Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: 2vRsyYUh/DNM5Scsde2y4ChyfAPxm5DX4bv07puGmX8=
Subject key identifier: D5:13:CC:F8:FC:11:DF:79:AA:52:F6:6B:18:7D:A5:06:71:A0:12:31
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01968B13AD2E9B92619C8B7344A902614696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1238
Signing time: Thu 01 May 2025 09:00:44 +0000
Manifest this update: Thu 01 May 2025 09:00:44 +0000
Manifest next update: Fri 02 May 2025 09:00:44 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: rCAZuP8vLWq6JC1Y/S2ovS5+ux7zEw///p4XCiu3gZY=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:ad:2e:9b:92:61:9c:8b:73:44:a9:02:61:46:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: May 1 09:00:44 2025 GMT
Not After : May 2 09:00:44 2025 GMT
Subject: CN=d513ccf8fc11df79aa52f66b187da50671a01231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:01:68:74:04:c7:ec:d5:50:e8:2d:3b:15:
a8:38:02:26:98:68:d2:ea:8d:46:89:4d:1f:0b:95:
3f:05:09:05:41:35:46:86:85:1a:e6:13:8d:73:4f:
a3:13:91:38:fe:23:1a:98:fe:66:21:50:5d:8c:86:
19:55:3c:77:4e:8e:7d:4a:41:f6:ba:be:d1:56:e4:
78:9d:36:b9:a8:d4:17:62:9c:ad:a0:b5:36:95:bd:
d8:49:f9:98:0c:19:04:ad:00:91:94:ad:c6:af:8e:
cc:82:17:f4:85:f6:d1:b9:b5:a1:2b:91:5c:a5:d4:
bb:1e:85:ad:91:72:5a:92:e2:1a:ef:3c:ec:55:5b:
5b:36:fb:f3:3b:3e:00:ee:20:b5:4a:3f:1f:8b:aa:
d1:e2:2e:7f:aa:15:2d:8e:8c:af:f7:10:df:08:d1:
01:16:1a:65:f9:46:5a:6f:f7:24:45:6a:24:84:e9:
41:b8:93:4d:b9:ef:c5:03:ca:5a:b0:74:b8:29:9c:
57:97:6e:02:57:d1:3e:fc:d2:6a:a3:94:09:74:97:
68:26:ca:1f:6c:0e:a4:f1:14:f6:e1:c1:59:0d:59:
f9:87:99:03:4c:de:52:38:ba:43:9b:5c:2c:7e:d2:
8f:fd:e5:4f:09:78:d2:dd:1a:cf:b2:04:e8:ab:31:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:CC:F8:FC:11:DF:79:AA:52:F6:6B:18:7D:A5:06:71:A0:12:31
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:0d:21:1a:aa:de:ee:6c:8b:19:84:22:69:c0:2a:2f:13:
e9:28:12:c6:be:74:d8:56:e4:07:6b:83:63:fa:a2:7c:ec:79:
7d:f1:5f:72:f9:4b:b1:c3:cc:49:4a:20:6b:6a:1d:df:4d:d7:
f1:91:f0:5c:ca:33:8d:ea:84:82:db:b0:c0:7b:1e:cc:8c:39:
67:5c:36:7d:62:2a:79:1e:f8:1c:cd:e1:48:f8:20:56:16:68:
b0:22:56:7f:b1:eb:d0:d1:19:e2:c1:1e:38:b5:88:83:9b:65:
bb:3f:45:50:de:b7:5a:26:c8:06:ab:9f:25:7f:4c:7d:59:70:
69:a0:b8:0a:2b:20:4a:0a:c8:a9:d6:a9:d4:d3:a6:5a:6d:58:
d0:96:05:e7:6b:c7:9d:12:98:39:42:ae:aa:fe:aa:53:18:91:
f1:2f:0f:20:b1:7a:5d:c1:10:ae:14:76:82:bc:e3:f9:e8:63:
9f:26:79:27:4c:b4:89:fe:1b:83:83:f7:6a:36:ab:30:2e:24:
52:7c:e7:44:c6:64:dd:44:8c:5c:22:9d:5c:b3:c2:e4:3e:3f:
b9:16:16:20:a5:d8:e0:ce:75:31:97:63:d3:52:70:69:d6:54:
31:ce:d6:90:d8:27:41:65:4b:0d:c8:8c:d3:71:7b:a7:f6:d6:
bf:d5:c3:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLE60um5JhnItzRKkCYUaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0
Zjk2MjQwHhcNMjUwNTAxMDkwMDQ0WhcNMjUwNTAyMDkwMDQ0WjAzMTEwLwYDVQQD
EyhkNTEzY2NmOGZjMTFkZjc5YWE1MmY2NmIxODdkYTUwNjcxYTAxMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusUBaHQEx+zVUOgtOxWoOAImmGjS
6o1GiU0fC5U/BQkFQTVGhoUa5hONc0+jE5E4/iMamP5mIVBdjIYZVTx3To59SkH2
ur7RVuR4nTa5qNQXYpytoLU2lb3YSfmYDBkErQCRlK3Gr47Mghf0hfbRubWhK5Fc
pdS7HoWtkXJakuIa7zzsVVtbNvvzOz4A7iC1Sj8fi6rR4i5/qhUtjoyv9xDfCNEB
Fhpl+UZab/ckRWokhOlBuJNNue/FA8pasHS4KZxXl24CV9E+/NJqo5QJdJdoJsof
bA6k8RT24cFZDVn5h5kDTN5SOLpDm1wsftKP/eVPCXjS3RrPsgToqzG82QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUTzPj8Ed95qlL2axh9pQZxoBIxMB8GA1UdIwQY
MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt
OWMxNWZiZDVlZTVlLzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl
LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYgNIRqq
3u5sixmEImnAKi8T6SgSxr502FbkB2uDY/qifOx5ffFfcvlLscPMSUoga2od303X
8ZHwXMozjeqEgtuwwHsezIw5Z1w2fWIqeR74HM3hSPggVhZosCJWf7Hr0NEZ4sEe
OLWIg5tluz9FUN63WibIBqufJX9MfVlwaaC4CisgSgrIqdap1NOmWm1Y0JYF52vH
nRKYOUKuqv6qUxiR8S8PILF6XcEQrhR2grzj+ehjnyZ5J0y0if4bg4P3ajarMC4k
UnznRMZk3USMXCKdXLPC5D4/uRYWIKXY4M51MZdj01JwadZUMc7WkNgnQWVLDciM
03F7p/bWv9XD/w==
-----END CERTIFICATE-----
Generated at Thu May 1 17:05:13 2025 by rpki-client