Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File: _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier: glI3G78hp2U/1RHHIyVWv3H0owRp+Z5oDCOJbI3e8a4=
Subject key identifier: 4E:FB:ED:9A:90:8C:71:C1:41:6D:52:9A:D7:E4:29:FE:1B:49:11:F6
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 0196753022A361F57F360EFBACC2DE9DBE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number: 09F3
Signing time: Sun 27 Apr 2025 03:00:10 +0000
Manifest this update: Sun 27 Apr 2025 03:00:10 +0000
Manifest next update: Mon 28 Apr 2025 03:00:10 +0000
Files and hashes: 1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: vz4p9AcSqKENuPUpkKqWmXaMLl97MggaxHeJ3nWPLNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:22:a3:61:f5:7f:36:0e:fb:ac:c2:de:9d:be:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Apr 27 03:00:10 2025 GMT
Not After : Apr 28 03:00:10 2025 GMT
Subject: CN=4efbed9a908c71c1416d529ad7e429fe1b4911f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:39:6c:b4:1b:55:a6:46:2c:3f:02:4b:af:
49:cd:46:83:e6:28:4a:ff:d4:73:80:eb:fc:a1:6c:
9b:58:3c:a7:e9:ac:9c:c0:19:2b:75:a6:34:d9:e2:
39:e5:b8:ab:0a:bc:f2:dd:9b:9d:c2:c9:f2:e1:34:
5e:e2:0b:96:ae:c5:d9:2c:9b:32:be:56:63:b6:a7:
d3:c2:0f:1e:b4:73:9f:0d:55:3b:0e:27:b3:92:94:
e3:9a:3c:cf:c7:36:cd:13:f3:a8:2a:b4:da:90:75:
5f:18:42:88:e2:81:8a:48:a2:d8:6f:1d:2a:9f:c9:
00:4e:a1:45:b0:00:69:63:13:a0:dd:be:33:22:e6:
83:bb:3f:36:d5:9e:a3:f2:01:7e:cf:af:b7:7d:e5:
46:fd:ba:74:87:15:88:2e:c0:1b:0c:07:95:3b:13:
45:21:b2:9e:ce:29:bb:77:dc:3e:50:16:4a:5b:44:
6e:67:cf:56:9c:71:33:85:8d:8f:25:6c:20:00:8e:
ea:8a:5f:a6:1f:a6:66:6e:a3:2c:99:7f:da:66:3c:
66:67:d0:22:23:fb:b5:cb:f7:9a:55:eb:bd:fb:d9:
ee:d7:2f:fd:62:b9:02:22:70:a1:d8:7c:9f:cc:6d:
83:72:65:26:af:02:b2:80:33:0b:72:94:d5:a5:e7:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:ED:9A:90:8C:71:C1:41:6D:52:9A:D7:E4:29:FE:1B:49:11:F6
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:6b:2d:62:b1:7a:74:25:ef:74:f8:e2:5c:88:a7:16:9f:
ca:99:dd:61:1a:8b:7f:9b:3e:33:a5:8d:34:79:aa:3e:6f:d6:
a6:5d:2e:41:b5:5f:8f:21:8f:8c:05:a3:25:f0:df:45:19:85:
3d:48:8c:b8:71:98:a4:ee:10:ea:18:b2:3c:71:c4:f6:c5:48:
b0:0e:ac:69:ec:ae:0b:96:4c:56:19:11:e7:cd:37:0e:62:0c:
0a:1c:da:3d:a2:f6:40:fc:2b:4f:7b:4f:8c:07:2f:e2:6b:12:
49:36:ce:58:f1:ed:44:4d:21:78:1f:91:e9:5f:98:8c:63:f8:
5f:4f:7b:2b:94:3c:ea:1e:17:11:11:1f:43:a1:f6:b0:bc:8a:
0a:42:af:75:43:9b:d0:3e:00:b4:b4:a7:29:e2:00:db:d5:bf:
db:ce:55:2f:bc:57:1e:38:57:82:30:6c:26:95:f5:6f:cb:6f:
74:90:51:28:18:fe:f8:d5:cf:62:d9:5b:1a:6d:9f:5b:b2:35:
aa:c3:7c:d9:7a:70:a1:d1:d6:9f:8a:72:a5:ce:bb:77:8f:ba:
ea:7b:45:0b:e5:d8:54:52:f5:5a:25:30:af:a6:9b:f1:93:e2:
d9:9b:15:07:a4:6a:5e:06:82:ea:b5:dc:2a:79:dc:a3:7d:27:
36:71:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:27 2025 by rpki-client