Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: oyaog9Ip9RJjmx7VlycwRsw+DT4t4XeYYCaVIPILlnA=
Subject key identifier: 3E:58:24:96:46:4B:50:8A:02:04:95:EB:96:9E:B5:7E:F7:E5:A8:E3
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 0196BFDD0C87F2B24C43EC3C4E66665AC09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0802
Signing time: Sun 11 May 2025 15:00:56 +0000
Manifest this update: Sun 11 May 2025 15:00:56 +0000
Manifest next update: Mon 12 May 2025 15:00:56 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: 0Iy2mBq1jEVp8amlnTgRtWo8MS7PvXYXFBD4hq3qlDg=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:0c:87:f2:b2:4c:43:ec:3c:4e:66:66:5a:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: May 11 15:00:56 2025 GMT
Not After : May 12 15:00:56 2025 GMT
Subject: CN=3e582496464b508a020495eb969eb57ef7e5a8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:8a:9b:03:eb:53:19:20:c2:80:15:5b:c9:
1d:78:41:2b:6a:77:44:aa:05:06:ac:05:28:e7:4f:
20:b5:94:c3:00:27:85:ec:db:21:f2:bd:76:49:b7:
fc:46:43:fc:4b:b0:f6:a4:86:d7:27:20:d8:8a:32:
a1:51:d5:2e:93:87:1e:ba:18:de:6f:82:37:94:6b:
b6:4b:55:56:c1:92:61:9c:79:e9:a0:14:45:bb:f7:
d7:b9:8f:4b:89:7d:9c:32:ea:40:7f:12:e4:06:d5:
fc:82:60:dc:49:86:06:2f:32:a5:46:ea:a4:08:e1:
a2:9b:55:ff:f3:31:e8:39:76:ad:30:26:e8:72:76:
e5:8f:f0:0e:dc:93:e6:b7:73:7e:7d:a8:18:61:38:
c9:e7:7e:0b:3d:7f:9e:8b:02:43:6b:11:8f:c6:5a:
b3:34:81:61:36:06:ca:1b:58:e4:8d:b0:09:d9:af:
59:47:e0:64:62:64:6a:a6:bf:87:b5:0d:0e:b8:43:
a0:dc:b8:60:a6:56:ed:8f:26:68:40:5b:88:d0:47:
4b:56:e6:ae:fb:0c:43:68:72:f4:13:76:80:1b:0b:
0a:cc:67:a4:3d:8c:b4:74:e5:da:5d:11:6b:e2:87:
3b:9f:9d:bf:ba:0f:0b:84:a9:de:99:bf:e7:ed:46:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:24:96:46:4B:50:8A:02:04:95:EB:96:9E:B5:7E:F7:E5:A8:E3
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:e1:f4:93:9b:b7:05:69:d2:9a:93:68:82:c6:ee:b0:01:
e3:c8:96:99:c0:fb:bd:e3:bc:ab:5b:c2:e5:0c:a9:b2:26:37:
09:74:b3:eb:00:d2:0a:9d:86:06:88:6f:08:0b:33:1e:02:5d:
e4:45:be:35:45:8e:45:9e:75:1b:59:c1:4e:1d:9f:c8:91:38:
4e:c7:b5:48:6d:33:dd:ff:14:b1:c2:b4:98:56:32:cf:f1:36:
35:b1:7b:59:ea:08:6f:24:35:1c:e6:d8:0b:67:d0:14:a0:0a:
42:72:5d:4b:0b:f9:6a:dd:a4:e3:06:58:cc:cf:43:bc:98:ac:
b7:de:92:91:8c:98:c4:4f:66:49:55:7a:a3:17:e2:38:b1:75:
95:91:27:54:18:19:44:26:57:08:5c:48:b3:08:d6:5d:29:5f:
db:03:87:a2:6f:1c:f4:1a:d0:37:d9:21:88:cf:25:f1:69:50:
67:ac:59:37:98:95:fa:37:1e:f4:da:81:a6:86:e8:67:72:b3:
f1:19:88:08:7e:36:db:a9:ed:65:6d:27:4a:7d:14:1c:07:65:
6f:47:2a:8c:d6:66:a8:de:c5:f8:6c:67:06:f2:00:eb:bc:f1:
f3:33:2b:b3:1f:0c:98:98:6c:af:bd:f2:72:a3:c7:db:fa:3a:
5e:5f:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:24:34 2025 by rpki-client