Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File: EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier: hTmhQcIRZyKh58PdNmJf/qNwv5zyjEuvwY9rCNmRxy4=
Subject key identifier: 24:AD:AC:93:1B:99:C5:7E:A4:65:98:0B:3B:A9:D2:43:36:40:C6:3C
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 0198D66108AD90732EE4B4B23F400E025601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number: 0D32
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: NHg7W9p3+dca2f1MNcpXP7ARbGgzCXCMsDX2eYm4/O4=)
2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=)
3: RArINz0YD-h2_8foRhBrlcIVL0Y.roa (hash: q/5avSOefV4RUqs3homJnrmXlOea+3kRE2If6GjN/D8=)
4: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=)
5: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=)
6: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=)
7: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=)
8: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:08:ad:90:73:2e:e4:b4:b2:3f:40:0e:02:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=24adac931b99c57ea465980b3ba9d2433640c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:c3:16:87:89:cf:10:2d:f8:e4:fd:13:dc:
1b:6e:16:4d:c8:b8:9d:d0:21:c4:d1:c8:7c:f4:09:
73:2a:f8:62:ca:29:d5:ce:6a:0c:0b:21:05:82:e0:
88:7c:1b:9a:48:59:a0:35:97:16:8b:c1:14:8e:26:
46:80:42:7c:38:02:a4:46:05:b8:af:4e:e1:5d:d5:
9f:c8:08:c8:d1:10:7e:32:11:ac:77:78:21:1c:89:
83:51:fe:43:c9:a4:8f:20:7a:0f:46:3f:6f:32:df:
56:22:1c:64:6e:52:ec:35:11:8a:21:39:c6:1f:12:
60:64:40:d9:4d:45:70:d3:86:81:9e:b9:0e:87:38:
72:c1:8e:fd:a7:70:02:00:d8:e1:79:31:69:b0:e1:
b1:ae:a3:e6:25:60:7f:e4:51:0b:b7:f9:11:f7:25:
63:1c:cb:81:66:a5:12:06:6e:d8:d4:48:fe:e5:28:
45:1c:73:b0:9a:0b:55:39:fc:8c:31:cb:e8:64:0f:
86:81:81:35:f4:30:4d:25:a7:24:3f:8e:b0:0d:51:
eb:67:62:41:86:31:55:e1:3a:fb:aa:27:f8:44:86:
39:e2:a3:4b:46:6b:1a:6a:02:5b:a4:94:9c:0d:eb:
8a:20:2a:b2:28:a7:d5:be:a5:dc:73:6e:35:d3:b2:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:AC:93:1B:99:C5:7E:A4:65:98:0B:3B:A9:D2:43:36:40:C6:3C
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dc:a8:65:ac:15:96:67:97:52:4b:52:6f:90:bc:90:49:74:
5f:8f:d1:4a:c0:c9:c3:b8:63:e7:02:4e:d3:68:92:e8:6c:40:
6f:0e:84:ae:94:c3:91:90:19:5c:8b:24:14:06:a4:f5:41:dc:
d4:2b:11:9b:f0:ad:f5:74:c8:37:6a:10:43:f2:ae:dc:83:e6:
63:a0:f7:56:ea:d9:53:95:d1:3f:1e:d5:4f:0c:a2:68:da:ed:
3c:5c:84:af:4f:2c:17:ce:b2:40:05:03:19:49:6e:45:34:0a:
ed:9a:bd:39:7c:b1:6a:d3:21:21:f0:90:15:4d:c7:f2:1a:6f:
2e:2b:c6:81:2c:67:45:5c:51:ca:54:20:d9:3a:33:b7:65:be:
8a:39:0f:92:ac:63:93:ab:36:a3:7e:e4:2e:b4:c4:6d:2f:e0:
44:80:06:35:5b:94:91:06:7c:c7:f9:ee:09:cd:c2:36:28:14:
e8:cb:77:9f:09:04:ee:aa:d2:32:22:ed:d7:81:2e:aa:86:fa:
57:63:71:0f:09:75:f8:59:42:6a:7e:07:3a:de:8b:8c:8c:b6:
02:fd:14:4f:3a:5a:e9:fb:ec:bb:32:12:1c:8b:ae:52:e1:9c:
c1:1d:b8:b6:95:2b:17:a7:10:67:5d:ff:e0:48:b8:3e:b0:29:
0a:be:37:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQitkHMu5LSyP0AOAlYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3
MjhlM2IwHhcNMjUwODIzMTAwMjIwWhcNMjUwODI0MTAwMjIwWjAzMTEwLwYDVQQD
EygyNGFkYWM5MzFiOTljNTdlYTQ2NTk4MGIzYmE5ZDI0MzM2NDBjNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcLDFoeJzxAt+OT9E9wbbhZNyLid
0CHE0ch89AlzKvhiyinVzmoMCyEFguCIfBuaSFmgNZcWi8EUjiZGgEJ8OAKkRgW4
r07hXdWfyAjI0RB+MhGsd3ghHImDUf5DyaSPIHoPRj9vMt9WIhxkblLsNRGKITnG
HxJgZEDZTUVw04aBnrkOhzhywY79p3ACANjheTFpsOGxrqPmJWB/5FELt/kR9yVj
HMuBZqUSBm7Y1Ej+5ShFHHOwmgtVOfyMMcvoZA+GgYE19DBNJackP46wDVHrZ2JB
hjFV4Tr7qif4RIY54qNLRmsaagJbpJScDeuKICqyKKfVvqXcc24107L6xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCStrJMbmcV+pGWYCzup0kM2QMY8MB8GA1UdIwQY
MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINyoZawV
lmeXUktSb5C8kEl0X4/RSsDJw7hj5wJO02iS6GxAbw6ErpTDkZAZXIskFAak9UHc
1CsRm/Ct9XTIN2oQQ/Ku3IPmY6D3VurZU5XRPx7VTwyiaNrtPFyEr08sF86yQAUD
GUluRTQK7Zq9OXyxatMhIfCQFU3H8hpvLivGgSxnRVxRylQg2Tozt2W+ijkPkqxj
k6s2o37kLrTEbS/gRIAGNVuUkQZ8x/nuCc3CNigU6Mt3nwkE7qrSMiLt14Euqob6
V2NxDwl1+FlCan4HOt6LjIy2Av0UTzpa6fvsuzISHIuuUuGcwR24tpUrF6cQZ13/
4Ei4PrApCr43VQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:45 2025 by rpki-client