Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: pVfqawG2ZyuGiEFeMldMMG7At0PZ1/OdZc7A7KyJ16o=
Subject key identifier: 5F:22:EE:33:D9:28:E7:B0:2D:6D:AC:09:74:CE:BE:06:11:48:E4:B3
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 01974B8D7A2B7F0BE796F73B0495F0EF75A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 18:00:52 +0000
Manifest this update: Sat 07 Jun 2025 18:00:52 +0000
Manifest next update: Sun 08 Jun 2025 18:00:52 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: h++vrFc5cReF+hOmp9ffr1CxEBAe0M5Yz8Mp7ylcQDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:7a:2b:7f:0b:e7:96:f7:3b:04:95:f0:ef:75:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Jun 7 18:00:52 2025 GMT
Not After : Jun 8 18:00:52 2025 GMT
Subject: CN=5f22ee33d928e7b02d6dac0974cebe061148e4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:df:79:40:15:b5:3b:b6:b1:e0:50:a9:5f:
d7:1e:59:5a:24:ae:8a:1b:31:41:4d:85:d7:eb:f5:
e3:5b:08:02:60:61:e9:c6:bf:54:e2:a4:29:1c:ee:
1c:db:3a:14:21:20:48:08:3f:ba:ba:fc:a2:13:21:
f1:51:13:e7:0b:2e:ad:8c:15:b6:be:d8:4b:79:96:
da:8e:bb:3c:77:c7:93:b8:2a:08:9b:61:63:7c:ff:
a8:02:b9:56:36:63:21:70:8f:db:90:39:63:d6:58:
65:b8:8b:69:55:66:5b:16:46:c7:e0:d7:f7:34:87:
48:1b:a3:43:5b:af:0b:f0:af:e9:eb:3d:c7:e4:2e:
2b:f6:ce:4f:84:b7:3a:7b:7a:31:c4:69:ca:19:db:
e0:23:db:9c:c8:59:53:2d:e8:75:b9:9c:09:a8:45:
a8:6b:2f:d3:e0:53:03:3a:b9:ce:d0:69:8b:ff:5b:
84:f5:0b:6e:37:e6:6f:1a:b8:a0:07:11:e5:da:dc:
ac:7d:b2:73:e0:d9:85:4a:9a:3a:89:be:a9:ac:03:
1c:8a:77:d2:8e:72:05:5c:9d:6c:48:95:9f:b2:2d:
29:66:cf:ec:66:b7:dd:72:eb:2c:64:86:f8:9c:a3:
e4:23:51:55:8d:09:a0:41:ad:b1:1e:15:b7:25:af:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:EE:33:D9:28:E7:B0:2D:6D:AC:09:74:CE:BE:06:11:48:E4:B3
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9a:d6:0d:36:c4:c2:83:7c:f1:a9:ea:0d:29:47:ef:f6:b0:
0e:7c:19:df:c6:f7:70:c5:3c:c8:5e:e7:ea:32:5e:95:f7:bb:
fb:8e:60:b0:de:0f:ca:89:00:7c:08:b6:ce:91:47:35:aa:30:
8e:79:dc:58:8e:81:ad:c8:bd:d5:fb:a4:e3:6c:97:8c:9e:7d:
26:f0:0b:49:da:dc:a9:b2:17:69:fd:5c:bb:12:65:32:4f:ed:
70:94:45:ca:e1:bb:b1:b3:01:a5:37:63:6b:54:93:c5:7e:eb:
9b:87:70:14:e7:b4:45:0d:2f:d4:32:19:c2:84:ca:8f:8e:d7:
35:97:6d:51:62:f4:e7:b3:af:26:2c:3b:9a:96:57:37:9a:8b:
54:ee:0e:e9:0b:e2:53:33:19:9a:c7:b2:89:2c:a5:46:44:e6:
39:f4:d7:91:6f:6f:be:f1:88:57:78:8e:07:33:1c:f0:a3:9c:
9f:49:49:4e:ac:5d:39:e9:65:90:cd:06:a9:c9:43:44:09:dd:
d8:1e:62:1e:e1:af:32:e9:66:ef:e7:76:77:65:5e:e0:dc:92:
c4:55:06:23:10:31:6a:5d:4a:35:fc:20:16:c1:92:d4:89:4f:
62:d8:90:94:65:01:68:97:83:68:b5:4d:9f:7b:0e:15:13:53:
29:ad:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:21 2025 by rpki-client