Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: yjMsvRNXKnbJw8pCLiEXmYhLJFT8pBqVN69Qo6cXcis=
Subject key identifier: 02:E3:A9:8D:C0:BE:33:B5:71:32:7A:3F:3D:F0:96:71:0F:28:EB:8A
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 0194C3F5A973CEC6FFA6BF779BEA5D914C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 45
Signing time: Sun 02 Feb 2025 00:00:44 +0000
Manifest this update: Sun 02 Feb 2025 00:00:44 +0000
Manifest next update: Mon 03 Feb 2025 00:00:44 +0000
Files and hashes: 1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: eF9NHdVv20FncEp4YNWef/txcCdqILW35oKXC8rNSEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a9:73:ce:c6:ff:a6:bf:77:9b:ea:5d:91:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Feb 2 00:00:44 2025 GMT
Not After : Feb 3 00:00:44 2025 GMT
Subject: CN=02e3a98dc0be33b571327a3f3df096710f28eb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:fd:53:de:f8:16:16:ad:66:97:9b:75:05:
3c:34:df:05:f5:ff:41:ac:dc:14:db:54:39:d3:15:
81:01:9e:8e:26:4e:01:43:c3:d3:d4:d4:c1:5c:9d:
9f:e6:ab:9e:54:3b:6a:4b:d2:36:69:d5:e3:a6:71:
11:d9:7c:dd:17:d7:ee:b6:ba:5d:3e:c6:5c:38:be:
a7:68:ef:d2:0e:23:3a:84:8e:cc:ad:91:c4:d9:a0:
69:04:a1:61:61:3c:79:06:bb:00:a2:fe:17:7c:4f:
b1:de:d0:8c:b7:98:4d:34:14:88:bb:93:a0:57:2a:
27:6d:54:7a:39:88:55:ca:30:73:98:aa:4a:dd:f3:
a7:ca:4e:57:19:41:50:bf:99:e0:31:bd:8b:22:8c:
c4:90:6d:46:ec:39:27:84:02:11:7c:cc:7e:91:a3:
ff:4c:e4:cb:e3:ca:cc:c0:39:4d:fa:dd:b3:76:20:
c5:bd:dc:0e:51:b9:3f:4b:e3:21:ab:ed:f5:61:72:
bc:d4:5b:1d:ea:6d:1a:ab:f3:1f:57:a0:fb:0d:4a:
7c:2d:04:fd:93:fa:4d:fa:d0:fe:0a:79:7c:53:86:
b6:d4:35:18:68:d2:48:76:45:38:c4:60:9c:2b:ab:
5e:5d:76:71:bd:4f:fd:04:87:68:ea:a2:a1:06:bf:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:A9:8D:C0:BE:33:B5:71:32:7A:3F:3D:F0:96:71:0F:28:EB:8A
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:42:2e:98:2d:e9:bd:14:8f:86:a5:ce:ec:c5:ba:9e:97:90:
17:f1:58:fc:a4:13:06:33:d4:72:02:cc:bc:aa:82:ac:a4:93:
b4:4c:fb:1c:79:1b:a7:ea:a9:c6:50:fc:d0:91:df:fa:1b:b7:
e8:8c:6d:47:38:ac:4b:14:e6:f9:30:b0:78:14:55:27:d2:55:
46:b5:ac:2b:a4:3f:fc:28:a4:53:40:ad:be:01:78:ed:7b:80:
08:30:62:14:65:33:38:ab:85:a5:a1:d2:e1:f2:4d:43:58:c5:
03:25:a5:c2:27:95:75:a9:68:41:ca:f5:68:11:02:ec:24:12:
a6:2d:91:31:57:1e:8c:33:0e:f7:e2:69:27:93:a9:a2:38:e2:
b8:ba:c9:96:80:fa:9b:ee:f5:4f:65:d5:90:a9:0d:6f:0d:d4:
2b:11:3e:46:e4:06:2b:66:c9:cc:b0:01:da:07:47:37:db:04:
f9:ec:72:d0:9b:ae:2a:bb:7d:e8:ca:57:90:ae:89:14:3d:83:
7d:d6:15:71:05:50:1f:d3:d5:83:b6:41:05:fa:80:af:a1:64:
bf:4a:90:7b:f3:ac:20:b4:47:47:e9:e1:6b:4d:dd:89:03:85:
2d:e2:63:29:df:a6:a7:6e:2d:ab:05:a9:b9:66:12:3c:e2:9a:
da:5f:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:54 2025 by rpki-client