Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: nTt0NBHWMvdRW5FJoPgCEHllTrmkWBzdzzPfwmjI6EM=
Subject key identifier: 2F:29:6F:DF:39:73:3C:C0:2B:28:03:EF:13:FE:CE:CF:A0:2A:23:91
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01975D93B37FF0998EAFE7F2ACDD913EEA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 12A5
Signing time: Wed 11 Jun 2025 06:00:50 +0000
Manifest this update: Wed 11 Jun 2025 06:00:50 +0000
Manifest next update: Thu 12 Jun 2025 06:00:50 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: xtHFsrAw2fq+PBSM07k1Y0uk28ppUjsQRBPV9wfL+LM=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:b3:7f:f0:99:8e:af:e7:f2:ac:dd:91:3e:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jun 11 06:00:50 2025 GMT
Not After : Jun 12 06:00:50 2025 GMT
Subject: CN=2f296fdf39733cc02b2803ef13fececfa02a2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:bb:ae:a2:d3:d6:60:5e:42:1e:35:73:6a:
17:a4:60:ac:5e:03:a5:0b:b0:12:09:99:fa:28:2b:
a0:17:07:de:dc:fa:a6:d2:03:b4:5b:e3:b3:75:3e:
38:fa:0b:b1:d9:e6:bb:f4:5b:cd:d4:97:2e:2e:14:
fe:7b:ff:48:53:fc:b4:72:13:2b:ca:c4:5c:4b:de:
68:5f:51:56:48:55:67:cd:fe:ca:81:2d:18:86:23:
49:15:97:82:56:a4:4e:4a:1d:e0:18:42:19:6f:ab:
52:d5:33:02:3f:af:82:c1:9b:21:ad:5d:82:6f:6c:
7f:e8:8e:bd:ec:71:55:97:65:37:76:91:6c:df:1f:
f6:65:85:b9:ad:0e:06:ea:12:2c:d3:21:79:c1:4e:
b3:14:4e:a7:2c:5f:0b:95:75:b7:83:b0:22:2c:cd:
d2:b4:9a:d0:3b:11:52:46:7b:51:de:df:f1:88:66:
f3:1d:da:cb:4a:37:92:f0:d2:17:5f:d9:f2:cc:56:
57:2c:cc:e3:85:8c:2e:d7:97:b9:6b:16:05:52:9c:
eb:48:e0:1e:64:e8:36:c8:ff:6e:ce:ff:c5:09:fd:
7a:d1:09:0a:b2:c1:1d:3f:2e:cb:07:f6:ed:67:4a:
6a:0b:46:4e:9c:ad:d2:5e:97:25:54:2d:94:4e:8d:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:6F:DF:39:73:3C:C0:2B:28:03:EF:13:FE:CE:CF:A0:2A:23:91
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:eb:8f:cf:93:38:1d:42:ec:d8:af:ad:79:76:64:32:da:b7:
de:aa:84:a2:2d:e9:9f:c4:0b:4c:27:c3:14:ea:7e:22:93:07:
37:83:5a:49:91:35:88:f5:e8:24:d9:cf:72:49:ad:f2:75:b7:
a6:cf:ea:1c:3a:1a:8e:26:7b:7c:aa:02:88:f8:53:4b:d6:35:
a0:c8:35:0f:b3:96:3c:e2:16:ea:b6:46:73:4e:43:bf:64:81:
54:f3:d8:df:c1:cd:14:41:42:7b:7c:01:65:f5:88:71:29:21:
07:cd:13:41:6a:31:42:a0:f9:02:bf:ac:ef:dd:8e:af:fd:0b:
cd:af:b4:7c:53:6a:aa:40:27:3f:e6:14:88:de:4e:f1:d9:2c:
01:97:7d:b0:64:62:da:d4:ac:19:20:ca:77:d8:38:90:dc:dd:
f5:6f:2e:1f:0d:df:21:41:28:50:ef:25:1d:5a:3a:45:a5:16:
a2:11:72:de:3b:18:8d:eb:b3:1d:10:44:77:7d:79:73:b9:73:
e7:b6:b8:21:84:bb:34:d0:bd:8c:b8:c0:78:e3:ac:91:a3:a2:
02:7d:b7:5e:38:4a:b3:ec:fa:9e:ed:d7:85:b0:36:3b:83:32:
2b:59:bc:ee:0d:17:d4:e4:8f:8b:6f:b3:2f:dd:e5:14:59:d2:
1b:1e:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:14:04 2025 by rpki-client