Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: yefuE0ZNEShO13YmfeJo4z4u5nmMXY4bbRMJuiem1YA=
Subject key identifier: CB:DD:9C:E8:8E:53:F4:86:F8:57:6E:1E:50:8F:C5:C0:5C:51:92:85
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0197B88EAD35D53CFBD96B66A08BB5277389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 12D4
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: ZaucaDZxKWtpi11nDpUF5LwCNf/iIqRdtkMjwk0DeVM=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ad:35:d5:3c:fb:d9:6b:66:a0:8b:b5:27:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=cbdd9ce88e53f486f8576e1e508fc5c05c519285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:38:d5:ae:27:09:ad:f7:b7:bc:9a:00:57:
83:6f:e0:09:5c:bc:e7:5d:39:dc:19:9d:aa:2c:44:
11:c3:3a:d1:52:72:9c:14:99:f2:b1:8e:45:a8:d9:
92:f3:f5:7c:39:26:6e:48:66:6b:71:72:e3:e3:bb:
c4:aa:16:bd:15:2d:2d:7c:96:65:34:bb:80:38:66:
4f:37:dd:21:f6:cf:71:aa:c4:42:e2:61:a5:cd:70:
9a:09:79:13:4e:b2:cc:e9:0f:fb:c2:3b:e0:96:ef:
48:a9:94:00:75:54:87:b0:95:2d:49:72:86:da:63:
ed:f9:ea:46:54:23:d8:2c:28:5e:b7:03:d8:25:f7:
13:87:de:e8:2d:58:67:50:c4:08:13:c0:1a:99:4d:
ae:fa:6d:9d:a5:09:8d:ea:54:8d:9c:8f:54:54:8f:
30:56:13:62:d4:f3:f1:ee:92:7a:97:8f:30:79:fe:
3a:e6:82:be:15:0a:cc:00:bf:d5:71:06:06:34:76:
46:27:c4:13:44:fe:27:4e:42:75:cd:1c:1b:35:06:
b6:1c:d6:32:f1:10:71:05:73:dc:a8:63:f9:71:49:
ae:57:ed:2f:ce:7b:45:94:e0:7a:76:fb:2b:93:8b:
7b:c9:53:09:28:d0:9f:70:a9:1d:77:44:b1:7b:bc:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:9C:E8:8E:53:F4:86:F8:57:6E:1E:50:8F:C5:C0:5C:51:92:85
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4c:57:e3:cd:ca:c5:13:cc:0f:e9:4c:bc:35:e0:4a:bb:27:
1d:34:6b:5c:a4:c2:77:d6:2e:1a:8b:28:95:8f:62:5c:14:7c:
f1:3a:00:44:b8:73:76:62:95:94:c1:83:42:d5:9a:71:2d:d6:
05:25:05:e8:53:92:23:f3:8f:6d:8f:df:74:b6:00:97:62:fa:
32:bc:82:2c:52:f8:c8:8c:50:54:c7:8a:34:e7:68:6f:4a:04:
d9:5f:c1:bc:e8:02:85:d7:9c:51:3d:9a:79:d4:26:ae:df:ad:
3c:86:96:80:e7:c6:10:34:cb:ac:d6:04:f7:96:6b:fb:4d:fd:
d8:76:8e:14:bb:fe:9a:37:75:cf:bb:88:d6:2b:da:9d:f0:10:
7e:f5:14:d3:34:47:5b:1c:98:81:89:f1:51:dc:bc:a7:32:38:
00:0a:6e:28:1c:ed:2c:47:77:e9:e1:94:5e:55:a9:ad:16:96:
4e:ed:ca:e0:6e:2a:6d:fc:dc:88:4e:02:7c:80:ad:18:c2:e4:
d3:3d:3e:9c:b8:62:cb:a9:f2:77:d2:1e:06:e4:ff:ad:10:b6:
33:5b:b3:d1:15:82:d8:5d:47:ae:8b:02:86:fd:e2:25:3e:a4:
6a:0a:ee:a7:69:18:c9:38:3b:32:11:34:4d:46:d7:9a:c0:ba:
c2:1f:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:47 2025 by rpki-client