Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: tYGZ9z6/4+haXhj3HI9iPZa9DQ/FwMuuHVKlHcWbwWE=
Subject key identifier: 5C:40:CF:80:E0:F4:5F:7E:86:96:5A:7D:29:EE:58:FA:64:F4:36:BC
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 019679E9EAE09270A48D9EFD44D7BDE30B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 03DC
Signing time: Mon 28 Apr 2025 01:01:35 +0000
Manifest this update: Mon 28 Apr 2025 01:01:35 +0000
Manifest next update: Tue 29 Apr 2025 01:01:35 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: O70EBxNYmWu5DOJy13OugvBcd+CchLWMBJZ2bmZIinU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:ea:e0:92:70:a4:8d:9e:fd:44:d7:bd:e3:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Apr 28 01:01:35 2025 GMT
Not After : Apr 29 01:01:35 2025 GMT
Subject: CN=5c40cf80e0f45f7e86965a7d29ee58fa64f436bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:ee:17:c7:79:be:2e:ec:0a:92:ee:d6:c6:
12:2b:a3:9f:12:af:45:e1:c0:45:02:9c:7f:f9:e5:
51:d0:5f:18:cc:a0:ec:c3:ea:1c:4b:6e:4a:ad:30:
fe:99:2b:f5:f9:7e:e8:6d:b7:b0:b7:f7:0f:f5:cb:
f6:07:73:a0:a9:ea:31:d8:45:08:91:bb:e1:e0:f8:
c3:61:40:56:81:df:56:c4:48:38:0d:5b:07:47:14:
11:2d:65:59:04:69:52:45:52:7b:de:e4:ce:b7:e3:
b3:21:7e:fd:4a:0c:69:b6:87:48:45:36:1c:7c:67:
b2:9d:99:42:b0:b1:7c:84:89:38:07:74:4e:22:80:
95:3a:b8:c4:97:94:e3:ca:bb:dc:9b:88:45:1f:2f:
f3:2e:7c:c1:36:17:5c:0c:44:54:56:14:c4:dc:b8:
0f:c2:bb:53:b2:d9:41:5d:c0:5e:e8:95:21:9d:b3:
ab:b0:1d:e1:df:61:de:0c:31:0e:61:73:19:81:42:
16:5d:f4:fa:9d:c0:06:2d:95:01:95:32:dc:74:82:
74:39:44:95:ca:25:ee:84:e8:66:bd:53:cf:ff:7f:
0d:30:63:85:fe:93:23:d8:6d:2b:9d:61:66:68:28:
a4:a6:fc:8d:75:08:b7:fa:62:2a:d8:5e:18:e3:30:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:CF:80:E0:F4:5F:7E:86:96:5A:7D:29:EE:58:FA:64:F4:36:BC
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a7:8f:c0:1d:6d:f5:7f:6f:aa:c2:09:e6:ba:95:27:8c:b8:
fa:c9:9f:40:51:22:6e:f8:48:87:26:9f:0c:26:28:0b:29:eb:
fb:e9:56:5d:6f:49:f7:cf:14:3d:28:06:26:5f:62:3d:7f:a7:
3e:e4:39:6d:be:8c:47:f4:1e:5d:49:59:33:a0:6f:2b:7c:91:
60:a6:5f:09:c5:66:fc:dd:10:db:de:34:06:c3:8e:64:cf:23:
2d:b0:0c:8c:2f:be:40:9a:a5:4a:03:42:88:81:36:f3:33:aa:
26:02:98:52:85:9b:33:3f:cf:53:dc:04:6f:00:df:64:68:9c:
1e:00:e3:8f:12:c0:05:18:3f:cb:27:71:d7:25:ec:70:a6:b2:
33:be:7d:bc:19:e5:c2:3e:ea:3c:cd:6b:14:cb:c1:1a:5b:42:
66:cd:83:eb:cf:5d:0d:81:37:ba:4d:07:4e:e9:a8:23:00:fb:
2e:b8:92:a6:11:34:49:e0:51:f0:e0:19:1c:85:38:12:17:58:
65:15:fb:b1:79:4b:2b:ea:89:91:53:96:98:c7:1d:f9:33:fd:
82:44:d1:35:a9:0d:5a:16:48:c5:7f:7b:64:39:cd:74:5b:5b:
5f:d2:aa:c4:f8:c9:51:89:e7:bc:3b:eb:d4:7b:a9:09:fb:57:
27:3e:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:10 2025 by rpki-client