Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: fTYqTz1SiibkGTx5URf1NzHmtECEMg5Dyfj5wYJIekk=
Subject key identifier: FA:EB:85:09:4C:E9:D6:A9:F2:A3:7A:EE:14:DA:1C:F7:E1:5A:69:17
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 019645567EF4BC17FA8F83E1960243B75C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 0431
Signing time: Thu 17 Apr 2025 20:00:18 +0000
Manifest this update: Thu 17 Apr 2025 20:00:18 +0000
Manifest next update: Fri 18 Apr 2025 20:00:18 +0000
Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: znZGx98AUS1wGEv6ZoPFHJoG98ad/E0p8KQUyuesvMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:7e:f4:bc:17:fa:8f:83:e1:96:02:43:b7:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Apr 17 20:00:18 2025 GMT
Not After : Apr 18 20:00:18 2025 GMT
Subject: CN=faeb85094ce9d6a9f2a37aee14da1cf7e15a6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:29:44:37:7a:44:cb:0b:e4:af:c5:8c:29:
cb:cd:96:86:b8:b7:9f:57:63:ea:3e:ac:b3:17:88:
75:60:e1:0a:38:51:f5:0c:68:22:99:29:69:3c:30:
f0:8e:94:7c:56:30:89:c7:97:77:85:3c:90:76:d9:
56:d4:2a:fc:5b:e8:6a:1b:af:77:ff:82:90:69:1a:
91:b6:03:f8:49:38:23:00:6e:72:62:c4:cb:24:de:
82:41:bb:f5:8f:6f:8d:c4:5c:ac:a7:7c:03:75:94:
9b:c6:51:ac:85:cc:86:ae:f7:41:03:53:31:ea:6f:
35:d1:5d:c6:b2:ce:c0:63:60:38:40:e2:3c:4b:55:
43:35:5e:5b:a5:ea:5a:69:9f:05:5d:e6:a9:e3:76:
2b:73:02:3f:b5:37:9a:f5:25:79:2f:25:d9:57:c4:
04:5a:db:71:09:55:24:a2:49:a4:1c:ad:ba:ac:3d:
59:af:4e:8e:c7:1c:58:94:e3:1e:bc:3a:72:fb:76:
bc:e3:30:4b:6b:b4:41:23:78:71:74:25:fe:05:87:
cb:46:9e:96:05:5e:f9:8b:39:42:30:d3:5f:c9:dd:
05:b0:c0:88:8a:18:8d:51:75:22:7a:33:4b:38:77:
ad:13:e4:5b:21:8d:0b:7d:6a:6e:37:26:d1:a3:53:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:85:09:4C:E9:D6:A9:F2:A3:7A:EE:14:DA:1C:F7:E1:5A:69:17
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:71:84:a8:b1:77:53:98:71:41:42:d3:17:fc:8b:ff:13:dd:
9d:69:d3:c2:36:d3:8a:21:ad:33:8c:65:f0:c0:71:ed:05:b1:
8a:87:84:dc:be:fb:9d:ac:dc:1a:d9:74:19:7e:2e:17:a2:9d:
31:49:41:2d:38:30:76:c3:56:10:d8:59:24:b4:09:51:60:f5:
8b:17:69:39:65:27:77:4a:a3:fd:c4:0e:51:44:2f:f6:17:23:
f3:1a:26:58:dc:de:9b:bf:a3:39:b4:26:38:6b:07:25:1e:26:
87:7c:47:6e:cf:a5:b4:45:c5:93:a5:08:f2:20:76:8d:1f:69:
4f:f7:cb:b5:11:6b:81:99:54:19:7c:04:f7:c1:33:62:e4:51:
9b:41:52:6e:fb:3e:35:16:97:26:7a:95:52:fd:d8:10:b5:d3:
57:f0:7a:0d:a1:04:20:62:af:f3:90:1f:13:ef:fe:f7:e3:bc:
b5:c6:40:cb:76:96:87:f7:0b:f3:c2:ab:d3:85:76:15:5d:74:
2c:74:7d:18:16:f3:4f:dc:16:33:95:af:02:47:15:36:76:16:
4a:fd:be:90:df:f0:65:14:f1:50:91:46:12:47:38:c4:d8:ae:
01:c9:ba:98:40:81:47:74:3c:97:53:dc:f6:9e:08:76:9d:21:
94:5d:d5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVn70vBf6j4PhlgJDt1wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjUwNDE3MjAwMDE4WhcNMjUwNDE4MjAwMDE4WjAzMTEwLwYDVQQD
EyhmYWViODUwOTRjZTlkNmE5ZjJhMzdhZWUxNGRhMWNmN2UxNWE2OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhYpRDd6RMsL5K/FjCnLzZaGuLef
V2PqPqyzF4h1YOEKOFH1DGgimSlpPDDwjpR8VjCJx5d3hTyQdtlW1Cr8W+hqG693
/4KQaRqRtgP4STgjAG5yYsTLJN6CQbv1j2+NxFysp3wDdZSbxlGshcyGrvdBA1Mx
6m810V3Gss7AY2A4QOI8S1VDNV5bpepaaZ8FXeap43YrcwI/tTea9SV5LyXZV8QE
WttxCVUkokmkHK26rD1Zr06OxxxYlOMevDpy+3a84zBLa7RBI3hxdCX+BYfLRp6W
BV75izlCMNNfyd0FsMCIihiNUXUiejNLOHetE+RbIY0LfWpuNybRo1PndwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrrhQlM6dap8qN67hTaHPfhWmkXMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXGEqLF3
U5hxQULTF/yL/xPdnWnTwjbTiiGtM4xl8MBx7QWxioeE3L77nazcGtl0GX4uF6Kd
MUlBLTgwdsNWENhZJLQJUWD1ixdpOWUnd0qj/cQOUUQv9hcj8xomWNzem7+jObQm
OGsHJR4mh3xHbs+ltEXFk6UI8iB2jR9pT/fLtRFrgZlUGXwE98EzYuRRm0FSbvs+
NRaXJnqVUv3YELXTV/B6DaEEIGKv85AfE+/+9+O8tcZAy3aWh/cL88Kr04V2FV10
LHR9GBbzT9wWM5WvAkcVNnYWSv2+kN/wZRTxUJFGEkc4xNiuAcm6mECBR3Q8l1Pc
9p4Idp0hlF3Vsg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:08 2025 by rpki-client