Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: u7Qvh/FVVND+cJ8SBkG4U6CEFFnvzBQmqWBhinaWDik=
Subject key identifier: E9:CE:5E:17:B7:57:91:94:DE:C1:4A:8F:65:31:61:7C:55:A9:73:EB
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0196C12650F3C733B15253297BC23EC993FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1254
Signing time: Sun 11 May 2025 21:00:35 +0000
Manifest this update: Sun 11 May 2025 21:00:35 +0000
Manifest next update: Mon 12 May 2025 21:00:35 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: N+d42xsO7UeOLxYisrbJMTzoZS+N1/qDX+8qLLaAk1I=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:50:f3:c7:33:b1:52:53:29:7b:c2:3e:c9:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: May 11 21:00:35 2025 GMT
Not After : May 12 21:00:35 2025 GMT
Subject: CN=e9ce5e17b7579194dec14a8f6531617c55a973eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:ee:56:fc:46:11:43:15:ff:2a:dd:32:67:
6c:c9:0f:81:eb:e8:c6:92:14:e1:65:21:9b:b2:b4:
8c:03:1d:55:ca:90:18:17:16:c8:f3:9c:48:9a:38:
71:10:53:e6:bf:6f:da:26:f3:3d:db:69:ae:20:3b:
11:c6:70:59:1c:b0:da:49:2b:bf:95:0f:37:f6:8b:
b0:b0:77:6f:72:75:0f:cb:8c:1f:ef:e4:fe:7e:6a:
27:fc:32:27:bd:b6:07:c7:0f:45:bb:05:54:21:e1:
a1:92:2c:39:16:04:61:09:94:62:5a:f1:80:1a:dd:
e9:49:aa:48:9d:05:b4:d9:a6:9a:2c:a1:83:bd:8b:
e4:39:0b:63:b0:d1:c0:07:57:6c:6f:7a:25:17:ec:
55:96:7c:27:aa:d9:f8:d1:26:11:b8:c0:26:6c:13:
5a:43:bc:36:74:bb:cb:2f:46:23:08:1b:fe:99:86:
27:fe:1e:76:df:da:fe:37:29:a9:fc:b8:92:b4:ed:
fe:d0:d4:1d:d5:c1:a3:54:79:dc:63:15:fe:4c:3b:
19:8a:1a:60:b4:b5:60:f0:f7:53:0b:a3:84:58:ac:
fa:ee:25:99:a6:d4:0c:ac:ed:75:99:04:c6:03:3c:
9f:93:e4:0b:72:d9:bc:5e:34:ef:1d:ce:dc:66:9b:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:5E:17:B7:57:91:94:DE:C1:4A:8F:65:31:61:7C:55:A9:73:EB
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:a9:52:aa:b6:c6:5a:5e:0d:70:df:3a:ff:f3:dd:c7:8f:
01:92:33:68:e9:c0:0c:99:1f:bf:92:3e:0f:28:ac:17:76:8d:
b0:e1:b5:73:d2:07:89:7a:9a:ec:f5:09:57:c4:62:ab:7b:d6:
e7:89:af:b9:36:1a:b1:00:d1:a6:87:f2:7e:7f:8c:e4:f3:bd:
15:9d:f0:7b:0c:ef:78:14:e2:2b:1e:fd:13:46:23:b9:05:04:
36:4d:07:00:94:6d:9e:f1:7c:dd:82:94:80:df:c7:b3:15:e8:
d0:56:df:d8:6a:7e:f1:46:61:e3:c4:d6:b1:30:22:19:4d:d0:
7e:52:67:b5:09:39:b1:a7:85:66:c7:32:93:60:a2:10:f6:16:
b8:52:98:2d:57:7c:4b:08:ce:82:ac:6f:b2:0a:0f:84:cd:f4:
15:31:f9:bc:a9:de:7c:6c:0e:6c:5a:df:a2:dd:e2:b6:ed:ce:
8c:53:89:15:23:be:31:91:c6:f6:72:4e:63:82:cb:0a:04:e5:
b3:1c:48:a4:ea:df:7a:4e:15:65:7d:1d:6b:43:e4:fc:7a:f8:
5b:86:2d:dc:12:ae:c9:ee:90:a1:10:24:89:0c:fe:67:15:41:
f8:eb:e2:55:7e:65:fe:0b:ae:72:f9:0d:15:08:d1:ff:d3:73:
43:c0:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:16:18 2025 by rpki-client