Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: dSRCG4M0qICfyyXMvQUey6e6zQPLtIzTzYJLWvJJxVM=
Subject key identifier: 48:D8:A1:1E:95:D2:8F:67:88:D6:83:41:8A:01:30:83:8F:FD:C5:53
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 01963EE66C3A5B49B777358BE12AFE9E62D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0CB9
Signing time: Wed 16 Apr 2025 14:00:10 +0000
Manifest this update: Wed 16 Apr 2025 14:00:10 +0000
Manifest next update: Thu 17 Apr 2025 14:00:10 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: 53Sog/b7OU/Fe9tfQFKiH7f8nkDRV8rpTjD7YXOYauI=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:6c:3a:5b:49:b7:77:35:8b:e1:2a:fe:9e:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Apr 16 14:00:10 2025 GMT
Not After : Apr 17 14:00:10 2025 GMT
Subject: CN=48d8a11e95d28f6788d683418a0130838ffdc553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:e5:6e:f5:6e:c1:5d:0c:a4:60:e0:ae:b4:
c1:37:51:07:38:95:46:d3:23:bd:4f:93:5c:f4:90:
1b:5b:a2:ec:ac:84:50:1a:97:6e:e7:bb:cc:32:0f:
e6:63:11:55:2b:f4:5c:1b:55:4b:e5:9a:94:db:0b:
0e:be:98:d9:c3:2c:b4:74:dc:a5:43:62:ae:c2:40:
21:c3:5b:01:cb:ed:74:d2:93:32:5f:3b:24:c8:91:
61:57:b1:66:c8:33:75:f1:8a:c5:9a:dd:20:a2:b6:
ed:8e:b6:ad:4c:e7:15:c2:c9:2b:38:42:f0:cb:81:
06:9f:f2:ec:83:65:00:b5:a8:69:18:1d:63:18:51:
ee:63:b1:8a:02:cc:e3:13:99:f8:98:32:0a:62:9d:
f1:c7:b2:d8:ee:20:c5:34:12:05:62:2e:91:da:26:
6b:70:af:b0:64:17:46:51:d7:ef:db:79:d1:49:0c:
d4:70:1a:e1:e6:f5:20:4b:5b:26:66:86:ef:c8:86:
cb:2a:83:f2:f7:df:b8:36:1e:75:c1:2d:f5:e6:d2:
00:5a:31:23:fe:53:a2:9d:5f:14:34:8a:dd:ae:16:
71:aa:2b:96:b9:4d:fb:c6:97:da:01:a7:44:01:75:
cb:86:c2:1c:dc:23:9e:ea:ee:74:1f:a2:56:26:93:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:A1:1E:95:D2:8F:67:88:D6:83:41:8A:01:30:83:8F:FD:C5:53
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:36:05:01:e4:cd:47:d8:6d:f4:11:6a:29:cf:52:3a:1e:
4a:a2:c1:8f:54:65:3d:5f:34:57:13:70:c1:91:e7:17:34:8a:
5b:e9:07:8d:9e:bb:4f:e8:5a:51:d6:0b:7b:5f:b2:66:15:b7:
71:eb:e3:bd:4d:73:18:c8:ef:9b:5e:4d:4b:d6:fd:3c:94:37:
51:20:60:08:c5:14:77:0e:11:55:96:15:2d:bd:02:3a:69:28:
a3:f5:33:5a:c0:de:d5:96:af:64:86:55:01:fd:de:fd:1a:8e:
85:0c:9a:5b:46:69:2d:a1:e0:25:bb:3f:6d:d3:fd:28:b3:51:
eb:9c:b2:69:67:ee:d7:66:e8:10:78:98:e8:fe:d5:3d:a9:58:
7e:c4:55:e1:37:36:94:0c:d0:c6:fa:cd:9d:3c:e9:b0:80:e2:
47:8f:69:20:46:08:ec:3b:01:84:f8:ac:d2:95:b0:17:7d:ce:
44:d1:91:65:64:da:dc:dc:1c:f9:ad:7d:3f:ea:a6:f6:06:22:
b4:0c:b2:54:a4:19:f5:9c:1d:97:6b:bc:d6:a7:17:79:d9:e3:
63:6e:a3:e2:80:b4:aa:56:21:ea:c9:d9:62:03:5b:ad:42:99:
3e:ca:3b:50:7e:58:ea:5e:a5:31:90:07:85:23:c5:e2:a1:69:
99:1b:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:21 2025 by rpki-client