Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: 63Pv8PEq6WLjrlbF62sKfRb18/iKhiBDou0ayUp7124=
Subject key identifier: AA:6C:40:8C:66:E8:5A:41:1F:98:86:15:B3:C6:BC:BE:CE:08:C9:6B
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 01974AB19A7DE5CCD308C15928B685185456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 14D4
Signing time: Sat 07 Jun 2025 14:00:42 +0000
Manifest this update: Sat 07 Jun 2025 14:00:42 +0000
Manifest next update: Sun 08 Jun 2025 14:00:42 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 9BSdakmqCwVzNqI6rks3ve48TrlQuRAL3kk+6UHWAE8=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:9a:7d:e5:cc:d3:08:c1:59:28:b6:85:18:54:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Jun 7 14:00:42 2025 GMT
Not After : Jun 8 14:00:42 2025 GMT
Subject: CN=aa6c408c66e85a411f988615b3c6bcbece08c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:5c:8d:f4:6a:f6:2d:f6:23:53:fd:96:dd:
4d:27:36:95:9e:97:0f:47:b8:8f:ac:c6:87:a1:be:
19:34:1e:26:68:71:6e:bf:fc:cb:41:4f:95:e7:a4:
3d:03:8e:b7:ab:23:89:08:c5:eb:62:e2:49:ed:a4:
ca:b0:61:18:6b:88:9b:87:02:cc:00:4e:84:a4:b3:
9f:e8:46:98:35:f0:9b:3e:c8:b2:53:8b:32:62:96:
a9:b2:f7:00:25:77:7e:fe:18:c5:b4:ba:a6:de:16:
e9:5b:53:1d:2c:7c:29:e9:41:0d:32:d5:36:1e:a2:
37:38:d7:5f:a3:56:94:b5:bd:da:1f:c3:a6:a8:eb:
19:63:6a:c4:0c:ac:16:eb:c1:9f:ad:be:fb:44:41:
4e:e0:1e:fe:50:eb:24:45:91:b0:29:fe:d8:e6:59:
0f:56:22:7a:d8:fc:48:8c:b3:bb:5f:1c:a3:cc:db:
c9:56:fe:02:0e:7b:3e:d4:b0:54:65:a6:81:4a:c4:
50:45:ca:36:98:e3:b4:b8:0c:60:15:36:df:4e:00:
2d:a1:6f:d4:a9:73:c4:76:9d:e0:ed:f2:56:27:ad:
7d:5a:65:32:4d:17:06:ab:88:07:58:27:4c:eb:45:
f4:5b:f1:50:75:71:27:6b:dd:29:13:0f:81:6e:c9:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:40:8C:66:E8:5A:41:1F:98:86:15:B3:C6:BC:BE:CE:08:C9:6B
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:18:57:a1:b1:b7:40:a8:34:34:97:93:02:82:1c:9c:a4:
99:01:ba:02:23:83:4a:bb:3a:c9:ef:3e:de:05:bc:f6:36:64:
32:b6:67:c7:1a:f2:ce:99:be:09:9c:4c:77:4b:59:cf:77:1c:
7a:78:ba:3c:d5:8f:b7:55:03:15:28:c2:3f:bd:06:9e:67:b1:
84:cb:cb:2c:9f:33:f0:c4:0b:c0:c9:1b:6b:db:62:4c:ba:c6:
e9:92:24:bf:65:5a:70:b6:5b:a6:a8:e8:00:d7:38:2e:54:ee:
a7:ea:e3:8e:af:67:ba:c1:37:09:53:f4:18:aa:26:85:d6:d9:
31:0f:c3:df:b8:70:28:6a:86:9e:f8:36:28:b3:51:67:8e:ec:
cb:60:db:d5:a0:48:7f:ba:e3:05:10:8a:3b:ff:9c:73:cc:e1:
2f:52:51:f2:84:cd:e1:55:d7:51:73:78:90:93:af:39:85:26:
e3:6f:a5:0b:87:dc:bd:00:18:c6:62:40:c2:9a:39:61:7c:96:
89:c6:cd:21:6a:df:8b:a7:b0:c8:01:de:58:e8:08:bb:51:b3:
c8:58:4c:45:61:86:7f:65:2d:57:7b:21:76:97:24:55:c9:d8:
45:34:34:6a:21:89:5c:83:cb:c0:06:b3:e4:ef:1d:44:21:89:
4c:62:d3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsZp95czTCMFZKLaFGFRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw
NmE1YjMwHhcNMjUwNjA3MTQwMDQyWhcNMjUwNjA4MTQwMDQyWjAzMTEwLwYDVQQD
EyhhYTZjNDA4YzY2ZTg1YTQxMWY5ODg2MTViM2M2YmNiZWNlMDhjOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZZcjfRq9i32I1P9lt1NJzaVnpcP
R7iPrMaHob4ZNB4maHFuv/zLQU+V56Q9A463qyOJCMXrYuJJ7aTKsGEYa4ibhwLM
AE6EpLOf6EaYNfCbPsiyU4syYpapsvcAJXd+/hjFtLqm3hbpW1MdLHwp6UENMtU2
HqI3ONdfo1aUtb3aH8OmqOsZY2rEDKwW68Gfrb77REFO4B7+UOskRZGwKf7Y5lkP
ViJ62PxIjLO7XxyjzNvJVv4CDns+1LBUZaaBSsRQRco2mOO0uAxgFTbfTgAtoW/U
qXPEdp3g7fJWJ619WmUyTRcGq4gHWCdM60X0W/FQdXEna90pEw+BbslT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpsQIxm6FpBH5iGFbPGvL7OCMlrMB8GA1UdIwQY
MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt
YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl
LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/sYV6Gx
t0CoNDSXkwKCHJykmQG6AiODSrs6ye8+3gW89jZkMrZnxxryzpm+CZxMd0tZz3cc
eni6PNWPt1UDFSjCP70GnmexhMvLLJ8z8MQLwMkba9tiTLrG6ZIkv2VacLZbpqjo
ANc4LlTup+rjjq9nusE3CVP0GKomhdbZMQ/D37hwKGqGnvg2KLNRZ47sy2Db1aBI
f7rjBRCKO/+cc8zhL1JR8oTN4VXXUXN4kJOvOYUm42+lC4fcvQAYxmJAwpo5YXyW
icbNIWrfi6ewyAHeWOgIu1GzyFhMRWGGf2UtV3shdpckVcnYRTQ0aiGJXIPLwAaz
5O8dRCGJTGLTIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:22 2025 by rpki-client