Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json)
Hash identifier: y/gspXggY3WwovK19+DbZLpdve1/SLVzPHzej3ONZZo=
Subject key identifier: 8B:01:1B:CE:80:F3:4B:B7:83:66:71:BC:0F:0F:16:83:1A:C6:6A:AA
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 0196797B2B4BD1EE04EE16DC116B39559124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
Manifest number: 1354
Signing time: Sun 27 Apr 2025 23:00:37 +0000
Manifest this update: Sun 27 Apr 2025 23:00:37 +0000
Manifest next update: Mon 28 Apr 2025 23:00:37 +0000
Files and hashes: 1: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (hash: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=)
2: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: sB9VHD7TZIOZLsa3pia494IbqiVjXVHeR/030ZoEk6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:2b:4b:d1:ee:04:ee:16:dc:11:6b:39:55:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Apr 27 23:00:37 2025 GMT
Not After : Apr 28 23:00:37 2025 GMT
Subject: CN=8b011bce80f34bb7836671bc0f0f16831ac66aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:93:03:6b:58:5c:18:8a:3d:20:95:bc:6d:
10:41:8a:88:56:53:32:62:e9:08:e0:a5:c7:63:95:
5b:0e:bb:98:de:ac:30:2b:17:4c:24:b3:bb:bd:5d:
50:9e:88:31:fc:2a:38:23:ae:e3:d1:bc:44:a0:90:
66:36:cb:56:e8:51:6d:6c:1a:fd:1e:0b:57:82:98:
5d:1a:e0:ec:88:17:55:06:9c:fe:7d:4f:25:27:ff:
83:ee:a7:69:7e:6b:c3:cd:c3:41:0a:43:ea:d9:8d:
fd:de:87:2f:c2:c5:38:4a:d0:a8:c0:c1:ac:cd:2e:
f4:b8:54:c6:70:23:6a:ab:5f:6f:4c:e5:ec:52:0a:
1d:1d:2f:5e:75:22:a6:88:ed:37:bc:41:f6:12:ac:
01:e3:63:79:8a:4e:b8:2f:e0:8a:0f:da:6b:ad:07:
c4:06:b5:c2:f2:ef:8a:6f:0b:11:f0:96:15:5c:b6:
5c:de:97:e3:40:06:d4:61:9b:44:95:b0:0e:6a:45:
4d:1a:c2:89:b0:0d:5d:0a:62:d3:ab:7f:1c:83:1a:
c3:0c:56:6f:8b:5e:eb:38:65:ed:5c:e4:3f:c5:ff:
db:92:42:3f:a1:1c:5f:01:a8:5e:55:6b:75:11:43:
20:43:ee:71:85:c4:dc:62:d5:d5:5f:ff:98:78:cc:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:1B:CE:80:F3:4B:B7:83:66:71:BC:0F:0F:16:83:1A:C6:6A:AA
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e9:b2:d0:13:35:c7:f5:f1:bc:27:dc:97:2f:3f:f3:6d:7b:
9a:b2:1c:d1:56:48:83:8b:50:ef:f7:81:4e:56:81:9f:2d:c3:
7e:4c:44:1e:98:a9:8c:36:6e:cf:fe:23:c5:db:bd:8d:a2:ae:
a2:6e:28:4f:df:d1:88:b9:8f:95:da:ba:ec:2d:9b:fe:f8:f4:
4a:44:84:e0:1b:53:9b:e3:98:6d:71:8f:69:26:00:af:01:72:
f0:a2:07:54:04:60:89:78:e3:d3:32:61:83:01:97:e4:61:13:
e6:9d:00:16:f5:03:51:97:ea:96:16:40:e9:38:10:9b:89:33:
79:8d:06:c0:38:67:5f:9f:7f:b8:d6:d3:9b:08:26:96:92:1f:
16:1a:fb:21:8b:13:b4:05:d0:89:95:19:e6:38:e5:72:81:ff:
62:4e:40:12:79:6e:5a:87:99:a4:ea:d2:42:48:7f:59:15:cc:
b9:dc:43:18:4d:cf:e7:a7:c3:38:a2:c8:03:63:18:50:d7:26:
32:fb:02:ca:10:3f:a1:5f:6d:a5:e1:84:76:4d:ee:67:08:9d:
73:09:59:9d:cf:27:3a:c2:c1:82:e3:01:ba:9c:70:62:4a:65:
9b:92:dd:be:0f:b9:05:8b:49:11:40:8a:90:e4:50:3b:38:4f:
f4:d5:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:14:34 2025 by rpki-client