Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: rWb4n2KtLQjmeL0/PkOwLXJtJHsXKudkurrkCG8Jon8=
Subject key identifier: 0B:34:54:A5:C7:4E:6E:2A:DC:E7:0F:ED:B0:CB:BC:DB:C2:1D:ED:76
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 0194C4D11185D11FE24D06C84B931F0F0F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 04:00:23 +0000
Manifest this update: Sun 02 Feb 2025 04:00:23 +0000
Manifest next update: Mon 03 Feb 2025 04:00:23 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: J5VsKQB4zKj54d6PRoFgcv0mCzjRFu5Xp90rA6n0o1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:11:85:d1:1f:e2:4d:06:c8:4b:93:1f:0f:0f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Feb 2 04:00:23 2025 GMT
Not After : Feb 3 04:00:23 2025 GMT
Subject: CN=0b3454a5c74e6e2adce70fedb0cbbcdbc21ded76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:e6:31:be:4f:c3:05:0e:82:48:03:88:04:
07:1a:e3:75:48:93:61:c8:f5:e9:c3:95:6e:16:91:
b1:d4:71:b0:c3:11:10:42:6e:90:6e:1a:52:f9:cc:
bb:c7:44:91:ab:73:e7:35:c0:42:bf:ee:a3:5a:e8:
6e:85:72:ac:77:99:47:66:c0:c2:ac:ca:9a:1d:32:
a1:e7:4e:6a:00:55:0f:32:cf:bc:26:c5:30:08:1e:
9b:21:e8:84:2f:b1:9d:94:41:33:00:40:67:46:32:
ba:f7:0b:0f:35:b2:ff:e6:7e:10:7b:36:77:ba:55:
dd:89:3e:4e:34:7d:31:b6:d0:9d:21:32:02:a9:e2:
76:77:81:ee:9f:b3:2c:93:cf:9b:df:f0:be:dc:8e:
44:6e:2b:f2:9d:46:a4:49:20:0b:cc:c1:41:cb:73:
42:a7:55:d4:4b:bb:2d:b7:f8:55:2c:17:a6:47:39:
92:f7:20:8d:37:c6:f6:e5:f1:fe:81:c9:61:31:9a:
ca:c5:db:cb:c8:13:34:4d:d9:5e:22:9c:08:75:b6:
e7:b3:8d:50:51:40:a3:26:6c:d9:f7:6e:ac:27:f7:
0a:3e:92:c2:3b:07:d0:f9:0e:11:57:f2:4f:3e:22:
5c:f3:05:c5:1c:8e:a9:c0:72:ba:5e:60:2c:0a:18:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:34:54:A5:C7:4E:6E:2A:DC:E7:0F:ED:B0:CB:BC:DB:C2:1D:ED:76
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:46:e4:db:fc:53:63:54:5a:7b:d5:72:de:3d:68:4e:73:ca:
94:d3:2e:70:c8:cb:0f:3a:d2:05:08:fd:50:c0:ad:d0:cc:93:
64:54:5c:c9:8f:79:56:98:b9:7f:34:44:31:ae:23:46:71:f2:
c7:4e:de:18:bc:9f:42:79:c9:eb:99:46:3d:b0:99:53:22:69:
f8:9e:f9:f7:fe:e4:ef:24:d8:9a:a6:e4:62:97:cf:23:33:f7:
3a:34:5e:b9:0f:f5:9f:1d:1d:d2:f0:1c:59:b3:5e:76:85:42:
60:30:3d:40:0f:fc:83:fd:ea:93:54:e5:d3:7d:dd:64:3f:f2:
1f:a2:66:a3:86:28:80:d8:53:17:1d:85:11:fb:ef:17:bb:ab:
1c:4f:a4:31:d0:10:06:b0:19:ba:3c:ad:3f:59:c1:53:d1:df:
09:5a:7e:02:99:f9:bb:2a:dc:1b:a9:40:0d:d3:15:a9:87:09:
69:fd:bc:58:ee:29:94:66:ff:25:5c:48:ac:c2:0a:17:c0:cc:
01:fc:49:bc:31:ca:da:d0:af:11:80:cf:95:49:76:ae:08:39:
6d:bf:4b:fc:15:6f:94:79:1e:33:64:ea:e2:16:08:25:8e:c9:
c9:11:31:d1:9d:7e:9c:6c:c1:3a:d9:34:b9:7f:ab:06:3f:95:
45:ab:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:24 2025 by rpki-client