Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: hMqj7jt7e5bWSYFJSxSMm4zWaE6ccReQ1LzEro07HHE=
Subject key identifier: AB:0D:6B:74:88:5A:AF:76:8F:8D:C4:3E:0B:27:73:B1:E9:B2:B9:DA
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 019589CCFA0D8D6C393C092BE0705461C50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0A7F
Signing time: Wed 12 Mar 2025 10:01:06 +0000
Manifest this update: Wed 12 Mar 2025 10:01:06 +0000
Manifest next update: Thu 13 Mar 2025 10:01:06 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: qrOsovKL+ewenT3R7WKaaRsI9qEvEASzM/oq/1Qclfk=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:cc:fa:0d:8d:6c:39:3c:09:2b:e0:70:54:61:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Mar 12 10:01:06 2025 GMT
Not After : Mar 13 10:01:06 2025 GMT
Subject: CN=ab0d6b74885aaf768f8dc43e0b2773b1e9b2b9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:79:5d:54:0e:98:8b:9e:5d:2e:c0:ee:cb:
fe:37:1e:6e:1d:16:19:ea:24:1e:4b:02:3e:89:32:
8d:e1:2d:13:8b:dc:ac:2f:6e:21:20:e6:74:80:8e:
a5:bf:31:dc:d1:7b:0e:cf:12:f9:48:3e:fb:b1:ad:
ee:c4:26:2d:a3:93:28:f1:e8:89:46:72:eb:4c:33:
b0:a4:97:4c:24:87:b5:87:e4:6c:c2:f6:27:50:b8:
97:ed:a4:93:60:ae:40:cc:ec:5e:8b:f2:20:cb:f8:
b8:db:c8:60:b7:3d:57:3b:1d:3e:da:c4:89:c1:92:
16:66:aa:da:d3:a6:d5:c9:3b:0f:94:df:85:38:1d:
6b:42:ca:85:ac:be:55:4e:c0:dc:2d:7f:7e:4d:ed:
75:f6:f6:73:d4:c8:36:ad:5d:79:6f:08:02:e8:29:
ed:a3:f3:4c:cd:e4:f3:f0:1b:7e:6b:db:0f:57:2e:
92:fb:33:6b:60:bd:1c:6c:54:f9:d8:e9:32:36:28:
58:de:1e:d5:6d:0f:03:ae:44:db:8c:09:6e:31:a9:
75:0d:24:2a:d0:46:24:db:52:55:13:30:37:10:d3:
09:57:d9:76:4e:94:05:0d:38:31:da:12:04:d6:8a:
42:fc:89:01:6b:83:8f:90:df:fb:7f:97:a3:b8:90:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:6B:74:88:5A:AF:76:8F:8D:C4:3E:0B:27:73:B1:E9:B2:B9:DA
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:1e:e9:58:68:12:d3:7b:3a:86:36:75:b6:88:c6:bf:4c:
17:84:52:4e:e9:6c:2a:1d:98:a5:aa:20:12:53:89:c4:7d:32:
33:31:33:e1:32:99:25:46:46:59:05:30:3a:e2:1b:46:f9:0b:
b7:8f:cc:58:9f:4b:9b:58:8f:18:e7:e7:a8:a2:5c:3c:34:0a:
29:72:ce:b1:5c:bc:79:79:02:c4:cf:7d:c4:c4:5e:6b:fd:cb:
23:6e:80:81:12:90:d9:fd:13:cc:0e:e4:a1:82:5f:cb:33:24:
63:28:bf:4a:b6:04:e4:03:0a:f8:cd:fd:e2:e7:11:1a:c4:86:
52:f9:5e:f1:30:4f:0e:1f:6f:48:09:17:53:df:2b:9d:c8:87:
44:8e:a7:81:0e:99:ae:df:db:b8:d6:ca:6f:78:92:cc:ab:26:
18:c6:c0:af:b7:43:c6:db:6d:67:84:e8:fd:1e:15:5f:8c:61:
4d:0f:61:d1:bf:43:26:52:a4:34:23:c4:f4:f8:4c:a5:b3:68:
3c:1f:b9:db:b5:4b:43:72:79:95:43:ec:99:2c:98:6a:65:64:
3b:21:14:86:b4:dc:f6:9a:0f:df:cb:9a:7f:bd:47:8d:48:b3:
9d:82:3d:a5:70:d5:59:ff:97:06:5f:7c:e4:cd:4a:df:74:ba:
d7:62:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:50:38 2025 by rpki-client