Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File: OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier: Olxl/Xl3Y4JOfc6/o+E+7MLZncl+NkU1PE7YPMRYJ1s=
Subject key identifier: 02:F3:67:F9:3C:C7:CD:B9:3B:E3:F8:CC:4E:58:F4:73:CA:93:56:CA
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 01976C62222BEB707C9DCFF3B0CA178B7D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:00:59 +0000
Manifest this update: Sat 14 Jun 2025 03:00:59 +0000
Manifest next update: Sun 15 Jun 2025 03:00:59 +0000
Files and hashes: 1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: ptwT1NqbB9wFjvIldGo1aq1MQ3ED88SATj0a5vU0xFc=)
2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:22:2b:eb:70:7c:9d:cf:f3:b0:ca:17:8b:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jun 14 03:00:59 2025 GMT
Not After : Jun 15 03:00:59 2025 GMT
Subject: CN=02f367f93cc7cdb93be3f8cc4e58f473ca9356ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:5e:38:d8:c9:47:0d:5b:98:bf:2c:78:43:
a0:b7:c9:d6:29:fa:2d:0d:9e:da:d4:ad:25:98:33:
7b:3a:b1:4a:be:93:84:2c:1a:1f:da:89:27:9a:f9:
cd:b4:d6:7e:23:a1:02:95:47:f1:2c:b7:70:b7:bc:
70:a1:cb:7c:2b:e7:33:10:89:0d:b3:55:6d:15:b7:
8c:c7:ad:8a:b8:23:c7:5c:24:b1:53:60:54:cb:a7:
ce:b4:af:25:20:25:5f:7d:7d:7a:3d:db:d6:9e:a9:
d3:fd:b4:25:bb:f2:2d:aa:02:10:64:9d:04:b3:d4:
93:24:ce:01:85:21:cc:6c:64:c4:01:f3:28:0c:88:
5d:70:d8:8f:e0:59:cc:f9:1d:7c:8a:a3:9c:d3:00:
67:d8:be:e0:d0:92:43:5e:3d:3d:61:31:bf:21:62:
d4:04:e9:dd:af:24:e4:29:37:1c:06:70:a5:89:ca:
a3:1c:6f:00:9b:f9:6c:c7:ad:fb:64:5f:49:8a:95:
cb:63:9e:37:5f:38:77:2e:5a:d5:c4:d8:f0:e1:4c:
c1:cc:1a:9c:79:fe:66:d7:3b:5e:e3:fc:0d:92:bb:
f0:a1:b6:ea:a3:6c:f1:b5:1d:19:cd:7d:07:83:80:
95:eb:23:d7:ef:7d:65:67:44:b9:5b:f3:cb:6f:9a:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:67:F9:3C:C7:CD:B9:3B:E3:F8:CC:4E:58:F4:73:CA:93:56:CA
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7d:96:e5:c9:6d:f0:c9:91:78:d4:8f:fa:70:53:7d:fc:24:
2f:d7:f2:39:be:1d:73:f9:71:bd:51:88:dd:83:26:16:99:50:
87:68:06:e3:ea:ae:7c:54:35:0e:8f:70:54:45:dc:06:05:06:
f1:27:d9:6c:00:fe:17:39:c0:8b:91:f6:8b:e6:d4:b5:1c:12:
05:22:44:0e:2b:12:84:c0:4d:27:b2:56:b6:b4:39:1b:18:44:
19:48:c1:57:95:ea:68:3c:fe:a1:c9:35:24:2d:f7:ed:c8:5d:
8e:6e:a0:a7:6e:6d:8f:96:c5:66:37:e7:a6:5e:29:69:cd:44:
c2:96:f4:65:6f:5f:e6:e0:c4:f6:4a:cb:2b:82:de:1e:d0:a2:
81:0e:49:5d:9e:01:b9:d3:f1:f7:91:d0:ba:39:c4:81:21:9b:
99:59:70:0d:40:86:a5:b4:a0:12:2a:6d:ef:32:d6:89:36:1d:
80:40:d5:6c:7a:52:bf:5f:19:d7:9a:b7:04:68:31:36:b8:64:
4f:fe:e5:26:d1:83:82:b1:90:54:e7:f8:d6:0c:c5:0c:c7:ee:
70:80:d3:c9:08:ab:b7:b5:c0:36:cf:2b:3f:af:bc:2c:0c:24:
f6:d6:fa:16:f1:80:cd:78:e8:39:13:7c:80:6a:ff:3f:2d:e1:
46:e4:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:54 2025 by rpki-client