Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: YRIj2ZbVq67lITvlFmeLp60AKZTd9acoEp/Vqd5zWSo=
Subject key identifier: 25:87:2C:57:78:83:FD:73:39:1E:61:E0:37:DE:11:D5:D1:DF:6A:7D
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01976BF3F64BD2489CACF8359E04F8BACFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0607
Signing time: Sat 14 Jun 2025 01:00:39 +0000
Manifest this update: Sat 14 Jun 2025 01:00:39 +0000
Manifest next update: Sun 15 Jun 2025 01:00:39 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 1lwacZ6ZjlYaUz9cFUO5e2zEqskHLaW0AzaJ2YM8KpQ=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f6:4b:d2:48:9c:ac:f8:35:9e:04:f8:ba:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jun 14 01:00:39 2025 GMT
Not After : Jun 15 01:00:39 2025 GMT
Subject: CN=25872c577883fd73391e61e037de11d5d1df6a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:c0:13:38:06:c9:fe:c9:27:cc:e5:ab:1b:
cf:57:84:63:09:62:5a:41:cd:65:7f:76:3c:8d:6d:
b1:9a:35:95:b8:c9:23:90:7b:ea:f0:12:fc:c4:70:
c1:d6:2a:7f:3f:18:61:e2:f7:b0:01:05:37:1f:6b:
7d:f8:ac:4f:51:94:9d:e3:88:72:89:fb:7d:5b:30:
21:36:76:75:2f:7d:98:9e:de:76:6d:46:4a:d9:f3:
f5:b3:8d:ad:b9:0d:39:4d:d4:39:af:2e:38:7d:37:
96:d9:9b:7a:01:84:27:eb:77:10:3c:86:3b:42:ed:
86:1c:95:b9:8d:16:7b:79:e2:c9:d1:c0:29:f6:81:
c7:7d:51:16:b1:7f:0d:08:6e:11:11:58:b1:83:95:
50:fc:44:7b:69:2a:ec:dc:09:96:76:fc:0b:00:4b:
30:39:ce:82:b5:86:d5:1f:36:1d:90:f5:04:37:18:
f5:c7:62:69:38:a3:9c:54:8c:ac:16:11:80:85:70:
37:dd:b1:92:83:a7:91:a7:b6:51:f9:00:90:64:50:
ca:d5:be:a9:be:2b:f3:63:9f:74:dd:99:6c:58:f3:
c8:b3:1e:7c:a8:d8:66:da:85:ca:a9:72:d3:7e:32:
18:31:40:23:df:1a:1e:86:61:24:33:10:20:30:31:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:2C:57:78:83:FD:73:39:1E:61:E0:37:DE:11:D5:D1:DF:6A:7D
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:05:43:af:64:2c:ca:18:e7:9c:9d:e0:b3:f3:bd:08:70:a3:
10:8a:e5:83:f3:7a:df:5f:c2:d3:c7:f7:cf:54:2a:03:ea:c2:
de:4d:b2:fb:4d:6d:9f:a5:4b:9e:82:13:a7:71:12:be:2c:e6:
5d:6e:3a:8a:85:a7:62:4a:df:a6:9c:97:a0:37:a7:91:78:ba:
68:a1:b4:87:09:1d:60:21:cf:45:bc:f9:11:7a:e6:3a:0d:a5:
f1:81:cb:cb:4e:01:ab:44:57:ce:bf:3d:20:14:94:8e:09:ff:
9f:60:a2:b9:f8:47:60:6d:d5:53:18:91:97:c4:7c:c1:66:9b:
e8:65:20:e1:d5:32:9c:94:68:81:df:ac:6a:31:44:4d:b3:d3:
8e:ad:61:f7:2e:a3:03:94:35:77:1e:32:af:d2:1d:47:43:f7:
79:a3:92:08:64:9c:42:7d:d3:3c:c5:6a:f6:8e:58:59:31:3c:
2a:44:3b:c3:ea:cf:b2:94:5e:05:7f:a5:fa:98:37:6c:1f:4a:
c9:8d:51:46:06:7a:1c:53:07:bf:f8:42:f7:ad:4a:f5:7a:0a:
b7:cc:f2:3f:19:ae:45:9b:e0:1e:8a:14:a3:37:4b:0d:d9:3f:
ba:7f:62:24:d7:a5:21:cd:4d:66:20:ca:54:cb:4a:80:2f:67:
8f:52:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:04 2025 by rpki-client