Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File: _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier: 3yUZ0C6MYVF76/qwfVe6u3uXJuEhNEErAi0iz31SpG8=
Subject key identifier: A6:63:D1:DE:FB:F2:B1:2F:0F:8E:C6:8E:A1:7B:E3:2B:5C:B6:04:37
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 019A70DC37A196BB3ED6A4D3F0BD894C4C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number: 0C03
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: EAfya0jVtmBr97hnz/uP2eTGHJHcUyVGZwrR/q26q2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:37:a1:96:bb:3e:d6:a4:d3:f0:bd:89:4c:4c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=a663d1defbf2b12f0f8ec68ea17be32b5cb60437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:ae:1a:ef:92:e1:9c:b2:2c:dc:72:c7:31:
ba:61:00:fe:d8:c4:92:ae:1f:b9:92:94:fa:06:77:
8a:32:5d:97:57:a9:68:73:01:9e:9e:eb:0d:ad:5e:
c4:2a:15:09:1f:2f:71:18:08:29:d1:ce:92:a4:17:
f3:01:d3:5f:41:97:09:3a:cb:49:51:e7:90:df:76:
8d:48:c0:a8:dd:c6:67:89:16:f7:7d:91:fc:01:b0:
fe:92:a9:38:bf:bc:e9:5f:18:f5:20:07:df:6d:e3:
cb:89:08:fb:eb:d1:a6:b1:55:28:a4:b5:73:cf:ee:
16:7c:3b:f4:f2:c7:fd:17:ed:c8:c6:1c:bc:ba:e2:
f4:88:c4:8e:96:04:8b:5e:9a:ef:d7:7d:6a:aa:38:
6c:c4:9c:b3:74:af:aa:7d:77:93:bf:a2:b4:de:8f:
4d:f8:f3:0e:27:be:cf:7e:67:78:6c:35:75:3a:3d:
eb:4b:4a:d5:78:40:01:68:50:58:a7:80:69:38:11:
05:07:26:a4:44:85:34:73:52:41:59:0c:ec:50:17:
d6:76:11:1a:94:e2:79:8c:45:28:34:b0:8a:ba:2d:
0a:ff:13:56:eb:0b:a4:b4:fb:8b:f7:b1:75:77:70:
97:06:47:86:23:b8:59:d8:f5:1b:32:f8:d1:9c:77:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:D1:DE:FB:F2:B1:2F:0F:8E:C6:8E:A1:7B:E3:2B:5C:B6:04:37
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2f:ec:e6:9a:81:a6:83:f9:42:6a:a0:a2:f8:d0:b2:f0:52:
ba:73:c3:12:66:0f:f6:7d:8b:e9:79:7d:75:b1:eb:54:09:9c:
ea:64:fc:35:cc:97:0f:e7:54:4b:05:e9:4d:8f:ee:e3:74:bc:
6c:40:90:67:d3:c7:c6:fc:8b:f2:50:f8:21:45:a5:66:cc:e1:
5c:69:2a:9f:c5:28:bb:e7:b7:74:63:7c:ba:25:71:b5:77:c7:
b9:41:ef:e9:d0:7b:da:8d:7a:c7:68:93:27:b0:b8:bc:fd:dd:
67:ba:ef:03:52:db:ad:4e:e6:dd:d2:0c:1c:fd:d9:e5:6e:01:
61:6d:16:6f:8f:f7:ed:c3:0a:55:f3:04:e7:2d:54:08:36:68:
81:13:2f:6a:6a:9b:cd:d3:3c:64:80:64:eb:bc:bb:85:ab:58:
54:34:80:80:61:92:39:2e:f1:db:f8:05:dd:66:e0:d6:ad:84:
0f:85:7e:dc:ac:a9:55:3a:78:9a:75:34:3d:4b:7d:6f:72:2d:
52:db:f2:ff:29:5f:9d:bb:85:d7:03:22:ef:24:87:a0:64:da:
d3:43:ad:dd:b0:4a:36:6d:b1:91:e0:e8:67:39:88:cd:94:d3:
4e:30:f1:61:26:29:34:c7:fc:4a:61:59:bc:ad:79:68:65:63:
88:9c:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client