Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: x6UIcSNTKBTSZaxR03kel9dpEX/rAhW2Q98IJOqr+dg=
Subject key identifier: 95:F7:35:AC:1F:E0:32:E0:C7:4E:9F:67:1F:5B:08:79:E6:73:D7:3E
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019511352AF6FA0708F5014E9566266EBB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0882
Signing time: Mon 17 Feb 2025 00:00:51 +0000
Manifest this update: Mon 17 Feb 2025 00:00:51 +0000
Manifest next update: Tue 18 Feb 2025 00:00:51 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: KTI7lXWLK2+IOuWw3B/84kSt+XKrDMdKYuy4XvPf6V4=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:2a:f6:fa:07:08:f5:01:4e:95:66:26:6e:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Feb 17 00:00:51 2025 GMT
Not After : Feb 18 00:00:51 2025 GMT
Subject: CN=95f735ac1fe032e0c74e9f671f5b0879e673d73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:2a:8c:c8:7d:a4:48:48:39:13:58:81:f2:
b4:d0:5f:66:7b:32:88:79:db:3e:fb:10:8e:92:af:
dc:a1:7b:d9:a4:84:2c:c1:b3:9c:e5:c9:d6:97:4c:
75:2d:7d:c7:c0:96:9a:a0:6a:76:25:18:d8:5d:b7:
62:e5:00:a1:b1:57:a0:b9:c0:7d:72:8d:5d:c2:37:
93:2e:40:9f:b2:49:58:0c:8e:4f:f3:88:1e:b7:69:
07:24:bf:b2:60:19:76:b3:f9:62:dc:97:db:0d:ff:
a5:1e:9f:ef:47:17:83:66:41:cb:ea:39:00:2c:8a:
2f:dd:a5:b5:70:1f:7e:3d:67:4f:84:60:7e:39:1f:
23:01:0a:01:43:3a:17:7d:e5:18:83:52:05:dc:a4:
8c:dd:71:10:3d:06:88:c8:71:7d:6f:c3:09:5a:b9:
78:81:38:71:61:82:be:5d:cc:2e:e0:b9:1c:0e:4e:
44:dc:25:cd:8b:54:c5:fd:f2:2c:07:84:56:9e:2b:
96:34:d6:6c:4f:01:c9:d6:31:84:b4:b9:79:c5:d5:
1e:7e:1d:fa:fd:9b:a6:03:7a:01:fc:63:a3:8d:60:
72:d3:6b:d8:e4:d5:82:56:ad:c5:1a:20:f1:16:a9:
b5:3e:b6:92:90:d3:54:64:4b:69:25:b9:75:e9:c8:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:35:AC:1F:E0:32:E0:C7:4E:9F:67:1F:5B:08:79:E6:73:D7:3E
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:a2:de:f9:b3:83:ea:55:4b:2f:ee:22:54:b7:66:6f:df:
ed:a1:a1:e5:e1:ec:de:3a:7c:74:c5:cb:ea:4c:b3:88:a1:ab:
24:04:d1:31:25:12:70:0f:73:e8:04:9b:27:19:f0:e7:0e:d5:
aa:35:97:5c:68:f3:cd:67:d2:7e:83:98:e1:55:6c:00:c7:0a:
76:28:34:ed:82:87:01:a5:6f:81:8b:20:c3:21:0c:af:1f:f0:
4e:fd:f9:74:6c:e5:12:3b:0c:53:ba:cc:79:58:7b:26:83:1c:
d0:df:e2:31:8c:12:45:68:4b:a0:3c:ab:3d:79:fb:a7:07:ac:
89:31:aa:8f:53:4d:de:3f:0f:64:6d:6e:6f:e5:bb:d0:d3:35:
6b:4b:08:d4:4a:20:cb:70:db:5f:a3:f8:82:23:d3:a9:43:7c:
0b:96:15:d9:7d:10:af:81:9d:5a:62:50:3d:27:c1:91:e5:c5:
e8:f7:f6:05:13:5f:02:36:50:f2:38:b0:8d:63:5f:3a:f4:e2:
6c:b5:81:38:32:54:1c:7c:18:03:e4:2e:85:29:47:99:16:82:
43:ab:cd:16:b6:e6:c5:a5:af:08:12:04:3d:da:4d:f9:cf:47:
c5:50:13:0c:23:62:fb:6d:1f:29:c5:3b:a8:d8:b7:f0:1f:26:
47:09:8a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:44 2025 by rpki-client