Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 4zJMtGQIW6F6FUITMfP4IBDFNrkKHYP4UPLxMOZOUQc=
Subject key identifier: 2E:FC:3A:1D:CF:AE:E0:45:DD:EB:E0:BD:23:5F:99:7E:5F:0E:36:0E
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01967266411750043F037809717FA36FFC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0583
Signing time: Sat 26 Apr 2025 14:00:26 +0000
Manifest this update: Sat 26 Apr 2025 14:00:26 +0000
Manifest next update: Sun 27 Apr 2025 14:00:26 +0000
Files and hashes: 1: 6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa (hash: Q3eJR3BSlZ4JFHQreAzZwVy1P41pR11wDqAIlfL2GPo=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 3KKqrP33LvvpMbpBSaD6dfHsH1PoS+jVB4edh6zxSVA=)
3: jrvfRpZvRBtk_Yg60PvxHmKAprU.roa (hash: Hyd8SOBLyLw3LBdkd19m4cdLrzfDjpQ+9epp8rr0M9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:41:17:50:04:3f:03:78:09:71:7f:a3:6f:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Apr 26 14:00:26 2025 GMT
Not After : Apr 27 14:00:26 2025 GMT
Subject: CN=2efc3a1dcfaee045ddebe0bd235f997e5f0e360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:e5:9c:6c:53:6e:db:00:c4:32:bf:32:88:
e7:83:4c:74:bd:79:14:8d:0f:bd:1a:a6:4e:e5:f2:
55:9a:77:7d:0b:4a:be:2e:ef:e2:cc:71:15:f0:f8:
f4:ac:cd:69:75:3a:1c:76:39:ae:b2:1a:d3:1d:81:
64:93:a8:83:c4:41:ae:7f:db:b1:49:62:7a:3f:1b:
e6:de:1e:96:bf:36:86:f4:2c:5e:ff:84:bf:71:f4:
a7:de:7a:c7:64:82:89:bd:01:c2:8e:dc:be:01:c8:
e6:18:d5:a4:78:0d:06:72:65:34:eb:d2:42:c4:22:
74:58:05:21:2e:d1:c5:45:7b:24:24:a9:39:57:aa:
2b:13:d5:21:87:cb:84:bb:e6:81:b5:0f:bb:56:c1:
1c:c4:b3:b3:5b:0b:69:60:97:8e:04:64:d8:d1:8b:
d0:5d:ea:00:0c:da:34:71:77:34:4a:bf:5f:ca:60:
b7:45:56:16:29:b3:da:53:bd:6e:a1:f1:70:c4:d9:
71:74:f8:c7:47:ec:f0:29:61:9c:95:f2:85:d9:45:
43:5f:e6:69:52:d8:5f:94:51:d0:a9:98:99:fa:74:
e0:f5:94:0f:99:4e:92:30:f6:db:ee:1b:95:43:ca:
a9:74:5d:aa:0f:d3:48:bf:90:12:ea:4c:b9:5c:79:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:3A:1D:CF:AE:E0:45:DD:EB:E0:BD:23:5F:99:7E:5F:0E:36:0E
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:43:00:6e:2e:9f:7a:79:82:e6:6e:85:e7:17:58:1f:3e:bd:
86:ab:c6:81:88:c6:7b:d0:b3:32:60:cc:93:9c:d8:bf:0d:2a:
13:c7:05:26:a4:ee:99:58:c6:7f:b6:ad:44:87:fd:b4:db:90:
50:64:4e:7a:7d:d9:95:18:f8:e4:ed:f7:64:1f:a4:f6:34:20:
2f:6f:78:b3:2a:f9:f0:4b:f3:04:64:c9:bf:aa:76:f8:e1:86:
f5:26:ea:d0:9a:02:3f:50:86:b1:fc:65:a7:d9:44:06:43:28:
01:72:88:31:40:e2:ce:34:df:f8:6b:de:c4:0b:cc:94:e6:63:
32:28:d1:ef:c5:c4:d3:38:0b:61:0a:1a:d2:74:2d:45:99:ee:
6b:97:1e:64:97:17:9c:5a:49:73:bc:c7:5d:d3:94:b2:4c:71:
f9:20:83:8c:f6:3e:7b:0f:ae:6f:8f:4d:b0:32:3e:96:32:47:
05:cc:e3:b2:1b:cd:b6:f9:e3:aa:68:98:47:e5:c7:35:cb:33:
ec:b8:0d:07:02:dd:76:cb:e5:21:39:25:db:5a:77:e1:ef:25:
ad:b3:41:b4:64:fd:ef:40:48:39:4d:bf:a5:0c:02:9a:f3:d8:
51:4e:2b:db:05:e0:8f:ba:5c:9a:b1:56:f8:a3:40:21:48:31:
74:45:8f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyZkEXUAQ/A3gJcX+jb/yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5
N2RlMzcwHhcNMjUwNDI2MTQwMDI2WhcNMjUwNDI3MTQwMDI2WjAzMTEwLwYDVQQD
EygyZWZjM2ExZGNmYWVlMDQ1ZGRlYmUwYmQyMzVmOTk3ZTVmMGUzNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzPlnGxTbtsAxDK/Mojng0x0vXkU
jQ+9GqZO5fJVmnd9C0q+Lu/izHEV8Pj0rM1pdTocdjmushrTHYFkk6iDxEGuf9ux
SWJ6Pxvm3h6WvzaG9Cxe/4S/cfSn3nrHZIKJvQHCjty+AcjmGNWkeA0GcmU069JC
xCJ0WAUhLtHFRXskJKk5V6orE9Uhh8uEu+aBtQ+7VsEcxLOzWwtpYJeOBGTY0YvQ
XeoADNo0cXc0Sr9fymC3RVYWKbPaU71uofFwxNlxdPjHR+zwKWGclfKF2UVDX+Zp
UthflFHQqZiZ+nTg9ZQPmU6SMPbb7huVQ8qpdF2qD9NIv5AS6ky5XHl2gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC78Oh3PruBF3evgvSNfmX5fDjYOMB8GA1UdIwQY
MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt
MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy
LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkMAbi6f
enmC5m6F5xdYHz69hqvGgYjGe9CzMmDMk5zYvw0qE8cFJqTumVjGf7atRIf9tNuQ
UGROen3ZlRj45O33ZB+k9jQgL294syr58EvzBGTJv6p2+OGG9Sbq0JoCP1CGsfxl
p9lEBkMoAXKIMUDizjTf+GvexAvMlOZjMijR78XE0zgLYQoa0nQtRZnua5ceZJcX
nFpJc7zHXdOUskxx+SCDjPY+ew+ub49NsDI+ljJHBczjshvNtvnjqmiYR+XHNcsz
7LgNBwLddsvlITkl21p34e8lrbNBtGT970BIOU2/pQwCmvPYUU4r2wXgj7pcmrFW
+KNAIUgxdEWP9g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:19 2025 by rpki-client