Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
File: rmmejy1W6TrqTaYW2HK2VX1w35c.mft (raw, json)
Hash identifier: mdspVorndIfmgz/DQdGOJOnG1EZ3K7YQ1E0uf9Ua6Xc=
Subject key identifier: 22:18:D3:43:3C:0F:40:1B:F6:57:72:1A:29:F4:8C:92:C3:43:B6:30
Authority key identifier: AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
Certificate issuer: /CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Certificate serial: 01965914CB34E1BA3A2A03FB2FF517C8C7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
Manifest number: 04E4
Signing time: Mon 21 Apr 2025 16:00:57 +0000
Manifest this update: Mon 21 Apr 2025 16:00:57 +0000
Manifest next update: Tue 22 Apr 2025 16:00:57 +0000
Files and hashes: 1: rmmejy1W6TrqTaYW2HK2VX1w35c.crl (hash: kV3vrvqpEcdrEy8KWt99k6vt59uRmaC/h2/+6Au8JkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:cb:34:e1:ba:3a:2a:03:fb:2f:f5:17:c8:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Validity
Not Before: Apr 21 16:00:57 2025 GMT
Not After : Apr 22 16:00:57 2025 GMT
Subject: CN=2218d3433c0f401bf657721a29f48c92c343b630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:86:46:98:5d:ca:3c:d3:b7:a1:6c:9c:c4:
4e:c7:bc:a6:bc:e0:dc:f3:d0:ea:39:87:e5:dc:fb:
38:94:39:29:a9:db:80:e8:63:a3:97:9d:aa:26:4d:
da:1e:98:da:a1:32:43:1c:87:e4:5a:57:8f:f0:3e:
b9:e4:3a:4d:20:3a:4c:1b:0f:9a:77:8f:2c:bc:ee:
d4:59:71:1f:0f:42:14:2c:e9:40:23:7a:6b:ac:4a:
20:b3:c9:e9:36:42:c4:97:7c:ed:0c:f2:9a:7b:7e:
f4:4c:c4:7e:5f:bd:76:51:52:ce:8a:4d:e0:3e:ce:
43:55:c3:f2:0e:68:b9:cc:a9:3f:24:25:28:04:60:
62:1b:87:14:f4:82:37:22:74:19:6b:8b:0f:35:34:
9c:44:3f:b8:f8:6d:9e:f0:6b:8f:6e:ab:7d:a8:b1:
11:5e:a7:a7:cc:b0:7d:eb:d7:9c:6e:98:c7:81:6a:
1a:17:bb:09:d8:ce:0c:40:53:09:76:8f:70:e8:35:
1b:2b:3a:91:7f:fa:fd:cf:01:3c:07:96:e7:71:bc:
ce:da:ec:3b:b2:61:ee:e8:f2:65:b2:68:bc:46:c3:
c0:14:09:0c:a1:20:07:c9:6b:09:60:75:7a:a9:e9:
1a:44:93:6d:e5:17:e7:b0:2c:00:f4:dc:74:4a:48:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:D3:43:3C:0F:40:1B:F6:57:72:1A:29:F4:8C:92:C3:43:B6:30
X509v3 Authority Key Identifier:
keyid:AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d0:17:33:d3:96:d4:dd:a0:9f:fd:9e:ad:bd:4f:3f:dc:81:
0c:de:21:73:8c:05:ad:10:02:2c:93:60:93:4a:d6:74:bd:5c:
c8:db:32:c8:a7:e1:aa:6d:2a:34:1c:33:cb:21:30:8c:0c:47:
66:82:9b:1c:76:6d:62:e9:a6:7a:0e:eb:17:97:b6:f2:17:9e:
8d:6b:b1:98:bb:1d:6c:88:63:ca:8f:7d:c3:3a:01:fb:de:09:
80:8e:5e:a6:07:d4:ea:d3:8f:53:ad:48:a0:e4:93:60:f2:e8:
4c:ca:67:dd:e9:36:16:05:ac:9c:35:81:22:d3:3f:6b:5e:72:
af:cd:de:f4:2d:86:5a:ee:1b:22:8e:85:c8:a1:9f:b0:66:6c:
b9:17:db:14:6f:0d:e3:cb:72:b4:5f:18:bb:8a:00:57:57:04:
1e:9f:54:dd:b5:a2:36:17:16:13:9e:02:34:87:13:59:2c:77:
cb:c4:85:b4:ba:66:4c:aa:16:59:e8:68:c5:8c:5a:21:85:72:
6e:f4:74:52:b4:63:41:ac:ab:fe:5b:b9:da:04:59:e5:ae:b8:
4a:c1:d6:fa:39:ce:57:01:4f:3f:6a:45:46:66:06:68:54:da:
fa:f7:16:4c:be:af:aa:8c:90:79:0c:87:31:df:5a:9b:66:25:
54:a5:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:40 2025 by rpki-client