Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: mOEgZSJMWDkQdnPtvbg1gxXTD5BaQdpU4+vOBJQ7pEs=
Subject key identifier: 5A:F5:80:C5:62:28:30:2D:37:9D:93:56:5C:F9:FA:A0:BA:30:0C:72
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019511A2FD1FF9DA4B6674D2D85EC37851DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 0E4E
Signing time: Mon 17 Feb 2025 02:00:48 +0000
Manifest this update: Mon 17 Feb 2025 02:00:48 +0000
Manifest next update: Tue 18 Feb 2025 02:00:48 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: DaVrtbq4MMbXcrNyEHJ1QRAi/jW/WJ5AgIFsDES3Ygg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:fd:1f:f9:da:4b:66:74:d2:d8:5e:c3:78:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Feb 17 02:00:48 2025 GMT
Not After : Feb 18 02:00:48 2025 GMT
Subject: CN=5af580c56228302d379d93565cf9faa0ba300c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:7c:07:bf:41:1d:9e:a7:b2:4b:ef:fd:a0:
72:9a:ac:e0:f8:5a:b6:0e:8f:36:e4:d6:a7:9b:4d:
cd:2e:b6:32:46:24:ad:75:4a:f1:ac:e2:3b:f4:fb:
54:79:3f:09:5d:b4:27:a9:e2:41:9a:dc:5c:a5:71:
d3:73:ec:f9:f6:d2:31:e6:b5:59:b6:12:d5:b8:a8:
b0:2a:f8:06:80:32:91:7c:db:69:fd:28:c6:c2:f3:
22:db:fe:9e:c5:42:1f:bf:b2:0e:95:d4:df:54:cc:
74:5b:c0:35:c1:75:50:40:9e:99:74:a5:41:48:1b:
41:ab:04:80:fd:8c:56:72:dc:5a:fc:73:ec:5e:c2:
b8:7c:99:8c:9c:d8:c6:62:f9:3a:36:84:8d:ca:86:
8b:ea:21:03:88:e7:4c:19:63:b7:7b:62:7f:46:c5:
de:27:55:d1:6a:48:2c:39:73:95:42:13:3a:60:b9:
21:b7:16:70:16:dd:9a:b9:f5:8b:0e:07:6e:e9:01:
c3:39:20:19:f3:e6:37:70:ad:56:76:40:7f:c8:af:
21:bc:78:48:d2:f7:b4:07:a4:0c:a5:f5:6a:4e:a3:
aa:ae:b9:b9:c3:2f:97:11:23:e5:b8:fa:f0:bf:30:
fb:a8:8a:f2:ac:08:f7:e0:19:58:e8:c5:89:07:85:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:80:C5:62:28:30:2D:37:9D:93:56:5C:F9:FA:A0:BA:30:0C:72
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0d:b3:66:b0:e0:3c:fe:b2:ba:cf:03:1b:61:32:f6:57:a4:
14:b1:77:ed:18:52:0c:1c:11:69:8f:83:4d:40:53:91:15:a0:
0a:4e:c5:cb:b2:25:73:ad:85:0d:23:14:13:3a:f6:a0:bd:5c:
85:a7:14:2d:a4:82:27:14:22:d2:1a:4b:7b:24:83:22:f4:4e:
24:62:7d:5e:7b:b8:f3:2f:3a:c6:76:70:92:41:3f:66:5f:e6:
67:af:c5:d9:f6:a3:26:48:0d:71:65:f1:f5:9a:48:b3:8f:c9:
81:b0:88:a1:df:00:1c:4e:85:db:13:ef:73:37:12:ab:bf:7c:
c2:e1:0b:35:67:46:52:f5:53:d9:5e:bd:7e:eb:11:82:8e:64:
41:2f:22:5a:1e:f9:db:2e:cc:fe:6c:aa:da:8a:2e:8c:a7:5a:
eb:f3:ce:dd:c1:30:16:b8:66:a6:8d:1a:05:97:28:b8:f1:a1:
bc:7e:9b:60:a8:94:76:0d:b3:87:38:7b:21:ec:ad:cc:9a:2c:
16:5c:81:c4:75:ab:70:5b:dd:4e:e8:21:50:47:84:ea:13:45:
9c:02:1e:25:36:39:39:c3:ef:f4:35:02:58:3d:17:e0:eb:c3:
30:95:f0:d2:6b:08:fa:04:9a:1d:0e:4e:de:9d:64:a9:93:f2:
c1:61:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:34 2025 by rpki-client