Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: Bv2rlIy8IvK6+2jHl20nuCWZlvdnAU1Wj/9A8jabLHo=
Subject key identifier: 77:D1:10:ED:EF:C2:89:B4:67:EC:66:43:4B:D3:65:4F:3B:9E:1B:3B
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01965D28191EFA94E89DD7F2F03D2C08E1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0578
Signing time: Tue 22 Apr 2025 11:00:31 +0000
Manifest this update: Tue 22 Apr 2025 11:00:31 +0000
Manifest next update: Wed 23 Apr 2025 11:00:31 +0000
Files and hashes: 1: 6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa (hash: Q3eJR3BSlZ4JFHQreAzZwVy1P41pR11wDqAIlfL2GPo=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 4QV7T47v7rksPCNGHMFhE2swiwL37VnzOC5gVHU29Xc=)
3: jrvfRpZvRBtk_Yg60PvxHmKAprU.roa (hash: Hyd8SOBLyLw3LBdkd19m4cdLrzfDjpQ+9epp8rr0M9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:19:1e:fa:94:e8:9d:d7:f2:f0:3d:2c:08:e1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Apr 22 11:00:31 2025 GMT
Not After : Apr 23 11:00:31 2025 GMT
Subject: CN=77d110edefc289b467ec66434bd3654f3b9e1b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:c0:6c:ac:c4:e7:cf:2e:aa:df:93:cd:35:
f8:21:95:35:a8:2a:04:b8:50:19:58:53:05:57:ed:
19:bb:04:c3:c9:1a:d1:9c:fb:d4:96:97:e4:35:f7:
b6:ef:20:62:bd:e0:41:c6:3f:4d:00:91:82:ec:81:
78:c2:44:17:9c:39:c2:e6:bc:4a:b6:97:29:c4:0f:
2b:34:c1:e4:14:11:73:ea:86:02:a6:2b:c1:ae:bf:
1c:89:fa:9a:fa:b3:f2:9c:27:85:54:3a:dc:36:49:
50:7f:5e:92:94:d2:09:8e:1d:aa:83:15:af:1f:4d:
4c:2e:21:91:a3:68:49:7c:00:63:57:02:c7:74:0c:
f2:5d:f0:c1:74:58:72:e8:59:0e:66:03:55:c3:bb:
17:56:09:ab:2b:84:f1:1d:83:6a:bd:e0:28:4a:44:
e1:cd:ed:26:a7:cb:e5:c2:92:85:83:d3:65:a0:f9:
bb:cc:c5:c2:51:40:40:4a:da:8a:8b:51:c3:75:48:
1d:51:5f:78:80:1a:8e:e5:f5:c7:eb:19:e6:65:8f:
08:48:88:cd:73:cb:f9:8a:86:9e:97:da:09:51:a5:
eb:b5:17:1b:84:ad:2e:54:02:03:36:f8:57:db:c0:
73:fc:b7:dc:e7:64:90:36:05:21:39:fc:6c:b6:d5:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:10:ED:EF:C2:89:B4:67:EC:66:43:4B:D3:65:4F:3B:9E:1B:3B
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:91:de:31:8c:f4:73:45:1d:71:bc:84:cd:3b:ea:8e:1f:
75:a2:01:f9:6b:3c:d6:40:d2:26:51:aa:b4:6a:80:81:6a:55:
3c:77:08:eb:56:5e:8d:0e:98:e1:f5:ff:33:e2:2a:d1:42:ae:
1b:a8:ba:7d:27:d9:41:8a:e2:13:19:19:b5:54:34:6d:28:90:
cd:ba:82:0e:78:1d:5e:7d:e8:d4:f8:a7:7d:e6:fa:3a:f4:01:
22:a0:7d:0e:40:ca:18:64:1d:ee:bf:d8:61:59:f6:92:06:a3:
41:4d:91:1b:1b:c6:d0:8d:6d:db:86:19:cd:f7:39:e7:c3:b5:
4a:65:cf:06:76:c7:1f:1a:70:8c:ce:52:24:d1:95:51:ce:da:
a5:18:98:46:75:6d:29:d0:8d:e3:21:05:c2:24:57:5f:ed:90:
aa:6d:da:bc:03:37:7e:16:7b:50:a2:67:9b:38:18:f2:50:34:
f8:02:84:6d:85:c9:92:2d:68:82:6b:01:bf:f5:86:87:e5:b7:
c4:18:d1:a1:2b:77:26:3e:52:1d:d5:db:15:44:bf:1e:2c:c2:
5f:07:2f:63:0e:05:f3:cd:96:40:84:53:c7:b6:3e:50:0c:38:
3c:a1:6c:0d:09:39:c5:7c:c8:3a:18:3b:57:0f:df:20:0b:84:
e0:dc:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:14 2025 by rpki-client