Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: QiPTtubjsU9VCI5dRadQuhha2FwJn3l5otKTFLTEQGk=
Subject key identifier: 4E:45:1C:F1:6C:48:A7:8D:62:C1:0D:04:F7:E5:4A:C2:91:1F:6B:56
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019515117EC04E9D29E7558A6E26C9AB2E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 043C
Signing time: Mon 17 Feb 2025 18:00:22 +0000
Manifest this update: Mon 17 Feb 2025 18:00:22 +0000
Manifest next update: Tue 18 Feb 2025 18:00:22 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: BQq3OLPjLemyMFnQ2B1f2Ozt3UZVu8OdNqeHa+y3mbg=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Feb 2025 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:11:7e:c0:4e:9d:29:e7:55:8a:6e:26:c9:ab:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Feb 17 18:00:22 2025 GMT
Not After : Feb 18 18:00:22 2025 GMT
Subject: CN=4e451cf16c48a78d62c10d04f7e54ac2911f6b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:ee:15:16:bd:c2:2b:73:d3:a4:e6:02:32:
14:f0:da:d6:de:d6:bf:58:ca:5d:e3:9d:87:a3:9d:
ee:1d:b4:d8:00:8e:89:69:e5:93:c9:1f:4b:8d:24:
fe:1f:41:b4:48:59:d6:e9:b5:0e:c9:b3:e8:5c:ec:
31:c8:be:ae:8e:25:e3:7b:ef:0a:51:7b:d7:08:98:
b1:a8:74:48:f7:63:c4:6f:01:0f:d0:15:5d:83:11:
ec:31:87:c8:c9:31:06:79:87:4c:e5:77:01:54:e1:
f2:e2:1b:7f:f0:e4:2f:8e:ae:ee:44:0f:ab:54:a8:
7a:d9:6a:3d:73:b6:6a:fb:49:5b:8b:d1:d1:bb:23:
7f:12:e4:18:e9:c9:dd:6a:4c:8e:cd:40:3e:f0:e4:
1c:a3:2c:b8:46:78:38:50:d0:bd:14:42:72:05:8f:
cb:4c:28:07:a8:55:1a:6c:38:de:1a:8a:26:1e:3f:
a3:c2:22:3a:42:bd:77:f1:0e:1b:46:df:c2:98:d1:
a6:2d:aa:4c:e0:76:9e:e6:e3:41:9f:91:d8:82:19:
95:5f:d3:5b:96:f4:67:03:ba:8f:d0:58:12:50:e4:
7f:ec:b5:86:bd:85:d3:41:df:f9:7f:78:91:b2:05:
17:56:50:d8:2c:e3:69:dc:dc:37:34:37:f4:39:34:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:1C:F1:6C:48:A7:8D:62:C1:0D:04:F7:E5:4A:C2:91:1F:6B:56
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cb:3e:2e:e1:8b:d8:eb:b7:d9:ce:87:2a:8c:df:52:73:f8:
1a:43:70:d2:2e:33:80:82:94:a4:db:97:dc:ac:09:e6:c4:c9:
ab:d6:cc:db:ce:0f:49:08:59:f4:dd:3d:22:1a:59:b4:22:36:
e0:d2:25:dc:15:bf:7f:5b:6d:2f:eb:db:9e:65:4a:5c:09:60:
15:9a:32:30:16:8c:88:b5:22:84:51:c8:6f:9d:28:a5:ab:7b:
14:75:04:f9:14:84:58:4d:80:45:6e:47:27:10:4e:f2:43:44:
17:b4:56:f5:a4:8d:7c:0c:c5:15:92:e8:36:7f:e3:6e:d4:28:
e3:1e:81:58:e4:0c:c4:f4:ef:4b:03:ed:3c:63:ea:1a:ca:5b:
37:4a:65:dd:9a:63:69:c9:55:a9:7d:c4:28:b6:29:d6:38:30:
a6:84:18:5d:f8:62:c5:67:a2:06:3a:0f:48:95:aa:53:0c:93:
4c:21:15:21:9c:41:d3:59:86:d0:11:a9:2b:6d:93:1f:2e:14:
64:02:76:a9:6d:5b:da:ff:21:21:52:1d:bc:ca:a3:0b:ae:dd:
ce:76:db:92:b8:7a:9f:c4:5e:4f:36:99:25:24:cf:7d:65:fc:
5f:11:0f:58:6e:0a:c8:31:0f:c8:f7:d4:12:11:c2:17:e9:dc:
b2:59:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:49:41 2025 by rpki-client