Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: PLdLluT65+oU7IWy3rbA8PLlBeVDcLM4Bg4cy4GOLQo=
Subject key identifier: A9:AB:0D:A4:BC:19:F5:AA:4E:26:B3:3D:19:BD:EC:15:FF:49:89:0B
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 01958C607B2B07614526ACBC2D1A6A1647BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 0361
Signing time: Wed 12 Mar 2025 22:01:27 +0000
Manifest this update: Wed 12 Mar 2025 22:01:27 +0000
Manifest next update: Thu 13 Mar 2025 22:01:27 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: PRlg7leRyM/CHz9Cn7zuJH5uZnmKMLyvXrfQt4i+kFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:7b:2b:07:61:45:26:ac:bc:2d:1a:6a:16:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Mar 12 22:01:27 2025 GMT
Not After : Mar 13 22:01:27 2025 GMT
Subject: CN=a9ab0da4bc19f5aa4e26b33d19bdec15ff49890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:88:5c:ab:6a:7e:c3:44:46:14:9c:f9:e9:
7b:24:e4:74:a7:24:ca:c2:bd:00:90:34:2f:e7:ff:
ab:9d:fc:ea:f0:03:97:c5:34:f4:28:96:08:b5:e4:
b6:b6:c8:67:ce:9f:6b:bf:03:c0:5d:86:71:5c:74:
48:36:ac:9b:cc:f1:58:9b:c2:d8:e6:aa:5f:2e:85:
2b:e5:8d:7b:23:b4:66:aa:d6:8c:0d:16:12:f4:9f:
5c:e7:d5:bd:ac:06:65:43:9a:21:86:57:96:94:fd:
c1:8f:ea:68:71:15:7a:b6:26:cb:8a:48:06:97:04:
eb:cb:fe:2b:c8:6d:c4:43:3c:74:7c:16:ab:5a:4d:
79:b5:41:2a:16:4e:38:98:7f:e4:b9:39:a4:b1:4e:
93:15:bc:e9:1d:03:e6:ef:d0:dd:d6:87:81:09:ab:
a5:26:34:7a:ac:fe:e1:36:c5:1b:f7:d3:4d:11:03:
1a:68:2e:6e:9a:04:e3:41:a9:88:17:52:8e:0d:31:
24:06:4a:cf:b1:4e:6a:d1:c6:22:74:94:69:02:f4:
27:47:23:d8:df:6c:64:f3:50:e7:0c:c4:9e:5f:a3:
55:af:15:bc:2e:e9:74:f3:a6:03:ca:56:dd:d4:7b:
27:1e:db:54:d6:27:33:c4:04:9a:dd:93:c1:da:7d:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:0D:A4:BC:19:F5:AA:4E:26:B3:3D:19:BD:EC:15:FF:49:89:0B
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:91:fc:0a:b8:b2:72:33:bb:21:d6:4c:3b:20:8f:36:b3:3b:
25:e9:3f:a0:c7:0c:4d:90:09:c9:9b:36:40:a7:db:39:a7:be:
92:3c:03:24:8b:0e:36:a9:4f:31:c2:39:58:1b:b9:3a:88:99:
32:12:1d:ad:66:a9:02:2c:9c:83:31:b5:db:70:ef:b7:bd:27:
2c:9e:0d:09:ae:f1:15:a0:8c:63:9b:77:6c:bb:e1:6f:2d:47:
4b:cf:ec:7e:87:6b:ca:c2:b5:6f:25:fb:dd:e0:c0:d8:60:37:
9c:a3:0e:ba:db:f1:bc:b1:ae:98:9a:bd:48:3a:24:61:48:1a:
d6:0d:a8:71:12:6b:c8:10:ea:2d:8e:fe:ae:85:1d:9e:6a:4a:
9b:34:f9:cf:f3:cc:49:7f:ba:85:29:27:c0:8c:ca:2e:60:9d:
35:d1:d8:4a:9b:00:64:96:c5:83:3b:f7:9f:7b:4a:24:84:4c:
e7:c1:73:26:38:e2:c2:8e:38:0a:ab:af:4e:30:a2:91:7f:f2:
44:cf:3e:9a:49:c3:f6:3b:89:9e:f1:80:33:0b:f1:38:9f:37:
62:ca:7f:ec:c1:17:a3:67:90:e2:7a:f2:8c:24:a4:e0:50:53:
51:d8:15:fb:5e:b8:a3:bf:f6:a6:70:0b:aa:00:6f:1d:eb:2f:
d7:2c:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:19 2025 by rpki-client