Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier: bc0PtW2D/Ht/Hld99bXm4moAn+VlevhYqO6EYB4ACXc=
Subject key identifier: 24:F3:48:84:F4:30:54:E2:8E:BF:BB:59:0D:44:E7:84:45:FB:24:7F
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 0197B70E731256CAACB0D78E942546FAE593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number: 0599
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 4IrXZ68EPYvzHnH1mFd6/3O9iYyyBrbdE31FdiVo27g=)
2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:73:12:56:ca:ac:b0:d7:8e:94:25:46:fa:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=24f34884f43054e28ebfbb590d44e78445fb247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:8d:25:86:1c:a9:44:6f:fc:0f:c7:07:6e:
3e:7f:c2:4e:e7:23:e4:6a:f3:84:35:f3:31:20:16:
d9:7a:9b:06:2b:b6:e8:78:9a:36:89:c2:3c:74:56:
a1:e2:54:81:7a:3e:16:e7:41:10:7d:62:6a:a9:e1:
99:13:3d:d8:1b:8f:d0:02:e2:b1:be:79:35:50:e8:
d7:fa:ef:6d:5a:82:0b:df:b5:22:4e:3e:5a:64:11:
31:f3:be:a3:5d:84:76:0b:f0:23:97:ea:e2:22:d6:
ba:2c:f9:12:0f:86:91:04:e4:ca:8a:12:21:bd:47:
a3:c8:8d:90:0e:17:43:c3:fa:e5:24:4f:28:70:b5:
a3:79:ec:93:d7:6a:53:02:0e:0e:79:bf:c3:3b:b9:
34:a4:5e:9c:aa:f9:66:b3:5b:ac:21:64:f9:bd:cb:
2e:98:69:9e:54:82:ea:d8:0e:94:2d:ae:a9:f6:b2:
a0:aa:77:79:73:93:4e:07:2e:91:a7:b3:12:f5:bb:
31:3b:ab:59:b4:56:76:b9:da:d5:c0:72:fb:57:42:
9a:5d:00:90:18:dd:2a:17:67:89:53:08:4d:41:88:
a8:76:31:27:3d:3b:65:01:69:e8:10:90:18:95:7c:
56:f1:c1:0c:be:f0:8f:19:1a:39:a2:11:9b:50:18:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:48:84:F4:30:54:E2:8E:BF:BB:59:0D:44:E7:84:45:FB:24:7F
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b1:b9:77:3b:a6:87:77:16:98:65:4b:9b:df:32:98:2e:e1:
b4:42:8b:6d:c2:cf:a9:44:e9:eb:6a:a1:3e:b0:2d:86:34:b0:
30:ec:54:11:f4:e6:65:98:dc:3c:9c:36:29:68:92:8c:b5:72:
65:34:ff:3a:65:3a:ee:8e:68:52:8f:fa:88:60:f5:4f:a3:02:
0e:9e:3d:da:84:28:d7:99:bb:3e:05:b6:d0:86:87:1c:45:19:
87:69:1c:01:ca:6d:ce:e5:a7:64:a1:f1:58:93:53:d7:56:cd:
a0:82:c0:48:3d:db:8d:f9:6f:7c:b7:64:0d:92:97:d7:51:97:
81:37:d6:b3:61:bd:83:7c:06:52:78:4f:90:e8:2c:05:24:57:
a8:2f:3a:3d:ba:75:1a:a9:3f:c0:57:10:e3:d1:f0:ab:12:49:
6b:92:c6:3d:d7:08:c3:97:9e:ac:bc:5d:89:e4:7d:fa:08:16:
07:cf:c0:fe:15:0d:3e:b7:8d:9f:45:4a:c9:9e:37:bd:d6:75:
4f:17:2c:49:4a:65:9a:24:fe:4b:ae:c1:6b:7c:8d:62:b8:45:
75:b0:16:f1:2f:f6:c4:4a:f0:55:de:f9:9c:56:17:0b:96:fb:
a8:da:7b:13:7f:4f:5d:fb:ec:8b:15:cc:52:b8:a5:48:9a:5f:
22:8a:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:47 2025 by rpki-client