Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: 6FpExuNJlH6ufqoFcRZ2GmX9SN2XeN3A3fsQQ1vJq9Q=
Subject key identifier: A4:1C:50:1F:E4:46:C3:C4:A7:55:2D:42:07:72:E4:B9:42:1B:CA:E9
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 019A00D9F1F038FA1454B5ADBED6982656DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 09:01:14 +0000
Manifest this update: Mon 20 Oct 2025 09:01:14 +0000
Manifest next update: Tue 21 Oct 2025 09:01:14 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: vsw9jr1uh5GYRK7vN7qtUvYyQT6StVlC16ARi4y3OQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:f1:f0:38:fa:14:54:b5:ad:be:d6:98:26:56:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Oct 20 09:01:14 2025 GMT
Not After : Oct 21 09:01:14 2025 GMT
Subject: CN=a41c501fe446c3c4a7552d420772e4b9421bcae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:09:d3:32:f1:73:51:9b:e1:c7:12:a9:9c:
86:08:18:d9:3d:eb:23:ec:85:c6:ca:15:94:83:a9:
c9:84:5d:a0:05:6b:b0:70:e9:54:04:25:ce:ad:09:
dd:ad:df:4f:4c:0b:7b:3a:8d:1d:1b:f5:1d:e6:f8:
cf:6a:26:6f:df:86:be:69:a6:c4:4f:f6:4b:38:3d:
79:3e:78:88:15:9c:5f:c9:ea:93:ef:9b:24:8b:68:
81:66:c1:11:a8:b8:e7:b2:56:6c:0c:97:99:41:5b:
81:53:ef:21:fc:c0:22:20:52:f0:e9:54:55:a7:ad:
b6:dc:72:eb:84:b9:e5:e2:3d:f5:ca:55:e1:68:3f:
35:8b:18:1c:8d:13:6a:79:46:ac:63:07:0e:19:22:
b1:d1:9d:f6:64:b7:07:5a:7e:0b:79:c0:96:54:48:
2d:73:00:53:2e:3d:05:0c:3c:04:af:70:c3:3f:39:
06:34:7f:02:02:3e:4f:99:8d:10:94:cc:f8:7e:6f:
5a:d3:60:ca:30:d8:85:fd:f2:f7:b9:a8:07:89:fa:
13:26:fa:e0:4b:30:77:3b:31:09:43:dc:7a:31:24:
08:49:81:c4:67:d7:23:f1:69:56:1b:9a:ec:2e:7e:
6d:a2:3a:cc:77:12:87:dd:05:49:00:d3:8b:72:a3:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:50:1F:E4:46:C3:C4:A7:55:2D:42:07:72:E4:B9:42:1B:CA:E9
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:9e:6c:d8:16:8e:66:89:5d:29:45:75:1a:6e:db:1c:a5:
df:0d:b0:fb:3a:5e:b1:0f:42:53:18:0b:16:98:86:13:32:99:
b0:ea:8b:60:e8:46:d9:47:e8:79:61:49:fd:a3:88:3e:b0:81:
75:9c:2b:ef:e0:02:e0:58:77:fe:26:da:c4:a1:e0:74:7a:d6:
41:de:a9:92:66:fa:21:d8:44:cf:d8:fb:ef:dd:dc:b9:ea:f0:
3b:e5:d1:12:b0:ba:04:28:2a:e4:94:84:6f:8d:b5:ab:6f:77:
6b:ee:38:95:a0:ae:3c:82:88:89:fd:b5:5d:93:61:e9:49:cc:
f8:cb:07:a4:de:26:40:bb:b6:42:b7:b2:15:56:e5:bc:2f:64:
a6:62:7c:4c:e0:54:da:c2:6a:3e:5e:42:c1:a2:f5:26:34:fa:
7b:65:66:96:f7:f1:cc:9c:81:3a:a1:e1:35:a1:8f:60:d3:f5:
b2:d1:68:be:96:f0:8f:05:81:f4:02:cb:75:9b:63:39:00:35:
5a:58:4c:0d:4b:62:fa:6b:31:c7:f1:04:34:5a:d1:c2:c5:8f:
c2:3c:7a:30:9e:12:a3:f3:38:09:8b:96:03:f0:f9:4c:1d:5d:
8d:07:82:04:37:71:34:25:30:48:8e:91:2c:62:c8:0f:ea:47:
50:df:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:02 2025 by rpki-client