Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: KqFiZXSXcWImxghtKMxWB8t0dYLmG5oioZZo5Qr/djQ=
Subject key identifier: 8E:47:E9:64:5F:88:17:94:5A:2A:CC:71:64:F3:E1:21:E2:C5:6E:8F
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 01958B4D52BE7C1366D0A4BEBE38F3488179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0C5C
Signing time: Wed 12 Mar 2025 17:00:55 +0000
Manifest this update: Wed 12 Mar 2025 17:00:55 +0000
Manifest next update: Thu 13 Mar 2025 17:00:55 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: mAq8b/hDPCtLCxP8DuAeBmFqiCjLW3m1d6Q6T/tvuW8=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:52:be:7c:13:66:d0:a4:be:be:38:f3:48:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Mar 12 17:00:55 2025 GMT
Not After : Mar 13 17:00:55 2025 GMT
Subject: CN=8e47e9645f8817945a2acc7164f3e121e2c56e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:8b:40:b9:4f:16:ea:a5:2d:b2:d6:b8:24:
b0:6c:af:f0:1c:06:a9:93:0c:ef:e9:d6:68:0c:1a:
38:36:a9:28:09:9d:1d:53:d9:39:cb:eb:81:1c:0a:
08:99:b2:ba:49:44:c9:2c:9c:0e:58:f1:a1:6b:08:
89:75:ed:40:85:4b:70:17:9a:d0:cd:f5:97:06:7e:
d0:aa:a1:c4:34:43:39:5f:d3:ef:b7:7a:8e:63:62:
cf:97:04:be:b7:03:ec:e3:a6:13:aa:81:b2:1d:92:
0d:94:30:ba:a1:db:2f:95:31:df:2c:de:d9:4a:ef:
ef:11:c4:c2:df:ae:7d:dc:a7:c6:ef:ad:96:e4:a5:
cb:50:2e:c8:31:a0:ea:6b:89:c8:b8:70:6c:79:34:
ca:b9:14:b5:04:d8:0f:05:96:05:6c:b0:09:66:4c:
5c:29:6d:92:1e:5f:8e:96:b7:5c:76:75:1b:04:5d:
c2:bc:10:7e:5a:9f:b7:1e:aa:25:26:8a:ba:5a:56:
b1:f4:92:e6:26:b7:41:21:52:89:69:18:63:26:74:
60:cd:ca:32:b5:16:fb:cd:2a:0b:99:f2:16:e1:77:
31:86:fc:cf:66:45:b2:f5:58:3f:6d:a1:70:7b:02:
7a:f3:ce:f6:40:97:56:d4:49:28:9c:4a:55:56:60:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:E9:64:5F:88:17:94:5A:2A:CC:71:64:F3:E1:21:E2:C5:6E:8F
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5f:92:37:cc:b0:82:21:d5:01:ad:ef:08:11:f9:f6:6f:4d:
a6:5c:73:b9:23:57:33:b3:e4:e1:b2:be:d3:4d:47:db:83:27:
ba:c0:dc:a2:81:b6:36:95:14:8d:71:52:2f:3a:fc:4f:16:24:
92:1a:5c:5a:f8:b4:00:96:31:c9:db:44:07:26:b5:27:00:5d:
5e:72:08:68:75:ae:2e:17:6c:2f:cd:ff:54:b2:7e:ec:2d:42:
ca:71:8b:be:c4:f7:00:b5:56:9f:a3:cf:f3:dc:88:53:cf:c2:
ca:15:da:a4:a8:c5:cf:1a:26:32:32:0f:87:26:82:50:49:33:
de:15:6c:25:fa:ef:e3:cf:c5:61:6c:65:e6:a4:ac:d1:99:95:
f0:aa:0b:55:e6:fa:a3:6f:a0:8f:59:fc:a7:95:a8:12:d4:42:
c2:7c:cf:b5:9d:b4:d8:d2:3e:84:58:39:e1:6f:ed:e0:43:b6:
17:ee:bb:75:a9:48:71:23:23:ec:46:72:08:90:d9:72:72:0d:
3f:be:9b:ed:ee:2a:16:90:f8:bb:f5:53:8d:8a:bf:cc:21:ce:
1e:1c:7f:1e:ca:ee:55:9b:bc:2a:25:64:b6:4b:fb:60:57:70:
ad:32:2c:a7:37:6f:41:bc:78:a5:00:57:4e:ec:58:09:bb:8c:
88:4c:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:48 2025 by rpki-client