Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File: OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier: ru52oNcO+uVWPWJjS2kao9c41OUVfHm/DuJ9STsyo5I=
Subject key identifier: 98:3E:13:35:C6:DB:1E:8E:34:90:FE:96:D1:F0:EE:47:70:6F:40:B1
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 01975158EB5581DFD6A463E5A778DA90AE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 21:01:11 +0000
Manifest this update: Sun 08 Jun 2025 21:01:11 +0000
Manifest next update: Mon 09 Jun 2025 21:01:11 +0000
Files and hashes: 1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: 87zeh8t5+1ogkdHmQ4AQbBseEMaQJohFLHupviCjd2Q=)
2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:eb:55:81:df:d6:a4:63:e5:a7:78:da:90:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jun 8 21:01:11 2025 GMT
Not After : Jun 9 21:01:11 2025 GMT
Subject: CN=983e1335c6db1e8e3490fe96d1f0ee47706f40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:1a:ee:0c:eb:66:04:3e:2a:fe:b6:8d:f7:
bf:c1:fc:8c:18:26:84:70:7b:0c:aa:37:a3:f1:60:
bc:67:d6:90:ed:a9:f1:26:9a:e7:2c:3b:5f:85:27:
4f:c4:20:44:2f:77:d4:26:a9:c8:57:c6:99:1a:bc:
c2:61:b2:d7:5b:60:0a:da:82:36:e7:f3:a0:76:20:
36:cd:66:5e:54:7c:3b:d3:6f:8a:79:e9:ab:5c:ee:
6c:9e:32:f6:22:82:3d:6f:cb:ed:ab:2b:78:dd:b0:
29:bc:c6:95:e3:a0:59:2b:44:f0:2b:48:e9:42:6c:
22:a3:88:42:cc:d6:a9:cc:a6:58:d7:94:28:7b:dd:
5b:1c:6b:6d:0b:27:21:7e:81:5c:dc:91:d6:79:82:
dc:0f:cd:74:bd:39:9c:bd:9b:12:cb:82:58:e7:cf:
b0:09:dc:14:f3:11:fc:78:4c:a1:6e:75:ea:55:cc:
f6:b5:f6:d5:1a:28:b3:f3:57:45:2c:84:e8:db:d7:
27:3d:43:48:33:b8:40:b0:24:72:aa:3f:b1:51:50:
0e:d7:0d:3b:45:94:47:ad:6a:67:54:b2:66:c9:8f:
36:74:9b:20:89:24:df:90:6d:63:2f:22:66:69:82:
1a:39:12:87:1f:5d:ce:f1:2a:ab:84:9e:de:d9:0b:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:13:35:C6:DB:1E:8E:34:90:FE:96:D1:F0:EE:47:70:6F:40:B1
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:42:27:2e:f9:4b:d0:01:3d:55:f9:ba:09:37:3b:49:f8:1f:
40:16:33:86:9f:0c:6a:4f:b7:f8:27:ed:57:37:7c:8a:13:b9:
52:fc:b6:27:b5:49:a7:95:93:57:0c:41:c6:1e:a6:f8:53:83:
f7:04:30:a8:27:f5:53:ac:69:7d:43:8a:47:97:bb:8f:3e:78:
3f:56:11:60:84:59:f3:28:b0:f3:8c:2b:2d:66:33:9c:8d:d4:
75:82:cf:24:0e:7f:fe:c3:bd:55:f8:a8:92:12:70:af:2f:aa:
9a:4b:36:33:90:87:55:25:57:6c:18:e7:77:1f:4a:b2:4d:64:
c7:96:28:04:2d:08:1c:48:91:16:16:8b:1a:83:a4:53:80:3d:
4b:57:60:5b:07:56:06:53:62:5f:57:3c:55:11:7d:41:11:de:
dd:8b:dd:f2:fa:80:cc:15:1e:29:f5:e9:53:05:3b:d2:d2:94:
a7:c2:79:d0:e5:cf:a4:e7:f8:aa:77:c4:4d:10:9d:2f:29:7c:
7b:9c:35:93:d9:ff:ec:50:ca:c0:9f:1e:5d:5a:4c:5b:5c:c6:
f4:fb:ac:8e:fe:a3:df:bc:32:ae:c9:6d:11:1d:6b:c1:b6:d9:
60:3c:5c:a9:73:d0:b7:6a:36:5b:e2:e3:0e:1c:86:41:da:4c:
b8:dc:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:25:46 2025 by rpki-client