Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier: cXUNvvwKV4yXZWR/OTT6TKKUwaqFlujpxmmTVaXSNBs=
Subject key identifier: 8D:D3:44:CE:2D:B2:53:45:A7:20:5A:45:37:41:37:00:A5:11:F6:3D
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 01967F461B1DDCD3CA735E206663F917E3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number: 044F
Signing time: Tue 29 Apr 2025 02:00:22 +0000
Manifest this update: Tue 29 Apr 2025 02:00:22 +0000
Manifest next update: Wed 30 Apr 2025 02:00:22 +0000
Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: yS3CIkqobeMrIsSX22VIkDNORkxdNFpETPfOBNLlly0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1b:1d:dc:d3:ca:73:5e:20:66:63:f9:17:e3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Apr 29 02:00:22 2025 GMT
Not After : Apr 30 02:00:22 2025 GMT
Subject: CN=8dd344ce2db25345a7205a4537413700a511f63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:20:3e:09:13:ad:53:46:16:ce:41:16:ab:
d6:cb:ed:b0:81:6e:70:e7:a9:f2:a7:51:70:c8:8f:
37:12:7b:18:9d:25:44:c7:d0:77:91:e8:ab:e1:cf:
11:91:90:7b:db:b6:f4:df:6e:31:31:4c:42:a6:93:
cd:3b:dd:46:1f:3a:74:c6:9d:90:1f:7e:db:10:d5:
d6:9c:b1:2d:14:36:4e:1b:e7:a9:3b:a3:8c:18:16:
58:e4:43:5d:52:04:71:5e:b9:49:84:89:c9:56:fd:
0f:a0:ec:3f:13:5f:7c:a5:51:2f:e6:41:72:1a:c4:
04:eb:ba:1f:2b:79:2f:fd:d3:ee:c1:f6:59:02:6e:
35:f5:c2:27:e4:b2:42:f2:79:7c:5c:06:24:cd:48:
09:84:ad:46:ef:86:a3:15:2c:a2:7f:6c:d1:4e:48:
d2:55:0a:86:e3:28:63:9a:61:36:9d:25:c9:48:d9:
8b:b6:f9:41:89:97:af:23:f3:d9:e0:bd:9b:49:b9:
75:b7:64:91:3a:60:8e:b9:36:34:a7:e3:83:1c:33:
2c:8e:67:30:2c:cf:82:19:e2:00:50:53:d8:f2:12:
df:a7:31:02:c7:a6:48:72:d9:f6:eb:4e:c5:87:a8:
3a:77:55:06:fc:a8:d8:f1:f4:93:bb:ec:72:bc:b6:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:44:CE:2D:B2:53:45:A7:20:5A:45:37:41:37:00:A5:11:F6:3D
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:ac:37:a4:20:31:a9:4c:1a:8b:77:00:c9:60:0c:01:2c:
44:32:f2:a3:e8:4d:79:76:06:0b:27:57:dd:d1:ce:af:b0:f1:
e4:d7:e7:e1:eb:69:e6:00:5c:62:da:04:25:dc:ad:81:84:87:
54:32:54:16:cd:6d:90:1c:ff:04:67:dc:31:7d:12:20:10:78:
94:6f:2c:f3:64:57:2c:f8:71:13:10:54:cf:07:46:d0:6b:81:
f7:b3:58:1a:d8:01:97:0f:6f:da:d7:06:d4:d6:d6:6e:cd:f4:
52:51:88:77:30:67:9d:62:3c:d0:cb:87:d0:a3:28:1c:c9:1f:
19:c9:18:99:97:74:3b:01:68:3e:a3:2e:d6:f1:72:3d:b9:d0:
e4:8b:8a:8f:1d:cc:9b:56:67:dd:dd:1b:0a:ef:97:bd:a1:33:
f4:49:3b:27:43:1b:07:5b:bb:52:69:cd:dc:28:e5:91:de:eb:
fa:aa:f1:b3:94:1d:7a:91:15:83:b3:4b:63:ee:b2:4c:06:41:
3e:3d:30:e4:f8:b7:34:d4:79:71:ff:18:f7:57:31:e5:70:93:
66:f3:8c:22:21:2c:41:ed:16:bf:c2:ae:5e:4d:d3:23:0a:c5:
7a:9e:cd:b9:21:69:62:1d:b2:85:e5:51:49:70:3c:79:fe:cb:
a2:29:d7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/Rhsd3NPKc14gZmP5F+PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjUwNDI5MDIwMDIyWhcNMjUwNDMwMDIwMDIyWjAzMTEwLwYDVQQD
Eyg4ZGQzNDRjZTJkYjI1MzQ1YTcyMDVhNDUzNzQxMzcwMGE1MTFmNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXogPgkTrVNGFs5BFqvWy+2wgW5w
56nyp1FwyI83EnsYnSVEx9B3keir4c8RkZB727b0324xMUxCppPNO91GHzp0xp2Q
H37bENXWnLEtFDZOG+epO6OMGBZY5ENdUgRxXrlJhInJVv0PoOw/E198pVEv5kFy
GsQE67ofK3kv/dPuwfZZAm419cIn5LJC8nl8XAYkzUgJhK1G74ajFSyif2zRTkjS
VQqG4yhjmmE2nSXJSNmLtvlBiZevI/PZ4L2bSbl1t2SROmCOuTY0p+ODHDMsjmcw
LM+CGeIAUFPY8hLfpzECx6ZIctn2607Fh6g6d1UG/KjY8fSTu+xyvLYVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3TRM4tslNFpyBaRTdBNwClEfY9MB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtysN6Qg
MalMGot3AMlgDAEsRDLyo+hNeXYGCydX3dHOr7Dx5Nfn4etp5gBcYtoEJdytgYSH
VDJUFs1tkBz/BGfcMX0SIBB4lG8s82RXLPhxExBUzwdG0GuB97NYGtgBlw9v2tcG
1NbWbs30UlGIdzBnnWI80MuH0KMoHMkfGckYmZd0OwFoPqMu1vFyPbnQ5IuKjx3M
m1Zn3d0bCu+XvaEz9Ek7J0MbB1u7UmnN3Cjlkd7r+qrxs5QdepEVg7NLY+6yTAZB
Pj0w5Pi3NNR5cf8Y91cx5XCTZvOMIiEsQe0Wv8KuXk3TIwrFep7NuSFpYh2yheVR
SXA8ef7LoinXow==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:01 2025 by rpki-client