Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: LQgHu6n4jOo0GIJ+zgyU+sWKMpYGDgdeUpLZ7CcUm3Q=
Subject key identifier: B4:A8:D9:69:45:B0:96:20:0D:91:94:BA:D6:CC:E5:A9:E6:3D:DC:0B
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019A0411D57AB3FFEEEA14B30D80014F72A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 06CA
Signing time: Tue 21 Oct 2025 00:01:08 +0000
Manifest this update: Tue 21 Oct 2025 00:01:08 +0000
Manifest next update: Wed 22 Oct 2025 00:01:08 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: bVFO5TrpakUtciDYjDem77pRiZHS129cSvAJPq8NZTc=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:d5:7a:b3:ff:ee:ea:14:b3:0d:80:01:4f:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Oct 21 00:01:08 2025 GMT
Not After : Oct 22 00:01:08 2025 GMT
Subject: CN=b4a8d96945b096200d9194bad6cce5a9e63ddc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:20:85:23:54:52:8f:bf:74:13:78:f1:83:
c0:5d:79:9e:a4:a9:db:b5:19:86:27:1f:e4:ff:3f:
53:32:de:e0:6d:fc:bc:03:de:90:ac:e7:47:d8:9f:
e0:f2:f4:a5:b7:2b:6a:63:cd:94:74:1b:46:4a:23:
bb:c8:c2:03:08:c7:72:a6:12:5d:78:34:7e:62:e1:
bb:10:d2:b6:1f:41:37:0b:ad:52:3e:b6:53:07:20:
7b:71:38:e1:b4:8c:e3:99:93:16:2d:d2:d2:4c:7a:
c7:f2:0c:77:8b:3e:24:75:2b:8a:75:ba:98:b2:82:
f2:2d:a5:61:62:7e:7a:52:4c:fc:b5:1b:8a:97:66:
d1:d3:35:ed:58:04:63:a7:a3:af:48:e1:57:ef:97:
34:d4:60:3e:85:d3:55:ad:af:f6:8a:74:f7:26:89:
70:6f:0e:bf:f6:4e:3c:ea:45:32:3c:1f:ba:9b:11:
df:1a:b9:26:28:85:07:85:17:c9:29:fd:e3:e6:11:
42:00:1b:93:c5:76:a5:fa:d3:8b:e6:87:cb:9d:63:
86:33:f8:60:6b:d0:0c:72:d2:d0:00:4e:03:59:ab:
34:b0:d9:15:e2:1b:88:4d:0f:e0:c7:cd:d1:a0:3a:
16:78:2a:59:26:e6:e6:71:47:0a:7a:51:62:70:6d:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:D9:69:45:B0:96:20:0D:91:94:BA:D6:CC:E5:A9:E6:3D:DC:0B
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:8c:23:4a:49:ba:27:1f:c2:54:dd:16:c0:42:0d:71:24:
18:d7:b0:ac:0a:fe:8f:76:92:93:c7:6c:19:d1:24:85:39:10:
79:d7:be:4a:68:da:a9:1e:74:6c:d4:b9:5c:44:ed:bb:36:11:
e7:11:f2:62:f3:0e:0b:6b:86:ba:7e:84:6b:d0:a4:04:4e:7a:
bb:8b:8f:af:f9:94:76:7d:30:d9:93:00:bb:c8:b6:aa:77:f2:
4f:df:13:b8:31:9c:be:e2:99:df:f4:b1:5c:9b:62:08:cc:d7:
1f:c3:77:be:06:b5:fb:08:89:53:2c:01:bd:80:5c:f7:8d:19:
d5:b8:6e:f6:fb:d2:ae:7a:a9:c1:c0:ef:a3:71:62:f6:dc:b8:
74:40:55:1f:24:da:ba:21:45:6b:af:f3:c4:b5:e3:5d:24:a4:
28:18:5c:61:21:57:8d:39:e5:ea:3b:c1:7c:d1:bd:90:7e:f4:
64:fa:41:81:51:c7:59:1f:a1:06:77:f9:32:8e:83:d2:18:62:
71:cf:f7:ba:e3:ae:43:3c:5d:48:cc:a2:72:58:a1:da:7b:7c:
17:ef:82:be:57:55:0f:ff:fd:4c:8f:f1:f9:4b:e5:f3:c7:b8:
45:8f:b7:50:0e:b0:b3:b2:2b:bd:ef:57:4f:0f:e6:81:1d:60:
d8:e8:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:01:13 2025 by rpki-client