Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: kja1aRHMyEXowHUdLvDHC6bbnTJZ1FenRLxmLR43FCE=
Subject key identifier: E0:B5:41:7D:7F:39:2E:80:7D:F4:6C:D9:D4:A0:66:68:77:2F:6A:AC
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019510FE17C703616D63FCDB2BD866E9AE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0D1A
Signing time: Sun 16 Feb 2025 23:00:42 +0000
Manifest this update: Sun 16 Feb 2025 23:00:42 +0000
Manifest next update: Mon 17 Feb 2025 23:00:42 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: pnNPtDlx71dhaZD/M828JMGEM2mvxQYk5QE9rZlFLYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:17:c7:03:61:6d:63:fc:db:2b:d8:66:e9:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Feb 16 23:00:42 2025 GMT
Not After : Feb 17 23:00:42 2025 GMT
Subject: CN=e0b5417d7f392e807df46cd9d4a06668772f6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:c2:63:00:0e:5e:c9:62:fb:75:a4:05:86:
46:af:07:b6:58:18:97:42:1a:1e:75:c8:8a:f8:5f:
c2:22:44:76:d7:bf:a8:d4:a5:49:3e:cc:5a:b4:d6:
b6:a0:32:2e:75:f5:ca:3a:ec:af:e8:c5:68:d4:be:
b5:9c:7d:08:8e:30:81:ef:9f:d3:d4:8c:8a:71:b1:
0c:99:55:88:a7:05:16:26:2e:ac:7e:da:a7:4c:de:
10:4d:f6:43:d2:3d:ee:76:30:f7:7c:e0:6c:0c:34:
f7:2d:3c:27:d9:20:d1:d5:6c:3f:8f:8e:cb:fe:95:
ad:27:83:af:39:8f:45:0b:c0:54:43:ef:fe:c0:df:
cd:67:28:64:b9:0e:67:f6:77:09:c5:e5:34:f8:c3:
7a:99:b6:88:56:e6:cc:d9:fd:00:2d:cc:2d:06:85:
2b:90:6e:30:7f:d7:cf:14:98:6a:0d:64:1a:94:4a:
b7:8e:c5:aa:a4:68:cc:f5:cf:42:84:c2:90:1c:c5:
c3:43:45:80:68:79:e0:6d:36:63:95:83:5e:77:cb:
6c:99:86:d1:1b:58:46:48:18:77:cc:f0:50:be:d1:
63:ab:4d:c2:4b:3e:23:72:73:df:c6:fb:42:1e:14:
f0:2c:28:84:5e:95:1e:44:b1:5c:d3:91:86:a3:bd:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:41:7D:7F:39:2E:80:7D:F4:6C:D9:D4:A0:66:68:77:2F:6A:AC
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:03:7c:f9:84:4f:01:ee:73:01:01:9a:15:f8:dc:c8:f6:86:
96:f4:da:dc:e7:6a:b8:a6:aa:0c:79:c1:d7:3a:b7:4a:5b:d8:
0c:b6:4a:4c:82:b3:92:c7:5c:1b:95:d6:ca:41:5a:78:96:5f:
73:ed:35:90:eb:fe:77:a3:3e:c5:99:f7:3c:1b:45:ba:a2:0c:
10:95:72:aa:cf:27:85:a8:a1:7e:23:c9:5d:56:ec:61:db:d3:
d8:eb:a4:c6:41:c6:d6:93:42:84:45:05:fc:4c:7e:00:a7:22:
f7:73:03:05:f1:87:98:4c:00:93:28:61:bc:bb:1b:b8:ab:b3:
d6:9c:ab:e9:21:a3:3d:23:a1:cf:bc:c9:7c:e7:45:5b:22:02:
d7:09:f9:62:e7:5e:b4:a4:82:56:4b:7b:8b:99:cb:09:08:d2:
e1:74:ba:4f:b6:2f:60:89:33:b0:68:70:83:c2:e0:99:c1:5b:
4c:8e:11:a2:6e:99:b0:88:77:66:d8:79:94:ab:ad:b0:34:b7:
92:0c:87:68:c7:03:ed:4b:5d:2f:b4:33:c8:3d:64:f8:8c:f7:
2a:f3:f6:91:9c:1c:50:62:95:e9:0d:fd:d2:b6:29:4f:79:60:
97:e1:90:3e:aa:18:51:d2:b5:71:40:34:9b:b9:ea:f9:bf:73:
4e:69:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:55 2025 by rpki-client