Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File: EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier: rwuMs5CcNiJaV5eRuhJ+zodOwA+BGakphonzEqeRiPc=
Subject key identifier: 3A:A9:13:84:89:77:00:8C:37:10:06:FF:C8:3A:3A:71:B9:45:29:B9
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer: /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial: 019674C29EA1609452268870468FE304FD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number: 121D
Signing time: Sun 27 Apr 2025 01:00:33 +0000
Manifest this update: Sun 27 Apr 2025 01:00:33 +0000
Manifest next update: Mon 28 Apr 2025 01:00:33 +0000
Files and hashes: 1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: s02EDiNvv/BZoEWySCDlNM0qmuoVzWrnASjiYVQee54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:9e:a1:60:94:52:26:88:70:46:8f:e3:04:fd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Validity
Not Before: Apr 27 01:00:33 2025 GMT
Not After : Apr 28 01:00:33 2025 GMT
Subject: CN=3aa913848977008c371006ffc83a3a71b94529b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:61:57:ec:ed:2d:3e:5f:f3:89:70:21:09:
30:19:13:32:af:40:26:14:88:88:9e:ea:57:91:43:
f0:a3:67:d9:a6:bf:f7:ec:3d:b9:bb:0b:f0:fb:6a:
86:1a:c8:11:6a:dd:63:31:b7:2f:35:13:07:8d:be:
98:eb:72:8e:af:75:6b:e1:e2:6e:ae:a2:53:2f:8a:
8f:5f:e4:d7:60:44:5d:27:11:3e:49:ba:c6:69:c8:
42:49:28:19:66:e7:58:7f:04:fa:45:06:4b:7d:81:
d5:f6:12:2a:d8:9e:cf:8f:27:f9:6b:b4:a5:d5:8c:
d3:c8:04:2b:2f:bd:bb:7e:aa:69:1b:9f:ed:15:a4:
48:3b:57:2c:3f:64:c0:61:22:55:ad:d0:d7:30:9a:
f0:6f:fb:a9:a9:da:24:d6:83:c6:a7:8b:c0:dc:99:
4f:1b:31:1e:49:c1:0b:c2:3d:2e:7a:1b:94:71:b6:
3d:cc:79:24:49:d7:1e:82:26:23:48:b4:88:67:98:
7a:2c:82:36:fc:36:96:79:31:0f:10:31:38:a5:b6:
74:e6:62:e7:16:86:f8:ee:e7:c7:c9:d3:cb:2c:4e:
ef:2b:ab:38:72:b8:17:4e:da:58:ba:0b:59:e7:88:
53:74:d6:d3:00:e4:ef:fa:c0:45:41:99:0d:27:06:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:13:84:89:77:00:8C:37:10:06:FF:C8:3A:3A:71:B9:45:29:B9
X509v3 Authority Key Identifier:
keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:3a:0f:e0:a2:bd:a9:88:20:6b:3b:15:06:9c:ed:29:1b:
73:99:d7:90:fd:7b:0b:73:8a:2b:b9:d9:01:f6:17:81:9e:c1:
72:ec:fb:1b:39:71:12:df:74:92:de:7c:42:3b:1e:f7:96:6d:
46:d7:7b:6c:6f:70:54:16:45:8a:44:c9:da:1b:85:87:77:03:
26:12:85:e3:67:01:f1:0f:75:a7:63:df:45:ec:13:53:a4:1f:
f5:a0:66:42:76:60:eb:a2:b1:e7:76:8e:d5:13:c5:e3:1b:d6:
54:dd:e6:37:2b:5d:3b:8a:19:3a:8d:4e:7f:d5:8d:7d:f1:79:
21:71:7f:cb:7d:7c:8d:10:69:6f:db:ae:97:1e:a5:f9:14:d4:
e0:13:3a:cf:ce:5e:f9:da:df:f7:57:88:e6:9a:fd:50:28:04:
19:67:db:82:1e:de:b0:ef:ce:e1:65:5e:a1:1c:16:b5:75:52:
ab:fb:e6:89:33:2b:8c:17:de:0c:cd:34:6c:03:33:fc:37:74:
31:2c:7c:65:3a:1c:1a:dd:a7:14:18:3b:b8:ec:77:30:13:7e:
eb:d2:1a:17:09:ac:7e:29:d2:88:b8:e3:e6:c8:20:67:09:13:
49:18:e3:e1:53:67:49:13:3b:5e:93:ac:34:d7:0f:52:39:38:
3f:ba:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:40 2025 by rpki-client