Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: Em5dQdwJlxPwZuwt0INZ/bgWlpDWxVZyvlvXsXGVlM0=
Subject key identifier: 84:61:59:72:28:D0:60:73:4B:29:3B:FD:57:23:08:2C:30:E4:8A:D2
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019655A5351495AE45C5CD12E4EBEAA75E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 04E2
Signing time: Mon 21 Apr 2025 00:00:12 +0000
Manifest this update: Mon 21 Apr 2025 00:00:12 +0000
Manifest next update: Tue 22 Apr 2025 00:00:12 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: ph9WMa+xnG2oCeaL99R6t9vDR1+rjZzUXBBWbMNAAv0=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:35:14:95:ae:45:c5:cd:12:e4:eb:ea:a7:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Apr 21 00:00:12 2025 GMT
Not After : Apr 22 00:00:12 2025 GMT
Subject: CN=8461597228d060734b293bfd5723082c30e48ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:2f:78:d7:3d:56:6b:93:92:6e:27:7c:60:
35:10:d2:92:86:2d:59:b7:e0:23:7a:e4:96:11:d5:
eb:6f:f3:42:6e:88:41:f7:e9:3e:f9:7a:6a:7b:64:
c5:10:48:ca:b5:1e:b2:aa:11:0b:17:bf:34:8d:ab:
15:cd:a2:01:d8:5b:34:5e:33:cd:9b:bf:ea:9f:70:
20:2f:0a:eb:e3:2b:2a:78:94:a1:ca:46:67:b1:7b:
2f:a8:98:d2:d7:4e:7b:57:10:54:f6:7b:8c:15:49:
e1:1d:a5:c4:21:41:dc:cd:2c:61:5e:64:5e:06:c9:
b9:e1:8b:6c:74:b4:12:a7:56:8d:f7:a5:15:ee:db:
f6:c0:04:de:f4:39:68:11:f7:07:be:b3:ad:9f:6b:
70:7b:75:b2:64:79:8a:f4:81:ec:03:0f:02:50:91:
71:86:51:b6:a2:de:7c:ab:78:32:e1:5d:5d:d8:bf:
89:fd:a4:16:0e:c7:ac:fa:9e:f3:97:26:db:d3:c0:
bb:04:26:6a:7b:c5:67:87:56:87:21:bb:78:e9:c8:
6b:95:3e:b9:0c:e7:85:8e:7c:2d:1a:29:d6:cb:a1:
30:c4:70:35:f9:cb:b6:93:e2:31:d0:4e:20:87:a1:
f0:8c:72:e5:b6:1c:de:34:e6:64:10:07:e6:27:8c:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:59:72:28:D0:60:73:4B:29:3B:FD:57:23:08:2C:30:E4:8A:D2
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:34:4f:8b:09:fa:87:fa:ad:17:58:b2:00:67:15:44:51:72:
06:3d:6c:41:5b:a9:95:f0:d0:08:5b:9c:a8:a5:58:37:f1:c3:
4b:9f:b0:0e:e6:4e:df:0c:92:a9:a2:0e:84:83:1a:19:34:ae:
9d:57:56:0d:64:c0:fa:f4:25:67:15:8a:de:54:a3:0d:83:5b:
2c:a5:75:ea:48:da:4b:9c:ec:24:3f:2a:e3:a8:b8:b7:1c:04:
c5:ac:1b:4e:a1:1a:fb:46:06:c6:33:cb:cc:06:69:05:d3:a5:
14:2c:cd:42:df:98:18:e5:09:2e:84:67:17:48:89:43:33:07:
30:95:1a:31:26:41:a4:6b:f6:8a:9e:a0:04:bf:1a:4f:66:d6:
14:58:d0:7c:2d:e0:ca:96:be:70:9b:2b:4a:12:33:93:ed:8c:
2a:6a:8f:77:4e:09:fb:15:f2:16:8c:bd:b4:6b:d3:92:34:d3:
ad:89:a4:1e:b2:68:1c:8b:91:f8:62:84:49:86:98:28:ef:d8:
94:82:ab:2f:88:da:f6:bc:b3:1d:2f:e6:72:0c:3a:e5:38:4b:
a2:66:1a:3c:e5:29:a0:83:ef:81:84:e8:02:b3:ad:84:e3:67:
01:dd:5e:34:23:a8:c3:0f:e4:e8:83:04:62:3a:98:82:b7:36:
8b:89:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:37 2025 by rpki-client