Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier: 1FeaOiC/jbcs5WrTfMtdD0yVv7iNWE30Yv2Dh/LPD9I=
Subject key identifier: 86:4A:E1:DF:B1:B8:5D:C5:0D:AB:75:78:4F:DC:4C:2C:45:EE:77:B0
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 0199FC5871395EE1A3796EDC23CE22A9AFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number: 141D
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: UnIDOFyaoOYWx6EDLSm0Z+EWOM7W6VO8A6SgXz20wVo=)
2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:71:39:5e:e1:a3:79:6e:dc:23:ce:22:a9:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=864ae1dfb1b85dc50dab75784fdc4c2c45ee77b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:4f:aa:6d:72:24:f6:26:c6:d6:99:3d:fe:
9d:ac:2d:c3:79:48:b3:85:97:3e:a7:7e:73:4d:c3:
aa:34:54:5f:6e:9f:ba:38:23:b8:36:c1:17:26:68:
a6:8e:3b:5c:6f:49:7f:9a:e7:87:fa:71:2c:8e:64:
51:5f:b2:a1:de:e7:ba:1a:c7:c4:81:e4:4a:54:1f:
f2:e9:2c:8a:25:07:53:49:56:c7:81:00:ab:dc:14:
45:71:32:09:d6:50:bf:fb:9a:ca:5d:64:65:e5:0a:
49:3d:7b:c3:b1:36:5b:e2:48:6f:8c:55:d8:a7:ae:
ce:a0:ec:b8:c4:b4:63:0a:28:23:47:5b:87:ab:42:
a3:47:3e:82:b4:92:5d:a3:36:72:9a:8f:ac:30:13:
e0:a0:73:c5:2a:13:6a:61:58:c5:3a:14:3b:cc:df:
2f:8d:2c:bf:7b:24:a7:8a:1b:57:32:78:dc:33:b0:
16:1c:6a:c7:ce:6d:77:34:0b:ff:1e:07:50:dc:17:
05:96:ce:76:ad:3b:a5:db:53:66:0e:ea:81:e1:46:
3a:a5:04:55:0d:df:4a:1e:19:65:81:39:99:73:b2:
e3:ab:60:db:5d:de:87:03:e1:aa:8c:e4:ff:b4:60:
63:67:ee:9a:7e:da:c4:6a:8e:da:0c:5b:33:3e:c8:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:E1:DF:B1:B8:5D:C5:0D:AB:75:78:4F:DC:4C:2C:45:EE:77:B0
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:6d:f6:eb:a7:b4:30:d2:0e:a9:65:3e:60:1b:86:be:a3:
6c:30:93:e7:f9:c8:07:83:5a:ac:c2:11:36:7e:55:8f:b9:e9:
f5:54:3f:f3:ac:32:0a:50:de:01:aa:83:f3:41:04:ef:f7:56:
16:48:2b:88:ea:9b:fb:09:0f:2b:39:8c:33:5b:40:75:80:08:
cc:c1:b4:e4:3f:75:7a:fc:82:39:dd:74:81:14:34:76:b6:df:
81:5f:74:99:13:b7:c7:1e:db:56:90:fb:11:54:dc:2a:1d:27:
29:d2:42:2e:70:98:1e:86:47:6c:3d:fe:68:57:5a:f5:da:19:
91:79:e8:4f:77:42:c2:9d:45:bd:8c:e9:e7:7b:b7:8a:cf:99:
ca:0f:e7:5b:5d:2a:6b:4f:29:04:6c:36:8f:3d:3d:01:10:fe:
6a:d0:6f:2f:da:bc:8f:f4:12:b7:40:32:30:4b:ab:20:ce:6e:
f8:8f:0b:4d:fc:02:11:34:3e:a7:47:13:9d:54:35:b2:0c:ab:
20:2a:5e:85:26:55:c3:d1:60:a3:fd:14:60:24:ad:a1:6b:28:
9f:b6:b2:33:16:48:68:31:cf:dc:51:76:be:8e:20:78:3f:21:
82:ff:de:47:6c:4c:49:7a:d2:5f:f2:f5:cb:e0:33:da:2e:09:
ef:83:09:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHE5XuGjeW7cI84iqa/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi
MTk5M2MwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
Eyg4NjRhZTFkZmIxYjg1ZGM1MGRhYjc1Nzg0ZmRjNGMyYzQ1ZWU3N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFRPqm1yJPYmxtaZPf6drC3DeUiz
hZc+p35zTcOqNFRfbp+6OCO4NsEXJmimjjtcb0l/mueH+nEsjmRRX7Kh3ue6GsfE
geRKVB/y6SyKJQdTSVbHgQCr3BRFcTIJ1lC/+5rKXWRl5QpJPXvDsTZb4khvjFXY
p67OoOy4xLRjCigjR1uHq0KjRz6CtJJdozZymo+sMBPgoHPFKhNqYVjFOhQ7zN8v
jSy/eySnihtXMnjcM7AWHGrHzm13NAv/HgdQ3BcFls52rTul21NmDuqB4UY6pQRV
Dd9KHhllgTmZc7Ljq2DbXd6HA+GqjOT/tGBjZ+6aftrEao7aDFszPshaGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZK4d+xuF3FDat1eE/cTCxF7newMB8GA1UdIwQY
MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt
NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5
LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuht9uun
tDDSDqllPmAbhr6jbDCT5/nIB4NarMIRNn5Vj7np9VQ/86wyClDeAaqD80EE7/dW
FkgriOqb+wkPKzmMM1tAdYAIzMG05D91evyCOd10gRQ0drbfgV90mRO3xx7bVpD7
EVTcKh0nKdJCLnCYHoZHbD3+aFda9doZkXnoT3dCwp1FvYzp53u3is+Zyg/nW10q
a08pBGw2jz09ARD+atBvL9q8j/QSt0AyMEurIM5u+I8LTfwCETQ+p0cTnVQ1sgyr
ICpehSZVw9Fgo/0UYCStoWson7ayMxZIaDHP3FF2vo4geD8hgv/eR2xMSXrSX/L1
y+Az2i4J74MJvw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:06 2025 by rpki-client