Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: E0kbqyWNemnHQi7LxyvfDLrkSkrN0Ng+aIOh5lsE8jM=
Subject key identifier: 73:22:99:D4:D8:22:91:31:AE:10:87:B6:35:21:B1:D3:7C:0E:4B:7B
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0197B7455A6D7AA1BCC21884144CCB296263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 062E
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 1XnNzfB3AMcmsSN7/xJAx3MxhqUs1K9I38tkxySjG7g=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5a:6d:7a:a1:bc:c2:18:84:14:4c:cb:29:62:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=732299d4d8229131ae1087b63521b1d37c0e4b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:99:28:b4:fc:f7:6e:44:a7:6d:1f:b1:9e:
28:a7:83:72:da:48:92:fa:ab:45:72:5f:47:2f:bb:
f9:6d:1a:cc:48:0e:56:c0:3a:b4:bc:78:ef:27:68:
0e:22:20:8c:89:72:17:81:ca:5f:c8:89:22:c0:c6:
91:57:04:8b:3a:3d:ae:eb:0d:06:af:b6:2d:51:2f:
7f:ca:4d:e7:cd:67:86:f4:dd:4c:44:62:a8:0e:f9:
90:c6:25:bf:4a:6f:ef:d6:9d:77:1f:58:71:c6:30:
e6:54:d3:b0:0d:42:99:70:84:b4:64:69:c8:2e:90:
d3:37:c7:7d:d1:26:1c:7c:86:8d:9a:e5:24:5f:f7:
de:01:39:c6:3a:0a:06:11:a5:7b:83:84:26:b2:50:
e2:af:de:fa:5b:e7:61:96:4a:76:08:fb:2d:e4:a5:
75:5e:88:99:44:d8:85:4c:e2:0e:a8:67:56:35:80:
a1:d1:0a:95:f4:82:e5:75:cb:32:9c:25:28:d6:a2:
c5:d6:57:a4:3a:50:b4:a9:8d:d7:24:33:59:e1:a8:
a6:b3:3e:b3:6f:66:b1:54:0c:b0:63:78:96:d5:09:
34:ee:fd:a8:eb:9d:97:60:3d:95:14:3d:31:0f:93:
c3:43:4e:8f:97:dd:10:9e:15:49:78:4f:53:e7:85:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:99:D4:D8:22:91:31:AE:10:87:B6:35:21:B1:D3:7C:0E:4B:7B
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:4c:39:51:37:31:d9:f2:3c:0e:55:6a:c6:b8:f4:cc:79:
45:6e:0e:59:6c:61:68:20:3b:e3:5f:9c:5d:8e:0a:7a:5d:3f:
3a:81:ef:db:d0:bb:4f:c8:40:7f:0c:3a:5f:b5:d9:88:ac:e4:
44:d6:b6:38:a8:a9:55:2e:4f:45:60:c7:79:56:87:05:95:e5:
75:30:37:a1:90:57:36:32:91:21:83:25:27:6a:75:ec:fc:ef:
1e:b8:bf:3c:15:0a:c1:b3:97:72:be:0c:a3:d5:e8:d0:e8:af:
41:50:14:c3:02:ec:88:9f:f3:a1:2b:ce:74:a5:fb:90:05:76:
c0:c2:1f:0d:9c:43:05:e6:f7:00:8b:4b:73:86:92:aa:b1:58:
d3:d8:ea:af:3f:47:2a:3f:ed:54:ee:d3:fe:4b:60:6b:ab:bf:
72:82:05:de:02:9a:6c:d6:78:d7:39:c3:de:58:48:d7:21:e6:
fd:be:ad:d5:f6:be:a6:f7:8a:bb:0a:4d:ba:e4:1e:f3:8f:e5:
1b:26:6e:fd:f1:12:93:a4:db:64:14:ba:c5:e3:22:2e:85:f4:
03:2d:0c:46:43:db:2e:d0:9b:f6:be:a0:1e:cc:fb:34:cb:8e:
52:8b:1d:c3:fe:c0:08:36:63:61:0a:53:fc:36:a2:ff:9a:7c:
bf:80:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:28 2025 by rpki-client