Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: AakAZBbYaQ/WdXMKDhaNe8G+TPQWrcJ7k7W3EYlUp6I=
Subject key identifier: D4:2E:58:C3:A2:83:61:4F:8F:86:FA:6F:3C:D8:CE:1B:6B:C4:13:AB
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0194C42C9D8EC01B002D5CC8DF66967FAADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 01:00:45 +0000
Manifest this update: Sun 02 Feb 2025 01:00:45 +0000
Manifest next update: Mon 03 Feb 2025 01:00:45 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: qX7Cd3wQSIih0lOwwMc0XjfCDJeTi/obvQksaDwiy6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:9d:8e:c0:1b:00:2d:5c:c8:df:66:96:7f:aa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Feb 2 01:00:45 2025 GMT
Not After : Feb 3 01:00:45 2025 GMT
Subject: CN=d42e58c3a283614f8f86fa6f3cd8ce1b6bc413ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:c8:3c:8f:5f:84:0e:8d:3b:14:09:f5:0d:
80:6a:ef:da:ae:78:bd:65:a6:81:d4:00:37:d7:5f:
dc:83:ab:bb:a6:02:77:9c:1b:76:b8:37:d8:71:60:
e3:5b:e0:fa:fa:92:46:f6:42:d8:6a:d5:57:2b:70:
97:48:29:d4:94:53:42:5e:26:d7:ec:39:22:86:72:
39:1c:10:f7:62:36:4c:17:77:27:f7:2f:9f:d2:8c:
68:ce:f3:b2:bd:a3:dc:7b:1b:66:d7:30:42:3c:b7:
ec:4a:13:0b:0e:cd:3e:ea:93:8e:b0:8e:9c:6a:e4:
10:9f:85:ee:58:3c:b7:6e:dc:82:91:c2:0d:b4:0e:
c4:bf:05:bf:5c:dc:90:5f:07:59:49:7d:c7:22:6c:
d7:61:7f:36:1b:f3:a6:6f:0e:e3:a5:54:48:a4:df:
a1:78:c7:76:39:e1:3a:a0:15:47:d5:0b:2e:2a:8c:
29:b1:cb:bc:dd:d8:da:68:e4:38:0d:44:3a:ed:0d:
91:e2:c5:26:6d:8c:e1:72:aa:ca:22:99:f9:8e:b0:
d0:7b:03:e9:e4:a2:80:a3:51:91:15:3e:38:ad:bf:
7a:db:86:56:e7:aa:e6:22:c9:d7:29:c8:62:56:42:
91:bf:ba:a0:07:ab:f9:90:f5:c4:dc:a5:18:7b:59:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:58:C3:A2:83:61:4F:8F:86:FA:6F:3C:D8:CE:1B:6B:C4:13:AB
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:b7:ad:03:c8:4a:03:4e:c2:db:d0:7e:b9:d0:cd:3a:be:
0c:15:ff:d3:a9:c8:75:ac:e0:3e:63:d9:e5:7d:c5:81:e6:7f:
dc:a4:9f:00:6d:8d:0f:0a:0c:d6:ac:bc:1a:f2:2f:e8:fd:6f:
4e:59:b3:f2:f4:ba:ad:cf:42:63:b1:7b:e2:c6:81:84:9a:60:
ee:de:ed:f6:5a:3b:96:2e:b6:0d:4f:19:91:86:f2:80:49:bf:
70:39:cc:2d:a2:e3:82:c3:94:ea:da:0c:ed:4b:f2:1f:26:09:
04:7e:e2:b7:5d:7d:05:fa:ef:49:d7:6f:bf:34:5d:24:5c:87:
5e:b2:ff:a4:01:1b:d2:0d:28:e0:0b:b9:f7:4d:5f:9d:84:35:
9d:c1:57:d8:6f:80:d2:14:ba:fc:db:0d:45:d8:c0:c4:af:15:
f5:1f:18:b0:8d:c0:a1:14:7a:0e:fb:f1:7a:33:f1:e0:89:56:
61:33:ca:8f:92:12:51:8a:32:3f:07:3d:b2:49:50:5c:06:1a:
5c:13:9d:eb:14:25:95:09:db:d3:80:49:b4:4a:c6:15:a8:2c:
b6:bd:35:45:c6:5d:43:e4:34:b0:e2:f5:90:35:2c:6c:15:a0:
fe:5b:94:59:3e:d6:02:2b:0b:19:9e:bd:12:16:9f:6e:7b:7f:
23:fc:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:08 2025 by rpki-client