Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: UmF1HXauJle0Ciu7VBaChJJca3TOB7yDUe5D1tf0188=
Subject key identifier: 79:89:A3:B4:92:E0:80:4A:3F:B3:DD:76:95:E8:40:8E:E2:23:5A:34
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 01967FEABB111289F11BCC97DD838B092C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 146B
Signing time: Tue 29 Apr 2025 05:00:11 +0000
Manifest this update: Tue 29 Apr 2025 05:00:11 +0000
Manifest next update: Wed 30 Apr 2025 05:00:11 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: wc2XU6c6Ryj5BiJm35vr0XXIYk0yFE9Y93L46unt9QE=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:bb:11:12:89:f1:1b:cc:97:dd:83:8b:09:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Apr 29 05:00:11 2025 GMT
Not After : Apr 30 05:00:11 2025 GMT
Subject: CN=7989a3b492e0804a3fb3dd7695e8408ee2235a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:42:cf:0c:70:9b:c3:2b:ff:18:27:66:db:
5d:9b:84:a2:f1:65:06:11:eb:d3:8d:c2:26:c5:29:
0a:31:f5:44:34:3f:f8:9d:86:27:5f:f5:ab:37:e6:
5d:53:ca:c7:5f:2f:81:69:17:f0:a5:7f:68:6a:ff:
02:10:3c:b3:76:fd:c7:38:19:71:1d:31:67:72:7d:
f1:4c:81:6a:46:08:56:25:1a:6a:9e:26:0f:7c:1f:
b1:eb:15:3a:ad:c6:26:c9:fc:34:c4:6e:37:81:29:
7a:7b:7f:9d:85:e8:0e:50:f5:3c:1d:51:38:88:fc:
97:d4:82:f2:1b:e5:50:54:cb:3b:4e:be:6e:a3:e2:
6e:2c:18:d8:77:88:d9:38:64:10:24:67:5b:81:e9:
39:7d:15:ee:57:c6:b1:34:4c:42:31:03:a7:33:3d:
64:cc:00:4b:35:4c:99:53:c5:a7:0c:60:eb:28:48:
e6:e3:d5:8f:62:f4:61:6e:9f:77:e6:55:eb:5c:06:
ae:93:cf:78:65:b8:c1:71:4b:9a:3c:87:b0:63:6a:
d8:a3:66:8b:0f:ea:14:ce:db:92:35:bc:b1:e7:bc:
a0:5e:6f:b8:84:f0:0d:0e:5d:90:1a:95:de:b8:c6:
4d:f0:5a:a6:5f:8e:68:43:79:25:30:ea:f3:5d:c1:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:A3:B4:92:E0:80:4A:3F:B3:DD:76:95:E8:40:8E:E2:23:5A:34
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:37:42:2e:61:52:6b:07:4d:23:4f:eb:a1:6a:ca:7b:7c:
6e:70:87:e4:9c:fd:f9:b1:ca:44:b3:61:25:bd:44:35:2a:b9:
27:36:5f:16:a6:cb:40:7d:9f:51:b7:88:04:d3:34:4c:18:a1:
b7:ee:41:d9:a2:53:d0:a1:ac:f0:ba:94:21:5b:13:c0:79:78:
79:89:c2:38:e6:b5:ab:0a:30:a6:b4:3d:ca:84:21:31:0f:a6:
5d:ee:1b:e8:68:43:01:5c:48:eb:b8:86:73:cc:7c:0f:4b:52:
45:5e:08:1d:ad:1a:7c:14:19:c2:a6:f7:a1:b5:aa:65:99:b2:
87:55:27:93:ad:9d:63:1a:04:a5:d4:e4:3d:88:d5:70:6a:a8:
34:fc:a1:0a:80:59:cc:95:66:07:13:b1:ef:40:d3:09:ed:bd:
8f:80:e5:cf:a9:18:bc:0e:3f:37:8e:87:fb:2a:24:b5:35:a7:
8c:e4:4e:7b:8d:06:9a:a3:9d:5b:3e:93:f1:ce:3c:3b:b4:6b:
cc:77:0e:f3:28:e8:4a:1a:3a:74:e5:e4:1a:6f:6c:20:53:80:
7a:17:19:94:40:f8:21:a7:49:1a:90:12:a2:f5:5c:45:7d:ef:
bf:4f:1d:fe:3f:88:62:dd:21:ea:dd:b3:9f:f1:44:ed:bb:90:
ef:f1:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:39 2025 by rpki-client