Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: fFzxr6ny9JyKmCpZSIp+S89Xm+vtx1Qgk4gQVH6llDc=
Subject key identifier: 8C:81:5D:DC:4C:12:3C:BA:1E:95:A2:F7:5E:B4:54:31:12:E3:1E:2D
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 0196B9DA7053E921410DFB1233A74ADBBF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 1489
Signing time: Sat 10 May 2025 11:00:22 +0000
Manifest this update: Sat 10 May 2025 11:00:22 +0000
Manifest next update: Sun 11 May 2025 11:00:22 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 1x/YlkkLxmXSQx3IEv85najjR7rTJyAHG8I6rhdwOoE=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:70:53:e9:21:41:0d:fb:12:33:a7:4a:db:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: May 10 11:00:22 2025 GMT
Not After : May 11 11:00:22 2025 GMT
Subject: CN=8c815ddc4c123cba1e95a2f75eb4543112e31e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:75:ff:fa:f9:0d:6b:45:50:81:e8:2c:f4:
86:7d:c0:e6:f1:f7:e0:a2:2e:45:f7:2d:aa:69:59:
44:f7:99:b1:45:77:5a:ff:ac:c9:47:ae:e8:c6:44:
ea:77:5d:55:ea:01:3f:12:76:8a:44:fe:9c:16:62:
e6:8a:78:fd:b0:ea:1d:5d:a0:b5:2d:f7:45:a5:45:
35:32:32:d4:e0:3e:d3:c5:13:0c:fa:a5:9d:83:89:
b9:1d:49:5b:3f:7b:96:d6:ad:d2:cd:5e:e3:0c:50:
b0:f9:e2:ed:d0:09:ca:5d:9b:1b:f9:85:72:b7:6d:
29:3f:de:b6:02:b7:da:b2:7d:9f:f2:49:be:0e:3e:
66:33:fd:42:d7:9d:7a:ca:29:c2:6f:d1:64:10:f7:
f4:20:0f:ec:61:97:d2:56:a3:3d:ea:5c:75:35:03:
bf:0c:d3:d5:9b:da:ef:10:9d:5b:e9:7a:fa:40:72:
8a:ef:fe:77:8b:1f:72:75:22:ff:02:5e:ef:8c:90:
93:c8:d2:08:01:da:62:27:52:b4:ae:5a:5d:ce:ff:
b7:65:35:03:44:a5:79:dd:c8:ad:17:85:93:2e:b8:
e1:69:c0:f7:94:b1:8e:32:be:48:9f:03:15:ec:7f:
40:bc:2d:6a:4a:e5:51:28:53:a1:33:04:dc:1a:ae:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:5D:DC:4C:12:3C:BA:1E:95:A2:F7:5E:B4:54:31:12:E3:1E:2D
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:5c:b8:6d:ae:9f:10:04:52:68:31:f5:03:37:bf:76:a0:
91:28:23:5f:d2:ae:5b:63:59:69:83:ea:c5:cd:09:ac:95:c6:
0c:2a:c9:65:13:a9:d6:58:e0:76:32:5b:d8:c2:e7:2c:76:76:
00:57:0b:6f:cc:c6:97:76:bc:cd:28:a8:b1:bf:08:1b:7a:3e:
09:cd:e8:2d:41:f6:f8:57:7a:b5:ce:5c:83:f9:f7:a0:89:68:
34:40:65:a4:22:b3:78:e1:dd:94:dd:73:51:00:24:a7:b2:5f:
b2:fd:bc:7e:28:70:fc:5a:08:b4:59:25:8f:4c:1e:3f:d3:c0:
f7:f5:70:cc:db:29:9a:c7:52:ba:35:fc:bd:e4:fe:1e:d2:03:
89:e1:9e:bb:c0:fa:61:74:b3:08:6d:78:6d:b1:04:b2:e6:8b:
29:b6:6f:1a:9c:cc:7f:ec:3c:32:17:d0:12:63:55:22:09:97:
10:2e:9f:b3:cf:cc:af:0c:90:5b:76:ae:b7:0b:fa:da:09:ec:
c6:37:00:ca:18:3e:65:5d:da:f4:ad:96:47:3c:6c:cf:a3:b1:
ce:ee:d1:67:92:0b:09:41:17:4d:65:7a:f6:33:31:96:c4:e2:
ca:e9:cb:27:56:04:04:af:ef:e8:bb:ae:31:db:f4:c6:ca:a3:
79:f9:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:19:47 2025 by rpki-client