Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: 0Vy4dX197rc6L72VqQ65TAGtJEpPIP/Vyd7tGN3srAY=
Subject key identifier: E1:29:02:21:0A:2E:E8:C0:2B:E8:06:25:2D:A4:B9:27:92:67:98:33
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 01968B4A6BDECF674460D8E6DF839C379CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0C00
Signing time: Thu 01 May 2025 10:00:32 +0000
Manifest this update: Thu 01 May 2025 10:00:32 +0000
Manifest next update: Fri 02 May 2025 10:00:32 +0000
Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: yJzdi/j7dajzRExtPKcWD9batz1CM1qU68yXE1P3PIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:6b:de:cf:67:44:60:d8:e6:df:83:9c:37:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: May 1 10:00:32 2025 GMT
Not After : May 2 10:00:32 2025 GMT
Subject: CN=e12902210a2ee8c02be806252da4b92792679833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:29:14:65:d8:af:8c:bd:f6:73:1e:e9:1d:
f2:2b:44:82:bf:f8:be:32:3b:23:36:9f:33:50:f9:
56:f1:60:0c:57:b5:7b:cd:f6:48:6b:68:11:57:a7:
1d:b5:41:76:9c:0a:78:d8:10:ad:98:2a:07:9e:00:
46:d4:e7:c8:74:fd:98:d7:1b:5a:94:08:2f:00:fc:
06:49:ae:fa:a2:1d:c4:54:a9:14:99:30:42:d1:9e:
1b:02:3b:f9:8f:82:b7:09:c8:4d:7d:cb:f3:a5:74:
01:9f:64:f9:a4:8d:04:9e:4f:7e:c3:ff:a6:00:0c:
07:74:a7:85:80:d4:70:ac:82:96:36:50:cd:03:eb:
cd:3c:34:bc:31:df:d3:ba:33:a1:8e:d2:e8:dc:87:
e1:e7:cd:c0:4d:3e:c2:d9:77:73:f2:4c:6f:f2:96:
2b:58:26:68:7d:de:89:3a:cf:61:7e:5a:24:4b:cf:
71:76:95:ce:12:ff:c5:33:d5:ab:40:f4:27:bb:76:
0c:77:a8:95:77:01:9d:75:90:db:21:c5:a5:f8:23:
0a:5b:c9:8a:fb:fd:c8:d4:a3:5d:eb:b4:9f:e5:9c:
09:a2:b7:b9:17:e2:2e:12:81:fc:d8:bf:a1:01:38:
41:2e:82:21:2e:9a:5f:93:41:2b:1f:25:f2:eb:bc:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:02:21:0A:2E:E8:C0:2B:E8:06:25:2D:A4:B9:27:92:67:98:33
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8a:47:f2:a9:74:1f:15:4b:35:d4:df:4d:2c:73:3f:0e:c5:
64:f7:5c:f0:4c:aa:46:c8:73:b5:86:71:f8:6c:8d:70:43:c3:
8a:c4:26:cf:ff:8a:e9:29:9e:4f:3a:7e:ec:85:cb:83:3e:92:
2c:6d:e0:40:a8:b2:e3:82:9a:74:a4:91:12:33:ab:e4:13:3a:
b0:4f:6f:b7:9c:e9:03:c5:19:7e:4a:d3:05:f0:c9:b0:99:f3:
ff:9b:4c:41:8c:7f:e9:e0:40:25:d6:40:c4:cb:d4:a1:89:64:
3a:bb:8a:9a:6e:14:9d:cb:65:ff:d7:d3:81:45:7b:c0:88:4b:
e4:e5:d1:1f:e3:ee:7e:e8:a7:1f:d4:79:bb:16:2e:9b:e7:d4:
ba:77:82:70:4a:08:8e:a4:11:85:94:0e:09:5b:2f:e9:6f:aa:
db:a6:3f:b9:c6:d1:c1:6c:e4:2e:3e:cc:2e:c2:d7:9c:35:60:
ee:ec:29:c6:85:93:aa:6e:21:bf:8c:40:73:92:c1:a0:75:81:
4f:8c:58:7e:cd:b1:f1:15:11:c7:d6:c9:a9:af:66:e5:62:76:
88:0d:63:0a:ad:97:32:f1:53:10:00:be:93:29:ca:7a:f5:1d:
27:22:11:01:86:00:38:88:d2:ae:04:9c:2c:0b:f9:29:dc:0c:
ea:65:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:58:33 2025 by rpki-client