Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json)
Hash identifier: l3d0YlCsp70k/jYNPwt3Gek/gPepocKAxkvfO71oc2E=
Subject key identifier: 90:D6:CF:79:54:F3:4D:A7:0F:E0:C6:63:82:F7:79:E9:50:52:0E:D8
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 019872CF54A4D7151CBA7AD793EEE4C8D0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
Manifest number: 0DDD
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: Y+vxYE7zd33DfZj4iGVZsHmxhLpKm8lNYdLxLHp3eac=)
2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:54:a4:d7:15:1c:ba:7a:d7:93:ee:e4:c8:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=90d6cf7954f34da70fe0c66382f779e950520ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:e6:27:a7:e1:06:75:29:52:6b:99:d3:28:
5e:a5:e8:b6:b3:5b:9f:ac:b3:fa:e7:e8:d2:26:4b:
fb:e3:86:1b:27:01:79:58:bd:0a:fe:47:87:e9:ea:
89:bc:dc:56:61:e6:0b:39:7a:6f:6b:f9:3b:8f:71:
f3:55:ae:81:77:13:ac:c9:38:3c:83:cc:c3:65:72:
a7:ad:57:ad:21:4e:ab:b5:ae:93:4c:48:74:cc:22:
35:8a:2e:cf:53:49:a7:f0:65:69:69:cc:4a:1f:08:
a6:89:7e:28:52:73:7d:b2:45:1a:5b:60:90:32:1f:
8f:21:21:d3:ed:6d:76:7b:d8:0f:9d:f3:6e:05:de:
39:51:32:aa:e9:ac:19:60:78:de:02:56:3a:70:f0:
0e:5b:34:90:73:78:4f:27:25:cd:11:59:72:62:0e:
3d:7b:fa:79:9f:5f:39:de:21:f2:75:2d:c7:1c:65:
f7:8e:9f:33:a9:87:f1:5a:e7:3e:2f:2b:89:c2:f6:
e5:05:2c:06:9e:ed:4d:4d:51:e8:ed:87:97:a7:00:
13:46:99:a2:7d:ea:2e:8d:6d:26:77:63:be:83:8e:
c1:7d:6c:c4:9a:af:33:07:c7:89:28:61:c6:da:3c:
51:d9:16:18:d8:12:97:37:a8:27:a1:07:3b:33:fa:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:CF:79:54:F3:4D:A7:0F:E0:C6:63:82:F7:79:E9:50:52:0E:D8
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:07:6c:84:c4:cf:2c:60:64:39:e9:e5:4c:6f:14:0c:54:
55:d1:1a:92:74:14:c5:d7:f4:63:da:c9:a2:bc:0f:fe:0a:18:
ab:52:66:08:16:e1:14:f2:ae:ef:e7:8a:15:48:5b:c7:99:a6:
fc:65:d0:22:ad:6f:13:5e:c3:04:ba:3b:ef:37:55:2d:d6:1d:
b3:f6:8e:03:6e:7a:ce:58:5d:ef:ca:d8:6b:b2:4b:99:97:98:
fb:c3:6a:3b:91:8e:6a:19:d3:43:31:62:9e:02:a4:8b:e3:db:
8d:1e:a4:ef:8e:f1:99:4a:48:8e:1f:5c:1b:5c:3e:7b:f6:1a:
f9:14:f6:d0:ff:8f:65:2f:19:8c:ae:ce:39:96:75:1e:4a:21:
9e:90:44:1c:a9:86:fa:ae:54:36:b6:5a:42:bb:08:ff:60:95:
c9:f3:fe:5d:23:a0:f2:64:8d:fe:f0:68:db:3f:f2:e6:84:52:
dd:f3:5a:02:57:41:1d:c5:1d:a0:60:64:e5:6b:f8:6c:b8:ce:
e1:72:62:d1:9b:6f:8d:a1:79:b8:d5:c1:08:4a:a8:61:01:1c:
b7:1e:f7:e8:03:17:af:da:76:ae:d0:86:d5:dd:58:29:88:7c:
a2:21:c4:aa:17:08:e5:5a:38:ca:ab:c1:c0:8b:f5:5e:74:ae:
c5:9d:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:41 2025 by rpki-client