef:a6:
5f:db:fc:f2:02:e7:f3:a5:c3:be:19:02:f0:04:04:
9b:09:45:65:c0:42:34:84:bf:27:d0:c1:95:86:15:
bf:08:54:bb:bc:bd:43:0f:d4:f1:69:78:80:96:72:
3f:53:99:57:7a:27:1b:41:19:bd:3b:b8:eb:9a:7d:
22:71:01:91:a7:6b:11:2f:ae:f4:bd:ba:91:83:47:
8d:1e:32:13:17:b5:c2:d9:4a:35:e1:2e:f0:a9:e1:
9c:26:85:d3:f5:10:e0:6c:8a:bf:3b:63:81:d1:07:
66:e6:55:24:f4:72:da:f3:5d:94:77:8f:98:3c:dc:
13:8b:71:5d:c9:08:c3:03:4d:07:a1:eb:e9:25:cc:
da:e3:cb:10:be:5d:e9:a3:a5:55:a1:6d:00:8d:33:
91:58:9e:ab:14:7c:68:b0:73:a5:87:21:d3:83:8b:
36:ac:57:66:35:8f:87:9c:92:ab:ab:00:81:c8:70:
b0:81:3f:ad:fd:8d:a7:39:07:21:43:5b:1e:20:8e:
4c:49:76:03:a3:83:a9:ca:c4:12:3b:99:07:3c:13:
8b:e1:95:99:49:96:11:bd:d4:3e:52:7f:a9:6b:74:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:41:88:BB:65:5C:20:39:A5:1A:E6:8B:D3:00:11:C7:B4:ED:94:43
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:a0:b3:e5:20:66:60:bd:63:ec:6c:32:02:65:07:83:e9:
b6:34:2d:d4:75:bd:d3:05:05:ba:56:fa:81:0e:ca:4e:00:74:
9b:bd:a4:ff:71:e0:ce:03:03:32:68:b1:1c:e7:a6:f6:5c:a5:
e0:05:0d:f7:e9:b9:dd:6c:07:8b:4e:f7:d2:41:ae:a6:35:8f:
cc:83:07:8e:0a:d6:03:55:93:4d:33:ee:ae:19:58:1c:e2:f3:
41:da:24:50:23:07:e6:b0:6c:d5:d7:29:ac:8b:97:6d:be:2e:
29:00:a9:06:26:25:1f:f2:d4:03:80:b9:7a:59:bc:72:69:19:
f6:38:5a:ab:31:c9:af:02:ac:b1:c9:9d:5e:f0:4d:3f:2f:cc:
b3:5d:97:c0:38:d8:d4:13:87:10:6b:d7:29:0e:9b:cb:2d:c1:
ab:82:6a:e6:e3:73:45:22:6f:d9:8f:40:2b:fd:fa:12:30:61:
52:53:b1:8f:04:2d:66:c9:86:5f:ac:d6:62:ae:72:5a:57:84:
d9:6f:83:be:1c:2a:b4:7d:0c:f7:9d:68:8e:e9:16:a5:12:0c:
de:0c:20:f8:5a:9c:9b:dc:35:8d:1e:d1:c5:e8:84:f3:09:51:
bc:dc:53:68:88:6b:a6:36:74:67:30:d8:e0:c4:23:82:b2:58:
6c:90:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:19 2025 by rpki-client