Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: vr/JddL6Bfv3VlmutArVN5loXnF/2mL4xinRViWl8Yg=
Subject key identifier: 08:99:6F:14:28:D1:A6:EE:9A:E5:9A:AC:9C:C3:66:4F:56:40:AE:5B
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019749685E0A5B11F0B52663B53C6835018E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0D43
Signing time: Sat 07 Jun 2025 08:01:05 +0000
Manifest this update: Sat 07 Jun 2025 08:01:05 +0000
Manifest next update: Sun 08 Jun 2025 08:01:05 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: NdBZi/wijKRlFRfXhIUKS0/F5Qn9W9keJM8SuPeXels=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5e:0a:5b:11:f0:b5:26:63:b5:3c:68:35:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jun 7 08:01:05 2025 GMT
Not After : Jun 8 08:01:05 2025 GMT
Subject: CN=08996f1428d1a6ee9ae59aac9cc3664f5640ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:6e:ac:ce:7d:e4:95:9e:46:cc:f9:ff:c2:
49:fd:28:61:d6:ae:d5:a2:ab:18:e6:86:65:0b:73:
86:07:49:3e:cd:d4:93:eb:fd:a6:8c:1c:64:0d:e8:
34:8c:64:c0:6d:f6:64:3c:ae:89:25:86:67:6f:d5:
70:80:0a:e7:ad:dc:69:d6:00:8d:2b:b0:20:ba:18:
f5:df:ae:1d:f7:d9:4e:82:af:ea:e7:58:cd:1d:35:
28:ad:ff:6d:89:a8:9e:a9:98:e0:64:95:16:9a:86:
65:8a:b2:1f:0d:5a:37:cd:b0:e7:4d:4e:9f:26:db:
26:84:51:57:a8:b2:9f:d6:09:7a:81:e2:49:b1:9d:
6d:53:45:7a:a8:8c:62:f1:37:8c:75:63:c4:5c:dd:
66:a2:b4:76:44:14:7a:37:f9:4d:a9:95:84:e7:7e:
68:5b:c5:6c:e4:dd:db:91:b6:c4:cd:46:8b:62:2f:
fb:95:05:97:d0:df:de:f3:a6:d7:82:84:61:42:fa:
af:78:1d:9c:3e:e5:cd:ce:73:b3:1a:a6:e1:f1:73:
32:1c:da:33:db:84:16:38:9d:d8:64:1e:7e:c3:f3:
47:12:e6:bd:aa:ce:c5:3c:3a:43:a6:a3:58:5e:b9:
1d:06:65:d4:9d:73:20:c3:44:aa:3c:90:7f:fc:3a:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:99:6F:14:28:D1:A6:EE:9A:E5:9A:AC:9C:C3:66:4F:56:40:AE:5B
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:85:29:f2:f0:e0:ea:71:22:45:8a:54:7e:0c:90:55:92:
b7:54:68:5e:b6:2f:a3:6b:49:fe:5f:b6:46:c9:51:9e:fb:e3:
41:31:72:65:c5:ed:a0:14:70:31:8d:d5:e8:d7:5a:ce:d5:96:
a2:16:d5:69:85:07:3e:67:5d:e5:dc:53:11:6a:93:03:49:88:
3c:64:82:73:c4:b4:cb:23:d3:75:9f:8a:eb:70:e3:d8:b1:40:
29:d5:5a:0b:e9:c5:af:c4:07:a2:a9:04:c6:64:62:63:54:c0:
0a:b2:de:10:92:f6:79:9c:23:b9:0a:89:62:97:a4:de:b9:e7:
14:3e:8a:46:37:d9:66:f9:bd:2d:05:a9:aa:af:37:54:d6:73:
0c:e1:b3:04:43:b3:2f:9b:1f:fa:7b:0e:ff:6d:21:07:d3:23:
cf:dc:27:eb:d7:24:ec:f9:8f:17:eb:ba:b5:20:cc:22:c4:93:
8d:09:9d:92:50:42:6b:2e:27:70:b5:99:1f:24:86:2a:0c:4a:
2b:95:e5:91:d9:eb:06:68:73:05:eb:84:de:ed:38:23:2c:f9:
5b:04:d2:0f:ae:59:8b:9e:0f:79:f8:b6:03:f5:d3:17:e9:9a:
14:12:eb:cc:28:a1:4e:3d:92:51:31:91:66:70:e7:db:d7:9a:
4c:0c:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:19 2025 by rpki-client