Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: JUI0344ALnGvEBsk9TR/aE8945UHl2Q4CLdpDDYcCWY=
Subject key identifier: B7:8C:F2:81:9B:1E:34:03:BD:E5:37:0C:09:04:1D:03:A3:F7:4E:E6
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01988A69B44B67A73C6909EC8D44A444BE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1341
Signing time: Fri 08 Aug 2025 16:00:39 +0000
Manifest this update: Fri 08 Aug 2025 16:00:39 +0000
Manifest next update: Sat 09 Aug 2025 16:00:39 +0000
Files and hashes: 1: 5ri5iGiG22v_HhM9Ozo3KWH-CC8.roa (hash: NhdhB8sJfKSoLpwMYcbbCRM5nW4NYa5+iuW7C12eUDw=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: AdQr2xhwtPmD8XsW4/CuLOAAOx9jzjU1dGjn8Hq/1BA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:b4:4b:67:a7:3c:69:09:ec:8d:44:a4:44:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Aug 8 16:00:39 2025 GMT
Not After : Aug 9 16:00:39 2025 GMT
Subject: CN=b78cf2819b1e3403bde5370c09041d03a3f74ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:84:dc:0e:75:87:59:03:31:81:cf:73:d7:
b5:43:ef:7b:77:9a:c9:c6:86:72:3e:82:98:57:6f:
a2:46:f2:51:25:e2:28:ec:7b:bf:56:5c:03:13:31:
c5:cc:2d:36:de:83:12:08:ef:31:96:33:9d:7e:4d:
71:dd:6d:0a:6b:43:6f:16:ca:a9:d8:ae:a2:54:91:
3c:13:e4:73:e5:18:69:4d:bf:26:df:37:eb:6c:fd:
9b:2f:4f:30:f4:60:3b:f4:f9:aa:7c:4d:16:f4:4d:
b1:25:06:7e:c1:d6:6a:de:30:8f:9d:7e:6b:11:b5:
37:d1:58:86:f1:dd:8b:50:fd:d3:a8:99:0d:92:dd:
d2:1e:8a:74:d6:36:97:9b:69:1b:75:2c:33:b3:3b:
d8:25:d8:83:20:f4:a8:47:59:68:12:de:85:ea:e6:
d5:88:b0:d4:1c:09:d0:da:21:f5:eb:e0:21:40:ff:
10:9b:8e:aa:c5:90:f9:f4:f2:a5:8c:7d:47:38:0c:
44:0f:a1:5b:02:b8:c5:0e:c0:81:0e:ab:33:99:d0:
67:08:ee:79:af:fa:f1:33:66:26:ae:94:9e:1e:00:
87:36:94:8a:81:c3:df:ae:48:25:87:e0:c2:96:3d:
83:fa:eb:da:1a:2f:c4:70:42:3c:02:3d:50:25:50:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:F2:81:9B:1E:34:03:BD:E5:37:0C:09:04:1D:03:A3:F7:4E:E6
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:8f:a1:5b:33:5d:a4:7a:be:88:4f:4b:85:54:a0:42:bb:
68:19:8d:16:6a:67:07:22:af:31:67:57:2a:42:a0:24:8c:a8:
67:c9:c8:41:ed:d0:05:9a:ca:7a:49:7e:eb:b8:6e:eb:3e:a0:
9c:43:56:60:97:c6:32:a6:81:8e:10:ba:c6:c7:25:21:d9:5d:
a0:53:2b:e1:fc:fd:a8:f5:4e:01:dc:bc:8b:94:4a:bb:5c:2c:
84:85:6e:56:54:a7:9e:e8:1b:65:53:cc:17:c7:9e:f8:88:8f:
46:48:62:b9:81:7b:16:17:41:3c:78:05:e9:a1:4b:61:8e:29:
9d:da:91:ad:1b:f4:f4:e1:c5:72:d9:d8:0f:ce:84:e9:bd:5a:
73:56:7c:82:a1:68:1b:98:77:9d:72:d8:24:74:83:a6:f8:10:
45:ea:69:34:ef:3a:dd:39:bd:b5:12:ac:e6:ef:ec:93:5b:fb:
b6:6b:f9:98:1d:c2:ab:9b:5b:f6:2f:be:36:00:98:68:29:b5:
6b:fc:c1:ea:6b:d0:fd:15:b9:12:c2:3d:bd:5b:48:9c:c5:fb:
14:41:3f:5f:48:bb:02:7b:68:75:ca:a2:9e:40:f5:a8:79:ef:
e4:2a:a7:c3:e2:ae:e7:28:f1:6a:bc:63:0c:a9:7c:de:a8:3c:
70:70:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:29:53 2025 by rpki-client