Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: Li/2jF1MYzw00XfeRa/v24nx1psg2KjwmiDwWyGsDcU=
Subject key identifier: 60:2C:1A:B3:59:70:DD:D3:4D:04:EE:F4:D8:E6:DA:C3:7E:E5:33:D9
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 0196526D493C250C10C81170487222F0745A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 09:00:15 +0000
Manifest this update: Sun 20 Apr 2025 09:00:15 +0000
Manifest next update: Mon 21 Apr 2025 09:00:15 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: 3++Za16byeasSLypgUswVfIrNibc/uotKNN4zQB6M8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:49:3c:25:0c:10:c8:11:70:48:72:22:f0:74:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Apr 20 09:00:15 2025 GMT
Not After : Apr 21 09:00:15 2025 GMT
Subject: CN=602c1ab35970ddd34d04eef4d8e6dac37ee533d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:7c:af:04:91:5c:6f:98:1e:46:fa:24:f8:
11:86:34:4f:79:7c:37:ab:ee:0d:15:8a:b5:61:60:
1a:ce:04:24:25:3d:d5:ee:b1:62:58:32:02:55:fd:
1a:c6:73:45:55:07:70:2c:28:30:59:6a:b2:9f:8d:
42:6c:e3:48:6a:1c:08:5e:b1:c3:d7:95:b3:5c:b0:
dc:6a:90:44:c6:55:0f:09:ab:5d:73:3f:f2:ae:c6:
3b:e1:c6:73:ae:f4:a4:33:65:17:d2:54:39:03:54:
40:8b:3a:03:6e:20:3f:ee:93:1f:06:f5:ce:5e:93:
da:e5:6c:1a:29:df:7f:2a:c7:b2:56:83:7b:9f:31:
97:a7:f5:5f:88:9c:e0:35:36:19:a0:72:b1:ad:f0:
d5:ea:06:5c:ef:42:f0:bc:8b:2c:36:c6:9a:d3:0d:
8f:21:c1:be:c1:74:3c:ed:84:c9:13:f3:5b:cb:bd:
91:71:05:d5:b7:18:8d:5e:8a:94:a0:19:77:71:84:
cd:97:50:b5:a9:ea:2b:0e:da:36:69:cc:3b:6c:4c:
54:2d:7b:26:63:cf:d1:60:28:16:b9:38:d7:d3:3c:
1b:dd:14:9a:59:1a:6b:9e:02:d8:af:c6:ca:64:f2:
87:27:04:61:cd:a1:e7:97:95:87:31:70:91:13:5a:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:1A:B3:59:70:DD:D3:4D:04:EE:F4:D8:E6:DA:C3:7E:E5:33:D9
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:73:35:15:c8:d2:81:dc:d4:82:dd:31:01:ed:2d:f3:f2:
fa:55:62:14:46:90:c8:fd:92:5c:18:82:4f:d1:ce:db:8f:e0:
98:98:b3:c3:31:bc:ef:18:1c:93:27:7e:88:6b:4f:10:56:17:
0f:d5:f3:57:49:f4:e6:7e:ab:4d:d4:fe:51:83:48:33:d7:f6:
36:30:f6:2b:60:38:52:85:67:7c:b7:21:44:f9:5f:d7:67:ba:
39:34:4f:3b:96:21:fb:8c:83:ea:ba:8b:8f:c9:3f:40:7c:ce:
7f:ba:57:96:f3:fe:f2:26:37:50:da:13:43:7f:3b:6e:0a:71:
34:55:32:2e:e3:a5:7d:d3:67:e1:f5:92:75:82:49:46:c4:ce:
db:ff:50:6b:fd:b6:ef:6a:8f:2e:19:89:0f:36:64:50:6c:7b:
fd:de:ab:8b:7d:0c:93:64:39:fb:53:94:18:a0:b2:df:79:86:
a8:e5:f2:b0:3a:7b:f0:42:2a:41:e5:13:50:87:2b:07:c4:f9:
d9:76:f8:12:10:9b:ae:08:80:16:6b:b2:fe:6a:a6:58:a5:be:
e8:11:8e:d0:95:39:33:66:cc:0b:da:1b:ba:b0:14:98:89:bb:
0a:58:39:c9:0e:d8:2d:e1:1c:6c:98:b9:20:7e:c3:7a:6e:d0:
ae:47:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:21:40 2025 by rpki-client