Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: djIcL5VzCs8sgylWBzaeduoGBPtwpBvWoUMierdNnws=
Subject key identifier: 1E:54:26:F7:AE:D5:DF:8E:06:CB:3A:20:2D:5B:F1:53:AF:DA:A6:0F
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 0196748BA4BD3FF442F7F9D2022576DE5B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 04F2
Signing time: Sun 27 Apr 2025 00:00:30 +0000
Manifest this update: Sun 27 Apr 2025 00:00:30 +0000
Manifest next update: Mon 28 Apr 2025 00:00:30 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 1LWSx7UtJEJJisQtanMjv75OfRe2RrQIGjvGs5w1Lz0=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a4:bd:3f:f4:42:f7:f9:d2:02:25:76:de:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Apr 27 00:00:30 2025 GMT
Not After : Apr 28 00:00:30 2025 GMT
Subject: CN=1e5426f7aed5df8e06cb3a202d5bf153afdaa60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:c1:c0:47:7d:1f:43:8a:d9:2a:a1:33:fa:
0b:9d:7c:b4:17:a7:ee:3d:be:2a:0f:89:72:d6:c4:
46:2e:11:f6:50:3f:eb:ab:50:ff:33:f5:5f:ad:9b:
5e:71:5c:ef:d7:97:1d:cb:7d:cd:46:89:b9:59:b4:
e8:2d:d1:b7:e3:48:f6:59:77:2a:0d:a2:c8:68:09:
47:b2:38:3f:81:b9:1e:cc:3a:33:72:13:ea:58:1d:
ae:05:5b:36:79:42:ba:63:c7:e3:57:8e:6f:66:e4:
ed:07:7d:d1:a2:72:05:7e:60:6b:f9:9a:b0:10:3e:
f5:81:93:6c:0b:41:6a:bc:06:89:0f:da:6f:ac:3f:
43:59:d4:1d:54:57:33:97:46:c3:70:4d:00:75:7d:
ac:b1:ff:5f:c9:e9:4f:42:20:08:73:d9:d1:98:79:
a6:58:c2:76:3f:69:c2:ec:9b:8e:1a:d8:8e:30:b0:
95:b2:d2:c9:9f:48:9a:09:c7:1f:18:0a:09:d2:d5:
ce:7c:08:40:b1:a8:02:50:64:8f:47:ff:39:c5:06:
95:90:0c:1b:f5:56:4e:06:f5:33:9a:cf:d5:61:1c:
8d:38:a6:ba:91:d9:b3:1f:03:99:0c:1a:ab:53:df:
ba:c5:38:24:05:c3:51:55:e7:ac:71:ad:86:78:2c:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:26:F7:AE:D5:DF:8E:06:CB:3A:20:2D:5B:F1:53:AF:DA:A6:0F
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c4:1b:10:63:96:2e:7b:0a:e2:84:75:b4:8f:16:af:dd:78:
df:c2:0a:e5:06:7b:62:2a:e8:5e:e4:ec:e2:90:e8:00:60:0e:
50:85:01:11:70:77:f8:a4:17:81:6c:7e:04:54:c1:2b:ab:d5:
c8:79:15:26:e9:cf:6e:66:14:a0:1a:01:db:eb:16:50:4f:86:
f5:35:21:2f:29:8c:9f:20:e0:8d:32:43:ff:90:88:3d:69:c7:
e9:1c:bb:0d:db:55:04:0c:38:82:b0:40:9c:60:ae:ec:f9:b5:
69:c9:0f:51:54:aa:77:26:0a:e8:04:cd:7d:20:50:e8:e4:3d:
9e:1b:51:d9:f6:66:76:7f:5c:9d:67:a0:de:29:82:bb:54:9d:
8d:3d:7c:9b:8e:67:c8:82:ed:a1:d9:91:39:e3:d8:78:c8:86:
b8:ae:3a:f1:dd:75:da:a1:9c:57:50:ff:ad:0f:cd:3f:d4:23:
a9:26:9d:ab:2a:72:c8:b7:df:1a:74:31:c8:27:0f:59:a6:b2:
9b:b6:e8:d2:4b:de:7b:14:ca:c4:28:e2:d0:31:41:f8:03:e0:
eb:40:47:ce:2c:4f:70:84:ef:37:bb:a4:fd:75:dc:f8:13:57:
06:ea:d8:0e:1a:c5:04:90:67:db:c8:9c:b1:43:b4:8d:43:55:
52:eb:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:59 2025 by rpki-client