Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 240F5NiXCWAiXF/SqYYqRyo5AAFIiaSyCZJdfDRujkE=
Subject key identifier: C7:69:1B:14:0A:1A:86:D0:67:8B:FC:EA:04:AA:B3:AD:F3:25:1A:48
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 0196BE257DFDA52B9222B5F188D7E270EAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 05AD
Signing time: Sun 11 May 2025 07:00:50 +0000
Manifest this update: Sun 11 May 2025 07:00:50 +0000
Manifest next update: Mon 12 May 2025 07:00:50 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: LldAXpkn6hbVHgQwsOCcxfn0gPfhRv3HxS1ESdoJXmc=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:7d:fd:a5:2b:92:22:b5:f1:88:d7:e2:70:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: May 11 07:00:50 2025 GMT
Not After : May 12 07:00:50 2025 GMT
Subject: CN=c7691b140a1a86d0678bfcea04aab3adf3251a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:3d:8e:7c:65:f0:f5:b5:11:4a:e4:32:8d:
8d:e4:8e:38:49:e2:94:4a:df:e4:bd:a9:03:cc:18:
30:1f:3e:df:99:91:07:29:d1:72:e2:ad:d0:f7:01:
7d:d9:83:35:df:87:34:d3:11:d5:f1:f8:1a:d0:0d:
e7:85:3a:29:95:90:3c:be:e8:4f:d6:c7:d1:62:81:
61:0a:b4:e5:0b:d4:0b:15:5a:d7:54:c7:22:67:0f:
cc:1b:03:06:44:f8:76:7c:29:e8:b9:c8:26:83:aa:
71:aa:65:b3:5c:93:4a:72:f5:3c:e6:c6:2c:0f:36:
5d:44:c6:cd:05:5a:6b:43:9e:54:63:2b:51:d1:97:
71:7f:23:5e:7b:ac:1e:bf:59:c1:fa:7c:37:fd:c1:
29:33:d6:83:d3:26:b7:25:c5:c8:41:f0:59:ad:38:
2f:7b:13:f4:9b:bd:a9:1e:e0:53:82:96:23:1b:a6:
55:59:bf:6c:e0:38:c6:61:49:25:79:6c:c0:16:27:
9c:e3:7a:3e:3a:81:f2:58:5b:dc:b3:c1:38:52:52:
4d:8e:3d:fc:7c:65:f1:f8:df:4e:f9:09:ed:fb:77:
83:c7:78:ab:ec:a3:11:eb:f4:fd:bb:48:ca:ba:04:
d5:4e:c7:cf:8f:4e:03:2e:a5:4a:d7:c0:f2:d6:16:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:1B:14:0A:1A:86:D0:67:8B:FC:EA:04:AA:B3:AD:F3:25:1A:48
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:c3:9b:f1:58:4b:81:6d:70:ab:c9:dd:4b:bd:3b:5f:af:
46:2a:13:48:76:a6:8d:41:a4:58:0e:de:fc:84:fa:f8:3b:0d:
c4:80:f9:14:0b:99:87:fc:e6:cf:2d:6c:b6:57:68:7e:87:2e:
aa:6b:ea:4c:8c:1d:9f:35:f8:2e:a1:a0:4f:5e:9d:2e:43:87:
d1:a9:25:20:a2:b8:5b:1b:e7:1a:21:39:19:3e:1c:c1:71:21:
6d:cd:21:c5:e9:7f:12:84:fd:a8:70:28:ff:b6:7e:4e:6e:4c:
9e:d2:fd:26:a4:b4:9c:c3:a5:b9:82:b4:42:70:3d:c2:df:03:
f7:86:b1:2d:9e:39:0a:ac:dd:5d:66:fd:1b:a2:b3:fd:01:8b:
38:b6:f8:6e:b5:02:72:1a:34:8b:3f:e7:f5:5f:16:4d:65:4c:
22:8a:7b:a7:5f:8a:e4:a5:1a:f8:10:f4:7a:9b:30:77:90:c0:
93:1c:0c:3f:e9:cd:5b:68:6e:69:7d:9e:a1:7b:0e:92:a1:59:
be:25:89:00:0a:45:bc:ae:5c:00:0f:3a:03:ff:ee:12:f0:e1:
ca:08:bc:a4:47:5b:8e:99:36:cd:5b:d5:67:a7:f1:58:2e:52:
59:98:c7:12:e9:02:c6:a8:96:73:62:9f:ef:6d:19:bd:f1:a4:
22:2f:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:18 2025 by rpki-client