Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: tErhD/uNb40kr8ouDXmQaodcEdwHjkjrNpqIuf4MX7s=
Subject key identifier: 44:5F:8F:3E:F4:04:49:8E:DB:92:8E:1F:53:F4:94:11:A1:FF:BE:E9
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 0196857FE16490D59A8E0A848D0259060109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0923
Signing time: Wed 30 Apr 2025 07:01:12 +0000
Manifest this update: Wed 30 Apr 2025 07:01:12 +0000
Manifest next update: Thu 01 May 2025 07:01:12 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: w/IwrIUdmtshOffZZLnwN03cR559zKbGL+xJocaBDlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:e1:64:90:d5:9a:8e:0a:84:8d:02:59:06:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Apr 30 07:01:12 2025 GMT
Not After : May 1 07:01:12 2025 GMT
Subject: CN=445f8f3ef404498edb928e1f53f49411a1ffbee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:09:da:31:3c:39:8f:60:fb:94:f6:18:87:
f3:89:14:17:d3:74:45:3b:ff:ee:67:7a:d8:e3:6a:
20:d7:fd:8b:75:7c:8f:55:37:cb:69:bf:40:ed:ca:
f6:0e:ba:b8:27:e0:6f:7d:35:2d:a3:e5:d5:9e:fd:
20:91:47:9c:ce:3e:39:6e:eb:85:c0:05:74:ff:75:
f0:3d:a5:ba:af:99:95:9c:5a:02:80:62:36:68:7a:
88:ee:71:8b:5e:fc:e0:c4:45:97:06:1a:3d:58:23:
ac:f3:19:15:02:20:86:04:8e:0d:80:b2:94:fa:7a:
bc:a6:d1:f4:55:30:04:d2:a4:8b:dc:bd:dd:3d:cc:
62:a8:ff:9a:1b:28:40:26:c6:74:84:0f:41:4c:84:
3c:61:59:fd:91:9f:b0:e9:eb:6a:3b:2c:51:71:0b:
33:e9:26:20:67:c6:5d:d1:e2:b7:fa:ae:7e:70:cd:
eb:82:cd:1f:ee:c0:c7:35:d3:ba:32:af:ff:1b:4b:
23:72:5b:b4:9e:63:35:50:51:65:97:2d:e9:c9:5e:
e2:06:0d:b2:e9:08:e5:09:ff:0c:c9:c6:ef:8f:9e:
54:11:fb:51:b2:86:2e:5c:8b:1f:5a:38:64:3b:9d:
3d:e5:1a:db:2e:d7:77:b4:4c:0d:70:f6:9a:87:75:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:8F:3E:F4:04:49:8E:DB:92:8E:1F:53:F4:94:11:A1:FF:BE:E9
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:57:81:70:f7:b9:bd:6a:0e:11:29:4a:c0:df:78:e1:e6:1b:
4f:c8:a3:27:f6:fb:f6:e9:2b:bd:40:06:19:42:46:29:bf:21:
38:6c:b0:4c:1b:ad:c2:33:91:00:8a:c1:4c:97:0d:9c:6b:52:
18:e6:91:06:5e:28:83:2a:ae:e3:ca:9d:59:87:23:a0:29:9c:
1e:e9:59:65:4c:03:87:56:9c:80:6e:73:bf:49:87:c6:da:ab:
a0:1e:4d:05:9d:49:7e:3d:cf:c4:44:1d:ca:1d:66:ed:5a:5b:
67:cf:59:57:01:9d:20:b0:6f:ef:fe:26:d0:e2:0d:71:da:7d:
85:49:39:7a:f0:32:12:f1:96:e8:80:8d:40:9a:8e:19:50:bf:
a8:23:0a:51:1c:fe:fb:48:12:7e:2a:df:26:2d:cf:ee:cc:af:
a7:ae:34:e7:59:2a:f8:10:30:8b:aa:3f:ba:a9:de:23:63:cc:
f4:71:e3:09:97:5f:8c:d0:7f:8a:c3:7b:c7:ac:40:2c:13:9a:
2d:4e:74:60:26:97:1c:a7:94:a3:0a:89:a6:5f:26:ac:af:9a:
d8:d3:91:2b:81:a7:c2:75:b6:63:7a:c1:16:f9:6e:5d:9f:51:
53:56:7f:43:e0:96:32:8c:76:44:7a:29:b3:75:09:65:2f:d7:
e5:91:5d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFf+FkkNWajgqEjQJZBgEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODk3YjMzNTM4MmY4MjI0ZjVkODkwZTMxYjM4NjMyMWM2
YmIzZWQwHhcNMjUwNDMwMDcwMTEyWhcNMjUwNTAxMDcwMTEyWjAzMTEwLwYDVQQD
Eyg0NDVmOGYzZWY0MDQ0OThlZGI5MjhlMWY1M2Y0OTQxMWExZmZiZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOYJ2jE8OY9g+5T2GIfziRQX03RF
O//uZ3rY42og1/2LdXyPVTfLab9A7cr2Drq4J+BvfTUto+XVnv0gkUeczj45buuF
wAV0/3XwPaW6r5mVnFoCgGI2aHqI7nGLXvzgxEWXBho9WCOs8xkVAiCGBI4NgLKU
+nq8ptH0VTAE0qSL3L3dPcxiqP+aGyhAJsZ0hA9BTIQ8YVn9kZ+w6etqOyxRcQsz
6SYgZ8Zd0eK3+q5+cM3rgs0f7sDHNdO6Mq//G0sjclu0nmM1UFFlly3pyV7iBg2y
6QjlCf8Mycbvj55UEftRsoYuXIsfWjhkO5095RrbLtd3tEwNcPaah3UpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERfjz70BEmO25KOH1P0lBGh/77pMB8GA1UdIwQY
MBaAFNKJezNTgvgiT12JDjGzhjIca7PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTct
NWI1MzMyYWYxODUxLzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTctNWI1MzMyYWYxODUx
LzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVeBcPe5
vWoOESlKwN944eYbT8ijJ/b79ukrvUAGGUJGKb8hOGywTButwjORAIrBTJcNnGtS
GOaRBl4ogyqu48qdWYcjoCmcHulZZUwDh1acgG5zv0mHxtqroB5NBZ1Jfj3PxEQd
yh1m7VpbZ89ZVwGdILBv7/4m0OINcdp9hUk5evAyEvGW6ICNQJqOGVC/qCMKURz+
+0gSfirfJi3P7syvp64051kq+BAwi6o/uqneI2PM9HHjCZdfjNB/isN7x6xALBOa
LU50YCaXHKeUowqJpl8mrK+a2NORK4GnwnW2Y3rBFvluXZ9RU1Z/Q+CWMox2RHop
s3UJZS/X5ZFdSw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:48:03 2025 by rpki-client