Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: yehrKvGcCGV/HEV+AJu8RNnHH7vCzoCK3fPpUkgZ9TY=
Subject key identifier: C0:E3:85:06:A9:00:E6:07:40:9A:FB:09:11:30:F0:EC:5F:A5:81:FA
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 0196BD4993ABAB5A4106E88DC43C76CFCA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0D23
Signing time: Sun 11 May 2025 03:00:37 +0000
Manifest this update: Sun 11 May 2025 03:00:37 +0000
Manifest next update: Mon 12 May 2025 03:00:37 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: DVscPEqItwF/APnbfGurNPUpl/s622fAeEAvarIdzqk=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:93:ab:ab:5a:41:06:e8:8d:c4:3c:76:cf:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: May 11 03:00:37 2025 GMT
Not After : May 12 03:00:37 2025 GMT
Subject: CN=c0e38506a900e607409afb091130f0ec5fa581fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:a5:43:03:c5:b9:af:72:db:46:33:44:74:
dd:2c:4d:06:19:c1:e8:37:4b:70:72:4e:22:53:3a:
32:c4:d5:25:26:bc:a7:30:e5:38:62:ed:b8:85:de:
47:60:b2:e8:3d:2e:ea:f5:8d:33:33:65:d2:29:e6:
74:c5:c0:a1:f1:cd:6e:18:74:24:db:f7:87:b5:64:
ff:9d:6d:3a:02:74:cb:70:57:af:b3:3c:29:96:41:
be:a9:2a:50:5c:63:72:f5:b1:73:c4:fd:77:6a:62:
3e:4d:dc:e4:d9:1e:79:ff:da:47:b8:27:75:82:92:
b7:5c:d4:bf:82:7f:34:39:dc:e7:54:4d:f7:a6:eb:
3c:61:39:76:4e:7b:69:cd:e7:02:d5:a5:bd:08:6e:
3d:a9:31:88:cc:87:2b:79:da:f8:4c:52:1d:09:6f:
f7:e8:bc:d8:bd:ae:39:bb:72:80:e1:ba:c2:c0:4d:
7a:24:f9:4e:6c:3b:3d:cb:d1:43:a2:65:cc:de:fc:
41:44:ca:ec:5a:19:8d:74:b5:6c:5c:bd:05:80:4a:
7f:e2:b6:36:92:69:4a:b8:05:47:8b:c1:79:dd:e8:
b6:9a:a0:22:b8:38:d6:13:94:53:95:03:c2:b4:52:
07:e0:4f:be:3f:a8:8f:e9:f7:2d:5b:40:39:f4:99:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:85:06:A9:00:E6:07:40:9A:FB:09:11:30:F0:EC:5F:A5:81:FA
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:59:b2:66:7a:e5:85:cb:21:0a:a6:19:c6:eb:37:ec:ee:6d:
17:9e:a0:9e:1a:7e:e2:07:63:a4:ba:96:d3:63:d6:15:ff:72:
a4:6a:61:27:c0:47:97:26:85:5c:49:ff:4b:b5:45:b7:1c:06:
cc:eb:8b:ee:ff:b2:67:c8:e0:4e:3e:95:10:9c:36:20:7e:a0:
6b:5d:2b:db:e3:27:72:3e:62:e4:f7:06:e7:80:54:48:2f:f0:
96:8a:f6:ef:91:27:68:c4:cd:a5:68:96:ed:a7:12:d3:0a:b6:
45:cc:ee:de:8c:d0:28:d4:00:66:97:9d:74:c2:29:df:8f:3b:
57:3b:47:6d:fc:5e:9d:8a:22:df:ce:c1:90:4d:22:88:4c:dd:
23:d1:20:50:e3:a5:df:01:b5:4d:82:6d:65:07:41:54:23:79:
ac:21:ef:17:22:b2:53:7d:e3:94:a4:92:df:35:59:72:57:c1:
d4:98:44:e6:dc:0e:cd:b2:4e:75:f5:c6:c2:7b:c1:a1:f3:1b:
e3:0d:2e:fd:f2:8f:4b:8c:8e:cf:28:8a:95:ba:08:ce:cc:65:
bf:ed:a8:b6:a4:6a:06:14:63:f6:fc:8c:6d:d1:89:83:b4:f5:
7a:e9:56:1b:93:1a:8b:94:16:85:2a:54:4b:9d:66:d6:b1:d3:
bf:99:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:38:22 2025 by rpki-client