Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: gjNB3aUmDdsL1u6zh9ckOEYzqb2GrSSm+yGPJCbSxM8=
Subject key identifier: BC:50:52:E6:66:6E:6D:C8:C8:05:83:10:8B:3C:97:BA:BF:19:FB:71
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 019578D93D46277CDCC58378BCABE9127A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 148F
Signing time: Sun 09 Mar 2025 03:00:57 +0000
Manifest this update: Sun 09 Mar 2025 03:00:57 +0000
Manifest next update: Mon 10 Mar 2025 03:00:57 +0000
Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: Fve92s9c37LkEV4xqhavRgfAmQQ5srHJN9x9QeMSOpM=)
2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d9:3d:46:27:7c:dc:c5:83:78:bc:ab:e9:12:7a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Mar 9 03:00:57 2025 GMT
Not After : Mar 10 03:00:57 2025 GMT
Subject: CN=bc5052e6666e6dc8c80583108b3c97babf19fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:5d:0d:22:41:b6:cd:fa:f8:e5:68:df:28:
ce:63:74:22:7e:e5:01:95:48:5b:34:88:49:40:d6:
2a:c2:30:6b:b7:93:73:3b:c0:21:59:7c:ff:92:0a:
92:99:00:79:a0:bd:b1:5f:28:ff:db:6e:ba:98:73:
65:17:27:1d:7e:e5:37:4c:06:23:2d:f0:4a:75:2b:
c2:98:7e:75:35:a2:c9:32:8a:6a:b0:c0:e0:dc:aa:
bc:7b:d1:d2:24:f7:d6:5f:30:d6:c8:cd:02:fb:33:
fb:f4:99:ca:f1:24:90:60:94:7e:d1:90:2f:86:35:
33:dd:94:1e:4b:52:c7:16:ad:2e:96:67:2a:f5:f0:
a3:f4:21:d9:0e:85:7f:28:37:86:31:6a:56:b7:7e:
d6:a9:35:7c:44:0c:9e:b6:9f:37:a8:21:4c:97:b8:
28:2f:5a:ea:e1:aa:62:d6:ce:c6:90:6c:7e:06:37:
88:0b:2b:21:d2:d0:b5:c5:62:88:b9:58:1a:23:74:
b8:43:bd:e9:25:8a:f1:d7:20:4b:62:f1:37:11:75:
65:98:54:88:c0:e1:29:44:97:ef:5d:6f:75:ad:46:
e8:8b:d5:01:01:5f:c6:ec:a9:19:f4:fe:d3:e7:74:
c0:a3:df:19:11:11:14:a8:26:6e:80:6b:66:2c:6c:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:52:E6:66:6E:6D:C8:C8:05:83:10:8B:3C:97:BA:BF:19:FB:71
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d2:d3:0a:e8:72:bb:e0:ce:03:79:9f:d1:b5:04:69:f1:1a:
82:50:c4:c1:9a:83:f3:bd:f4:10:f0:2d:81:80:48:87:66:88:
a4:7f:e7:87:5a:84:cc:f1:d8:43:0a:9b:bb:c3:ed:b9:ea:8d:
32:df:68:a3:a0:83:59:d5:5e:28:23:13:75:91:93:b5:16:4b:
a1:a9:17:ba:ca:a2:fb:60:6f:5d:21:b4:14:c2:18:5a:14:ff:
be:4d:72:5c:f4:10:e7:d9:99:bb:0c:a7:70:2b:11:f6:e5:57:
87:dd:ad:c1:3e:55:84:78:03:ca:81:b0:ed:34:35:bb:ab:cc:
a5:4f:80:9a:83:1b:f7:7e:4f:9e:95:5e:b7:85:e3:a5:d4:ed:
d0:54:4b:2a:dc:92:53:4a:fa:1e:0d:90:9c:03:01:b0:73:2e:
63:a4:44:41:25:58:1b:b0:0f:e1:39:1a:b0:d2:0e:e2:a9:1e:
cb:aa:de:5e:cb:13:55:99:7e:8d:79:6f:8d:c9:9a:46:d9:89:
33:63:a1:76:ec:f4:54:7f:d5:f0:fb:a6:69:04:31:cb:45:d6:
26:7f:1b:5c:ea:59:a8:36:70:9e:13:12:d2:c0:42:cc:87:5e:
31:67:e3:94:78:04:b3:a3:c0:d7:45:c9:00:09:26:ae:61:b6:
ec:1d:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:43 2025 by rpki-client