Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: 5o3VALuRzv3+I1BtAD8xjWrCM4UqpVorT2xENcBpOOY=
Subject key identifier: AD:F2:23:7F:6C:2C:53:F8:D1:F2:20:64:15:9A:B2:41:7B:30:FD:2A
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019851205FBCD867BDDC6F8D29F4F900BFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1323
Signing time: Mon 28 Jul 2025 13:02:12 +0000
Manifest this update: Mon 28 Jul 2025 13:02:12 +0000
Manifest next update: Tue 29 Jul 2025 13:02:12 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: V8yugnMZAn/K3VH0d96D0I9+ECYKlSjSUxjbLCnoUf0=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:5f:bc:d8:67:bd:dc:6f:8d:29:f4:f9:00:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jul 28 13:02:12 2025 GMT
Not After : Jul 29 13:02:12 2025 GMT
Subject: CN=adf2237f6c2c53f8d1f22064159ab2417b30fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:bb:bd:bb:5d:c4:7d:90:17:2f:a6:65:2c:
3a:90:78:d3:03:46:62:54:25:5b:e8:d1:36:d0:4a:
32:42:43:91:f1:63:20:1c:b4:52:4c:8b:f2:ac:c8:
ae:d1:cb:c8:b8:48:24:dc:cc:3f:51:01:af:28:48:
be:55:87:13:40:eb:a5:d6:b2:78:1c:50:c6:85:4b:
92:50:28:cb:6c:62:e3:05:75:1e:67:6f:0b:73:9c:
7e:ab:6d:9a:c8:68:aa:ed:e2:4a:27:44:9e:8d:25:
d0:8e:01:9c:c1:da:9a:1f:22:c6:7f:ca:48:50:69:
ef:aa:b6:79:47:30:e3:64:50:d6:19:e1:51:fe:84:
e4:bc:81:5b:f5:b1:11:a1:8f:63:e9:d2:4c:66:a3:
ae:88:e4:de:86:11:0a:01:31:78:8b:12:f9:7e:e0:
5f:13:90:b0:ae:a5:98:ca:7f:8f:35:55:87:96:05:
b6:34:d7:0a:7f:ce:bf:6c:eb:83:82:39:1e:5f:4b:
42:b1:9d:15:63:99:9e:e9:ee:84:e5:50:37:62:dc:
0a:81:7f:41:35:92:e9:cc:2f:e7:f6:c8:82:72:ad:
f8:88:e3:5c:3a:74:04:12:20:5d:14:a3:d5:04:8b:
a5:b8:1d:ae:4f:a1:31:68:05:ee:fc:a6:4e:eb:4e:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F2:23:7F:6C:2C:53:F8:D1:F2:20:64:15:9A:B2:41:7B:30:FD:2A
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:06:33:71:c8:91:9f:c5:db:fc:b8:b5:e6:e0:fa:b2:1c:
69:f4:04:1a:7f:be:6a:14:02:fe:52:77:90:63:34:18:4e:2c:
5c:11:5f:b5:8d:04:d9:00:3d:e9:d4:bd:1c:6f:95:70:3a:9e:
e3:92:70:3b:3d:a2:84:a4:c4:d3:34:1d:9d:4a:56:bf:05:7a:
0f:23:2c:da:41:68:5b:c5:5f:83:d8:b6:77:fd:d0:fb:a7:d0:
e5:52:55:a5:d4:04:35:fd:c8:4d:4c:5c:e2:e1:cb:50:d9:0b:
65:1f:43:d6:3a:1f:07:c3:d8:07:ad:da:7e:df:64:93:62:6e:
f8:68:2a:b0:d5:3c:23:7c:04:39:33:4e:96:71:f7:1b:13:ad:
12:6a:c9:0c:c9:73:60:46:3b:c7:4b:fc:80:4c:af:bd:f3:35:
be:a7:9f:ef:79:87:92:82:89:33:bd:24:42:64:c0:fc:97:49:
67:e5:28:a4:d5:fb:80:0c:02:b6:84:f0:f0:37:9f:2c:e7:29:
89:da:7a:54:35:28:92:77:d6:ff:41:ea:00:3c:92:8c:e4:5d:
1d:78:e1:df:9d:e6:e7:8b:ce:28:bc:7e:8d:39:80:05:46:81:
f6:90:d4:03:a5:ed:1e:b1:a2:31:83:a5:f6:35:79:88:80:29:
88:41:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 16:44:32 2025 by rpki-client