Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File: eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier: sm35HVfH/LbxWqskhOWKcdXxZsg0HI5IrkR+K9AXepQ=
Subject key identifier: 4E:0E:2B:AD:EB:1D:EB:F8:DB:EC:3F:E9:B7:89:F6:D6:56:45:01:A0
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer: /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial: 019A7293EF390DC198897857A1D762970A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: IxYmMxmGqYA5XDNoE3iWZtpVmUuZ5BMap/VvQC2KzAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ef:39:0d:c1:98:89:78:57:a1:d7:62:97:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=4e0e2badeb1debf8dbec3fe9b789f6d6564501a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:0f:f4:e5:77:e7:9b:c5:35:d1:aa:75:a6:
ef:2a:4f:63:40:80:a7:5f:b3:aa:fc:d5:d5:e6:e9:
78:4f:84:0e:83:3d:2b:8e:45:1f:d1:52:e3:75:82:
f8:59:aa:d7:e0:fa:71:35:03:22:97:67:31:98:e8:
43:79:ab:d8:70:b0:0d:f2:05:06:d0:20:fb:99:98:
c5:45:e4:3d:b2:f9:83:04:6f:89:0f:49:fe:b8:f8:
0a:fc:05:00:81:ec:33:12:d7:7f:fd:68:c8:95:36:
fa:98:c9:1a:b5:9f:7d:f1:df:09:ed:d1:4d:17:08:
85:4f:cf:21:e7:94:9c:20:c9:7a:00:0d:11:95:37:
48:9c:d2:20:0b:cd:55:80:a5:1f:2d:a3:c6:c4:8b:
d5:e9:29:bb:74:47:2a:32:fd:a0:f7:b7:2f:88:32:
54:6c:65:5a:d9:b7:82:0f:19:4e:ea:14:c3:71:cb:
d1:ee:cd:c5:00:db:9e:0f:f6:63:bd:d1:36:ea:b5:
eb:a6:3e:c7:c5:e4:61:5d:e5:ad:17:a1:36:40:e3:
b7:c9:2a:02:15:b6:b1:d4:0e:1c:bb:93:08:90:85:
eb:7e:d5:ad:80:8b:95:f1:2d:6a:8e:bb:81:2c:f5:
74:5e:64:36:60:bf:36:28:74:41:3f:86:25:37:f6:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:2B:AD:EB:1D:EB:F8:DB:EC:3F:E9:B7:89:F6:D6:56:45:01:A0
X509v3 Authority Key Identifier:
keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0e:af:9f:73:ce:ba:7d:f8:a8:00:2a:3d:68:6b:03:79:f3:
48:6b:8d:d7:32:8c:fd:02:1a:0b:6c:5b:52:02:c6:ae:fa:65:
3b:eb:3c:42:3a:84:dc:4c:95:f7:ff:b5:98:cc:d7:7d:a3:e7:
76:4f:a2:10:e8:cc:b7:cf:7f:cc:c8:11:a6:33:0d:4d:ec:aa:
15:a4:a4:15:20:b3:e0:01:25:a2:e9:6a:63:44:05:30:54:3a:
5d:dd:f3:87:0f:6a:31:28:07:c2:6b:d8:bc:72:b5:0c:6e:43:
3b:9f:03:61:97:e1:b4:f2:98:e5:dc:e2:ad:fa:45:82:b8:8c:
0c:26:a8:9a:bf:3e:7b:46:bf:6e:47:a5:68:d5:10:f6:fc:9a:
d9:42:c8:21:6a:5c:23:f9:e3:e2:c3:c6:43:1f:7a:9a:4d:b5:
5a:74:5d:29:19:c4:1c:42:00:65:6b:05:b8:35:ca:78:25:b4:
fe:70:15:4a:c1:4a:d7:aa:a8:c8:0b:2b:fe:06:75:21:89:6e:
9d:bf:e5:35:63:ea:46:59:46:a5:1d:11:d3:ae:29:7f:ac:8c:
2e:86:56:7a:02:98:93:15:6d:da:7c:e7:34:20:43:04:e4:ce:
d5:a4:bd:9e:fb:90:8e:22:ac:4b:2d:10:63:e9:b8:55:a1:15:
c7:b2:61:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+85DcGYiXhXoddilwo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzcxZTY1Y2Y3YTNkMmUyZmMyYjhjYzNkNDNkNDVkMmIz
NTBkZjMwHhcNMjUxMTExMTEwMTI4WhcNMjUxMTEyMTEwMTI4WjAzMTEwLwYDVQQD
Eyg0ZTBlMmJhZGViMWRlYmY4ZGJlYzNmZTliNzg5ZjZkNjU2NDUwMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eUP9OV355vFNdGqdabvKk9jQICn
X7Oq/NXV5ul4T4QOgz0rjkUf0VLjdYL4WarX4PpxNQMil2cxmOhDeavYcLAN8gUG
0CD7mZjFReQ9svmDBG+JD0n+uPgK/AUAgewzEtd//WjIlTb6mMkatZ998d8J7dFN
FwiFT88h55ScIMl6AA0RlTdInNIgC81VgKUfLaPGxIvV6Sm7dEcqMv2g97cviDJU
bGVa2beCDxlO6hTDccvR7s3FANueD/ZjvdE26rXrpj7HxeRhXeWtF6E2QOO3ySoC
Fbax1A4cu5MIkIXrftWtgIuV8S1qjruBLPV0XmQ2YL82KHRBP4YlN/YRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4OK63rHev42+w/6beJ9tZWRQGgMB8GA1UdIwQY
MBaAFHjHHmXPej0uL8K4zD1D1F0rNQ3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEt
ODc4ODExMjdmY2JmLzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEtODc4ODExMjdmY2Jm
LzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw6vn3PO
un34qAAqPWhrA3nzSGuN1zKM/QIaC2xbUgLGrvplO+s8QjqE3EyV9/+1mMzXfaPn
dk+iEOjMt89/zMgRpjMNTeyqFaSkFSCz4AEloulqY0QFMFQ6Xd3zhw9qMSgHwmvY
vHK1DG5DO58DYZfhtPKY5dzirfpFgriMDCaomr8+e0a/bkelaNUQ9vya2ULIIWpc
I/nj4sPGQx96mk21WnRdKRnEHEIAZWsFuDXKeCW0/nAVSsFK16qoyAsr/gZ1IYlu
nb/lNWPqRllGpR0R064pf6yMLoZWegKYkxVt2nznNCBDBOTO1aS9nvuQjiKsSy0Q
Y+m4VaEVx7Jh3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:59 2025 by rpki-client