Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: /WhSEdGIeq7/C3PIwFeeuI5RiDdd90kit2WGy508KEM=
Subject key identifier: 65:BA:ED:7C:EE:D8:04:0B:25:C1:EA:EA:CC:79:A3:CA:33:D1:F0:45
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 01958C96DAAB10A41DAC3B2CEE278A3A06B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0D5A
Signing time: Wed 12 Mar 2025 23:00:51 +0000
Manifest this update: Wed 12 Mar 2025 23:00:51 +0000
Manifest next update: Thu 13 Mar 2025 23:00:51 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: lW0/EG59OUVUC6yOq3mwhQend89B4jX29sAoHtwas4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:da:ab:10:a4:1d:ac:3b:2c:ee:27:8a:3a:06:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Mar 12 23:00:51 2025 GMT
Not After : Mar 13 23:00:51 2025 GMT
Subject: CN=65baed7ceed8040b25c1eaeacc79a3ca33d1f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:81:96:a9:3e:38:e3:f0:4b:34:39:75:a4:
7e:4a:d8:8a:c6:83:c4:9f:d2:a1:55:5f:9f:d0:7b:
99:63:a1:dc:03:48:53:74:7a:88:eb:99:12:ef:9f:
90:f9:8d:7e:0f:75:96:28:ce:4e:7a:56:29:49:63:
f6:9f:c1:c4:9e:68:a6:2f:e9:1a:a0:41:4a:9f:14:
3f:e9:fb:b6:d8:bb:ba:3a:3b:9d:3d:32:68:77:e6:
db:e2:50:9c:e1:ca:16:02:16:82:0f:c8:b4:cd:5a:
03:fc:a3:82:12:7a:47:70:a8:21:9d:50:b4:b9:e7:
3a:94:40:9a:41:e2:5f:25:6a:b2:8a:5f:c0:d9:59:
a0:12:a6:7e:09:82:55:6e:89:f2:75:aa:71:6d:14:
85:42:1c:6f:38:71:e8:6b:b5:78:3d:07:fa:ef:50:
e0:54:50:88:d4:5f:3b:1b:ae:cd:3d:db:16:1b:4c:
5b:b1:c5:f6:1d:7a:68:ed:0d:91:4a:3e:c4:b1:24:
aa:13:a0:93:52:dc:c1:d8:7e:d9:57:0b:21:0d:6f:
d1:e8:1a:79:19:b7:86:cd:fa:36:eb:aa:3c:6d:24:
24:1f:88:bf:70:6a:87:69:63:49:8f:6a:18:66:b4:
8b:07:f1:03:42:75:45:ba:32:41:9b:83:34:59:cd:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:ED:7C:EE:D8:04:0B:25:C1:EA:EA:CC:79:A3:CA:33:D1:F0:45
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:82:78:e4:31:e2:cd:3d:82:a1:5d:d7:eb:ca:00:8e:7a:
92:13:5f:87:8b:a1:9f:76:e7:ae:5a:7a:ed:b6:f2:39:ef:e5:
b5:e0:ac:27:55:80:c2:7b:5c:ce:4d:dc:5d:9a:e8:ca:8f:ca:
af:31:53:e8:c7:1a:fa:85:a8:50:1f:b5:dd:85:7e:58:38:6a:
8c:b4:ed:5b:cd:18:20:d7:8c:80:96:51:4c:c0:0a:61:ef:ea:
b1:ef:d3:29:ac:83:95:be:c0:2d:99:94:e6:34:0a:ba:43:0f:
ff:f6:7a:8b:09:72:82:6f:b2:3c:8c:fa:a9:25:77:dd:a9:c3:
40:90:90:ce:44:5b:06:db:4f:55:ee:1a:73:61:ab:69:c5:87:
c5:20:1c:40:bf:3b:29:3e:a6:58:fd:d6:2d:1c:1c:95:1c:6b:
b5:52:cf:b6:5e:2f:d6:67:1c:e8:47:e1:b4:c6:d0:54:c6:2d:
bb:da:4e:49:91:7b:13:e0:0f:6e:2b:2f:6f:fe:06:fa:c0:a8:
1b:53:03:cd:4e:7d:6c:56:ff:e8:44:39:6b:52:18:27:c7:b7:
08:0f:6a:e7:79:7b:f3:0e:84:be:68:6b:55:35:3b:7b:a4:1c:
21:52:ab:e9:8c:c3:d9:64:65:a2:12:28:ab:4e:bb:0a:61:97:
c1:d5:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:58 2025 by rpki-client