Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: VqIGaCxEQzQy3NiQJZS3zWS8FMscvAKU+jp0gQsFxvQ=
Subject key identifier: 50:A8:5E:F0:0B:5C:D7:8B:95:72:CF:A4:D1:DA:20:7F:90:93:07:1D
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019511A3020CC69D387CBC5B481FFFEE5C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0C1D
Signing time: Mon 17 Feb 2025 02:00:50 +0000
Manifest this update: Mon 17 Feb 2025 02:00:50 +0000
Manifest next update: Tue 18 Feb 2025 02:00:50 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: oD/nrgy4SFOb673j5CURRUGEj5Ii7Nyvh+01jQN76zY=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:02:0c:c6:9d:38:7c:bc:5b:48:1f:ff:ee:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Feb 17 02:00:50 2025 GMT
Not After : Feb 18 02:00:50 2025 GMT
Subject: CN=50a85ef00b5cd78b9572cfa4d1da207f9093071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:94:d2:56:39:df:c9:f6:7d:61:d7:08:f7:
38:97:be:1d:81:ec:3a:1b:8d:e3:6d:84:79:e0:5e:
03:16:11:b8:41:24:1c:37:f3:11:c9:e9:42:a3:8b:
3b:2d:b0:81:ca:ff:9d:45:09:74:e2:67:ef:80:f3:
1a:88:18:59:4c:ca:7e:4c:1a:b4:8e:7e:63:db:de:
4b:9e:cf:e1:64:7e:e4:28:e0:d9:26:5e:b3:d2:9d:
c6:8c:44:13:2c:c3:2f:54:bf:4a:c1:ea:bf:33:7e:
c3:e7:7d:2c:62:cd:c4:20:b1:c2:a5:82:b0:7b:8d:
bf:08:ed:74:a4:68:ab:36:b4:b0:24:00:71:b4:e4:
e5:ae:f4:13:64:aa:68:50:18:2c:99:9e:5f:8d:8f:
36:93:3d:13:d2:45:bd:b4:66:af:9f:bb:c6:84:0d:
dc:4e:73:92:ca:78:4b:53:aa:67:7d:88:6e:fc:69:
d8:05:b1:e5:9d:e0:56:2d:69:46:54:03:85:9c:1b:
8b:dd:02:7a:19:94:4b:44:a4:c1:39:c1:dc:9f:b0:
31:df:52:c5:13:a7:7c:96:fa:70:70:4e:d4:9e:e8:
65:b4:f7:2f:69:1a:a2:47:24:55:79:b9:40:9d:74:
cb:68:03:75:fc:6f:84:91:6c:df:37:55:68:44:a9:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:5E:F0:0B:5C:D7:8B:95:72:CF:A4:D1:DA:20:7F:90:93:07:1D
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:c7:76:b8:6a:71:4a:dd:e3:8d:dc:2e:de:25:2f:09:89:
30:fd:a7:3f:af:c6:6f:fe:cc:ed:46:1d:9f:47:b4:d9:66:89:
50:27:12:80:b6:51:bb:1f:16:6d:52:10:48:b6:90:20:6c:82:
90:0e:d0:82:a2:bd:b3:c8:d5:e4:97:f7:ff:c7:3c:31:a4:74:
83:8c:88:61:58:68:79:64:2f:94:58:0b:03:70:d3:51:04:df:
5a:74:aa:7e:19:9e:88:87:e5:2f:cf:f3:17:a1:c3:08:06:8c:
d9:2a:f3:f5:9e:0d:83:27:95:90:f1:3f:1b:ff:62:c8:20:11:
f2:bd:94:54:b6:23:5f:b7:b5:f4:f7:97:1e:3e:d8:7f:0e:9e:
b0:fc:af:eb:32:e0:9d:3e:cb:61:35:c9:31:ef:04:8f:74:58:
82:63:d5:44:aa:cb:9e:82:07:aa:97:df:9f:3c:a3:aa:77:8b:
5d:77:f1:8e:78:de:2c:80:a9:33:8b:ae:17:64:4d:be:dc:f0:
4b:28:97:65:d1:46:2e:17:a6:df:7f:d6:70:97:02:e5:3f:08:
13:19:1d:3b:3d:55:47:71:8b:d5:0e:32:c0:46:86:47:c9:28:
f1:95:c5:36:f2:40:99:f1:5a:c5:c8:bd:70:69:61:ae:37:41:
53:ae:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:59 2025 by rpki-client