Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier: Dh/8VjpF0Byxav9N4w045xw0bHtp2qEH99IBt4D1em0=
Subject key identifier: 3A:FD:14:BC:60:FF:CF:F5:25:4A:A4:51:D9:44:0A:59:17:39:CF:E2
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 01964BFE3DC093B1D9F0A55BF18BAEC960EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number: 0E8F
Signing time: Sat 19 Apr 2025 03:01:15 +0000
Manifest this update: Sat 19 Apr 2025 03:01:15 +0000
Manifest next update: Sun 20 Apr 2025 03:01:15 +0000
Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: fpvlrMOqx0NBgiz4gRPaevMGVzQOf3Wkm+ELvnI86yY=)
2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:3d:c0:93:b1:d9:f0:a5:5b:f1:8b:ae:c9:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Apr 19 03:01:15 2025 GMT
Not After : Apr 20 03:01:15 2025 GMT
Subject: CN=3afd14bc60ffcff5254aa451d9440a591739cfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:41:e5:be:7e:b3:52:10:03:07:b5:9d:2e:
99:2f:07:5a:31:87:cf:c1:75:07:0e:da:28:98:61:
5e:6f:31:ec:c4:8a:15:8d:09:06:d5:9c:e8:c3:b6:
c0:5d:4c:90:8c:f9:e5:c2:01:19:e8:7c:0a:b9:75:
36:20:8e:db:de:c5:ca:c3:b7:f8:69:b0:e3:40:39:
5e:17:0c:11:84:00:4b:fa:43:92:38:e2:65:7c:39:
48:75:85:73:b1:db:7b:54:ec:e7:ec:35:49:c3:8d:
d5:68:a6:91:35:0c:36:b3:ad:ea:0f:79:07:8d:e3:
fa:72:9d:26:0b:27:ec:bd:40:38:c8:35:4d:f8:aa:
b5:df:5d:7c:00:5c:c9:f6:14:a4:9f:cb:8a:45:af:
da:32:31:c8:b2:0d:78:70:b0:80:6b:aa:c5:7a:c7:
df:43:d1:6f:26:ae:69:5a:26:01:49:59:a6:31:d0:
11:e0:96:ce:3c:66:96:2a:fd:9d:6f:b0:42:da:21:
a7:83:41:9c:73:7d:f5:89:8b:5a:a7:f0:4c:b3:72:
67:8f:82:72:e2:e7:b7:25:27:73:0e:25:2b:7a:09:
20:95:11:ca:fd:03:65:ca:30:fb:05:0d:33:b2:0d:
e3:30:a5:cb:cf:2e:59:41:52:6e:95:49:2f:d6:42:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FD:14:BC:60:FF:CF:F5:25:4A:A4:51:D9:44:0A:59:17:39:CF:E2
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:1f:95:d8:f2:61:64:55:c5:5e:f5:71:4d:ec:76:a6:fd:
cb:31:26:49:a4:41:71:99:e4:d0:46:d3:ee:5f:57:2e:0a:03:
ba:6a:9f:f5:2c:dc:a1:30:68:37:1f:78:7b:98:be:8a:00:a9:
cf:22:df:26:0a:44:33:54:d1:4a:10:57:59:1d:47:8d:40:f0:
af:3c:a3:1d:f3:3c:4c:e9:84:78:f8:7c:ba:cf:24:82:91:19:
7d:79:ca:f7:cb:69:80:99:ff:78:65:c6:f7:4d:6c:55:85:ac:
5e:65:ad:4c:18:c9:d3:c6:ac:b8:f2:1e:ae:21:d4:ec:27:b6:
90:02:3a:66:a6:62:df:47:28:9d:23:3e:0d:5a:7b:c3:aa:25:
34:45:83:e6:49:6e:3c:4e:54:31:93:fe:c9:6f:31:50:ca:04:
29:a8:c2:9e:5b:13:d4:db:27:84:bb:52:4b:28:95:84:7d:f4:
1c:fb:a2:c8:5c:15:4e:5a:67:48:28:db:6e:d8:5a:dc:f1:7c:
12:92:69:42:a1:2c:41:40:08:76:e2:93:49:11:fe:2a:c1:9a:
b0:e8:26:53:36:6c:ed:b2:b9:5a:9d:03:f7:bb:30:14:09:fc:
36:ff:a3:73:44:a7:b0:55:e8:cc:de:e0:3b:30:16:8c:00:3b:
00:7e:fe:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/j3Ak7HZ8KVb8YuuyWDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1
Mzg3NDMwHhcNMjUwNDE5MDMwMTE1WhcNMjUwNDIwMDMwMTE1WjAzMTEwLwYDVQQD
EygzYWZkMTRiYzYwZmZjZmY1MjU0YWE0NTFkOTQ0MGE1OTE3MzljZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAdB5b5+s1IQAwe1nS6ZLwdaMYfP
wXUHDtoomGFebzHsxIoVjQkG1Zzow7bAXUyQjPnlwgEZ6HwKuXU2II7b3sXKw7f4
abDjQDleFwwRhABL+kOSOOJlfDlIdYVzsdt7VOzn7DVJw43VaKaRNQw2s63qD3kH
jeP6cp0mCyfsvUA4yDVN+Kq13118AFzJ9hSkn8uKRa/aMjHIsg14cLCAa6rFesff
Q9FvJq5pWiYBSVmmMdAR4JbOPGaWKv2db7BC2iGng0Gcc331iYtap/BMs3Jnj4Jy
4ue3JSdzDiUregkglRHK/QNlyjD7BQ0zsg3jMKXLzy5ZQVJulUkv1kLxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr9FLxg/8/1JUqkUdlEClkXOc/iMB8GA1UdIwQY
MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt
MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm
LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWYfldjy
YWRVxV71cU3sdqb9yzEmSaRBcZnk0EbT7l9XLgoDumqf9SzcoTBoNx94e5i+igCp
zyLfJgpEM1TRShBXWR1HjUDwrzyjHfM8TOmEePh8us8kgpEZfXnK98tpgJn/eGXG
901sVYWsXmWtTBjJ08asuPIeriHU7Ce2kAI6ZqZi30conSM+DVp7w6olNEWD5klu
PE5UMZP+yW8xUMoEKajCnlsT1NsnhLtSSyiVhH30HPuiyFwVTlpnSCjbbtha3PF8
EpJpQqEsQUAIduKTSRH+KsGasOgmUzZs7bK5Wp0D97swFAn8Nv+jc0SnsFXozN7g
OzAWjAA7AH7+gw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:10 2025 by rpki-client