Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: Nld8HzNHD+WaSC4fUgl/5Lg0CcJ7FihEf3Kc7h+1N6w=
Subject key identifier: AF:A8:1A:E1:13:55:60:71:A2:92:CD:82:14:FD:4F:E6:8E:02:09:76
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 01964A7DA6B7E6E476CA60BFFD9611FA914F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 0EF0
Signing time: Fri 18 Apr 2025 20:01:10 +0000
Manifest this update: Fri 18 Apr 2025 20:01:10 +0000
Manifest next update: Sat 19 Apr 2025 20:01:10 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: ZxMLxZFoR6W/1nll+4le+77keYSrjZLTQ1FViKVkIJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:a6:b7:e6:e4:76:ca:60:bf:fd:96:11:fa:91:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Apr 18 20:01:10 2025 GMT
Not After : Apr 19 20:01:10 2025 GMT
Subject: CN=afa81ae113556071a292cd8214fd4fe68e020976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:f2:48:cd:26:1d:69:0e:e5:e9:96:bf:06:
e9:6c:8c:88:45:83:f8:1a:ad:1f:01:02:d4:13:73:
48:c1:be:98:72:62:b3:f4:f1:13:94:67:f1:46:44:
59:38:f9:20:d0:be:e8:ac:a3:13:01:23:2a:ba:e2:
bd:b2:ca:2e:42:e5:5c:b5:54:f8:51:22:9e:12:16:
fa:91:74:1c:3e:2d:b9:89:0a:cf:83:fa:4c:1f:62:
ab:bb:fc:ce:da:73:e6:80:0a:09:38:c6:10:8c:e9:
9b:4d:b6:82:f5:94:24:e0:d8:dc:93:35:fd:b5:00:
e7:8c:71:f6:d3:77:c0:9d:1c:10:26:d4:85:ae:fb:
fa:97:c7:cd:58:00:3c:d3:a1:07:ad:12:e0:f5:eb:
99:8e:b7:69:98:d5:a5:d0:a2:29:ed:cd:54:16:b3:
89:dc:97:6f:4b:e5:db:47:77:8d:b9:aa:72:3a:cd:
cb:6a:43:43:b8:12:4c:43:cb:cd:fb:a5:c1:0d:f1:
85:b4:b1:f5:93:fb:78:80:48:88:b4:d4:00:c6:20:
b6:21:c2:5c:ca:f2:6d:65:92:70:63:6f:59:28:54:
4a:b8:46:90:14:5b:8d:c5:7f:fc:2c:2c:57:5e:1c:
28:63:61:ae:a3:d0:f4:da:d6:e4:1b:9f:8e:0f:3c:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:1A:E1:13:55:60:71:A2:92:CD:82:14:FD:4F:E6:8E:02:09:76
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:44:95:f2:d4:f1:1c:c4:0f:f0:e1:dd:a7:50:7c:5e:c2:
02:9a:ff:b4:09:8a:3a:28:7d:f0:99:a5:34:fd:14:70:a2:cc:
c3:ac:ed:fb:9c:aa:62:b5:45:09:27:e5:29:46:6a:67:89:fa:
70:b8:41:05:e7:a6:f9:9a:19:58:c5:82:64:ed:9d:0b:83:d4:
71:ac:39:d1:62:ef:2c:10:17:60:3f:61:86:c4:9a:81:2f:01:
75:1d:dc:48:d7:a2:f6:67:f8:40:a8:03:af:52:3b:37:4e:74:
69:a3:97:99:b1:32:b7:f6:05:70:b1:b6:6d:15:62:16:0a:d3:
ab:d8:5e:83:71:e6:86:ff:ea:6b:11:61:e7:cd:1b:e1:26:84:
f7:c0:18:df:0b:9f:71:a3:5b:0b:f5:e2:97:70:2b:be:0d:89:
07:2e:b5:c8:cc:3e:2a:d6:ab:c2:71:5f:1b:e0:d4:d2:3e:df:
db:f6:89:ed:4b:5e:56:4d:7d:d1:4f:d6:ad:cf:2e:8f:cd:d3:
fc:fb:7b:e8:aa:43:06:e6:2c:68:34:00:5c:e6:d8:a2:0a:60:
ce:d7:c8:7f:54:70:31:56:d6:d1:c4:79:5a:6b:1e:3a:12:a1:
0d:5a:3b:8c:89:6e:ec:21:fc:56:5e:bb:cf:cb:19:e5:39:46:
11:e0:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:35 2025 by rpki-client