Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: quh4G3WTS2OEao3pipe7c9dDOZF8gl0nRO59u+sFvsk=
Subject key identifier: 07:82:26:FF:17:22:10:F1:BA:45:75:66:14:51:AC:57:1C:2B:71:44
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 0198D5F1D80D1BEC699E2FDA55CC62D362EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 0585
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: 6vOSXbxmlUc6v26JxeOI7ojwp7rPEt6FEfxcnSan5mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d8:0d:1b:ec:69:9e:2f:da:55:cc:62:d3:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=078226ff172210f1ba4575661451ac571c2b7144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:17:86:21:34:22:c5:5b:62:e8:59:53:18:
df:83:62:97:5c:a4:1d:09:60:4f:64:59:e7:b2:c8:
30:49:4c:9b:63:bd:02:48:36:c2:52:f7:10:3f:27:
aa:3f:0b:b4:0e:99:ae:33:79:52:37:20:b1:e8:95:
37:1b:5f:b9:58:6c:e5:72:77:1f:ef:8d:22:64:b1:
6a:2f:bd:97:e9:72:26:2d:22:2d:da:bd:21:ee:0f:
95:a2:3d:1f:22:a2:f5:26:fc:29:b8:e1:81:4e:93:
61:54:9b:80:0d:a0:56:f6:e8:4f:2c:42:17:b8:cc:
bd:6a:77:94:ca:7d:23:ec:6a:74:35:f7:70:81:01:
47:a5:01:4d:d4:99:fa:fa:1a:fd:55:a0:90:dc:c9:
b1:cc:db:b6:a1:31:4c:79:cf:b9:9c:13:fb:c2:3d:
3e:a4:66:98:07:c7:c5:d1:5b:50:e5:66:cc:c4:1f:
36:47:5f:aa:07:99:a9:19:d4:69:28:78:72:7b:5b:
0a:95:79:e2:cd:82:16:62:1d:b5:af:6a:70:39:44:
d4:c8:1e:10:8b:a9:61:16:b9:28:a0:06:a1:1f:48:
de:b4:04:a2:b3:fe:ca:4f:07:37:a8:e4:cd:a8:df:
88:a0:00:e4:1e:88:e3:c6:5b:ad:b3:eb:14:ad:4a:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:26:FF:17:22:10:F1:BA:45:75:66:14:51:AC:57:1C:2B:71:44
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a6:cb:17:f1:51:69:bb:b8:32:68:92:a5:c4:65:fa:1d:43:
f2:45:64:be:a0:b3:f0:e6:25:9c:a6:ad:4f:86:95:f8:e7:72:
e7:9e:e7:46:7e:09:32:eb:78:75:9d:03:9d:a6:4b:ca:0c:ae:
bb:6c:0e:ba:fe:90:7f:db:83:2c:2e:82:24:af:72:7e:8b:e2:
ce:8c:c8:77:37:93:3e:0f:b0:26:26:88:20:d2:93:b8:cc:8e:
22:0c:f1:ed:0a:c5:7a:12:58:f5:45:9a:a2:bb:5d:66:07:ef:
02:2d:80:5a:3a:62:64:aa:93:ee:8e:a1:a5:dd:4e:6f:e3:c7:
42:55:28:72:26:52:4a:4b:a3:c2:8a:1a:67:77:76:2d:27:2a:
57:42:2f:7b:5b:45:d5:71:4b:dd:e6:db:fb:14:b3:0c:1a:26:
29:e8:08:2c:2b:39:22:e9:05:5c:d1:a0:8f:e1:87:f2:1a:00:
3d:99:c6:7a:c2:49:7f:c8:b2:e3:a2:2b:94:51:58:c3:0c:a8:
67:90:e9:a7:53:b5:c2:36:6a:67:b0:a8:b3:0a:84:ea:4a:16:
87:09:14:28:42:34:a2:25:e0:0c:6d:8c:56:8b:26:94:37:39:
3c:9e:a8:3e:b9:5c:a4:66:01:4d:5e:47:cb:d1:af:bd:cb:f0:
ef:62:39:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dgNG+xpni/aVcxi02LrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjUwODIzMDgwMDUzWhcNMjUwODI0MDgwMDUzWjAzMTEwLwYDVQQD
EygwNzgyMjZmZjE3MjIxMGYxYmE0NTc1NjYxNDUxYWM1NzFjMmI3MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh8XhiE0IsVbYuhZUxjfg2KXXKQd
CWBPZFnnssgwSUybY70CSDbCUvcQPyeqPwu0DpmuM3lSNyCx6JU3G1+5WGzlcncf
740iZLFqL72X6XImLSIt2r0h7g+Voj0fIqL1JvwpuOGBTpNhVJuADaBW9uhPLEIX
uMy9aneUyn0j7Gp0NfdwgQFHpQFN1Jn6+hr9VaCQ3MmxzNu2oTFMec+5nBP7wj0+
pGaYB8fF0VtQ5WbMxB82R1+qB5mpGdRpKHhye1sKlXnizYIWYh21r2pwOUTUyB4Q
i6lhFrkooAahH0jetASis/7KTwc3qOTNqN+IoADkHojjxluts+sUrUoNnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeCJv8XIhDxukV1ZhRRrFccK3FEMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6bLF/FR
abu4MmiSpcRl+h1D8kVkvqCz8OYlnKatT4aV+Ody557nRn4JMut4dZ0DnaZLygyu
u2wOuv6Qf9uDLC6CJK9yfovizozIdzeTPg+wJiaIINKTuMyOIgzx7QrFehJY9UWa
ortdZgfvAi2AWjpiZKqT7o6hpd1Ob+PHQlUociZSSkujwooaZ3d2LScqV0Ive1tF
1XFL3ebb+xSzDBomKegILCs5IukFXNGgj+GH8hoAPZnGesJJf8iy46IrlFFYwwyo
Z5Dpp1O1wjZqZ7CoswqE6koWhwkUKEI0oiXgDG2MVosmlDc5PJ6oPrlcpGYBTV5H
y9Gvvcvw72I5dA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:46 2025 by rpki-client