Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: w6ZcCZ3qdqhF7kkv3n/DvqjoKp7muSF5RQ8q8xgzj1A=
Subject key identifier: 98:F7:E9:9F:03:98:26:5F:9D:52:3C:5A:20:A4:80:CE:F0:AD:AB:8B
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 0196C683DB736E2CE330F6490BB09E4AC934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0185
Signing time: Mon 12 May 2025 22:00:52 +0000
Manifest this update: Mon 12 May 2025 22:00:52 +0000
Manifest next update: Tue 13 May 2025 22:00:52 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: lfr46+oOfmUTqoGcpXq+rQO5VyYAW16B1783Zl8JN5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:db:73:6e:2c:e3:30:f6:49:0b:b0:9e:4a:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: May 12 22:00:52 2025 GMT
Not After : May 13 22:00:52 2025 GMT
Subject: CN=98f7e99f0398265f9d523c5a20a480cef0adab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:6f:ca:e2:8b:e8:93:32:0c:4b:97:ab:cf:
de:86:9f:2d:e7:36:9e:be:27:66:ec:12:a2:6a:2c:
30:35:99:4d:aa:16:f8:44:3e:b3:5f:2e:e9:14:c0:
54:c3:39:a4:4f:87:a1:69:31:63:de:93:3d:5f:d8:
47:ef:20:e4:d4:51:94:29:8e:80:2e:da:81:8c:5a:
eb:d5:e2:6d:96:99:9f:e3:00:e1:7a:a0:aa:1a:83:
e0:64:d3:ae:c7:59:f0:ad:ea:e6:33:d8:78:10:54:
57:c1:e7:15:2a:53:ef:10:99:32:22:92:d3:4d:2d:
f2:dd:b4:30:36:a5:f1:b0:61:9c:80:90:c1:52:a7:
bd:8b:95:36:02:7f:c9:cd:dc:cf:ad:f1:5d:ec:72:
19:ab:5c:e2:3f:ac:bd:1a:ec:d4:ef:fe:0d:2c:55:
f4:54:4a:63:6e:99:46:a4:97:4a:f8:7e:46:a5:af:
5b:af:47:e0:be:48:da:46:db:5e:f0:9c:dc:af:41:
e7:87:8b:0b:66:8e:77:1b:03:bd:cb:4d:cd:fc:5c:
ec:c3:f6:9a:de:dc:64:c7:fb:ab:e5:59:f8:0e:cf:
3e:48:5b:0d:42:02:e3:3f:d8:f7:32:26:7e:4d:13:
bb:bf:5b:ee:6d:63:2c:10:08:21:9d:c0:07:e9:19:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F7:E9:9F:03:98:26:5F:9D:52:3C:5A:20:A4:80:CE:F0:AD:AB:8B
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6a:ea:cf:f0:4f:90:48:03:2b:dc:0f:9f:d2:aa:24:da:bc:
80:14:97:58:bc:4c:f0:99:f3:ae:4b:31:56:6f:f3:3a:60:76:
f9:9c:7b:9f:5c:a1:87:03:8e:a1:41:de:50:ea:9f:21:f5:80:
90:97:97:bf:64:9e:c2:56:d6:3a:d5:eb:d0:7b:83:31:27:28:
51:92:11:fb:3a:85:24:7d:7d:0e:7b:b0:49:7d:c4:6f:a1:1a:
ef:2a:3c:c7:72:b1:8f:ff:d3:cb:b6:e3:c8:8f:fa:4b:59:9c:
bd:c0:f2:12:d3:75:e2:e2:c3:87:58:d3:e7:6c:ec:c1:04:43:
c5:d1:78:f2:73:e6:8d:e4:ac:f3:2e:7b:55:68:d3:65:ba:20:
1c:dd:b1:d2:30:c8:e6:55:96:97:2a:8f:b7:4c:da:80:82:14:
fa:01:8f:6a:fb:fb:37:3b:4d:70:cb:0c:dc:d8:3f:1b:26:66:
21:87:e9:48:fb:14:8f:66:58:c6:f1:27:65:98:b4:c3:33:0a:
fe:84:36:45:aa:c0:01:c6:e9:f5:69:f5:a8:e9:de:d8:df:a4:
b8:9d:d8:d0:8b:d3:ca:b0:34:da:82:06:ee:da:73:59:db:55:
54:3c:70:e6:d3:8c:ea:e6:c2:fd:22:78:dc:50:b4:a7:55:00:
84:82:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:57:52 2025 by rpki-client