Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: SxuxFiwMy1opCvzOUAzp5SmjcLeln/+Jx1Ky2CF/YFM=
Subject key identifier: 8D:11:B2:F2:EB:0F:F6:50:26:70:46:76:E7:1C:9A:EC:D5:EE:BA:20
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01961D000DFEB8858EB95E9ACA77A2E5E74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 11FF
Signing time: Thu 10 Apr 2025 00:01:04 +0000
Manifest this update: Thu 10 Apr 2025 00:01:04 +0000
Manifest next update: Fri 11 Apr 2025 00:01:04 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: ZC+snDMGt5H3NcyN1S102gR4TNrVjX9xok1RHOR35nw=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:00:0d:fe:b8:85:8e:b9:5e:9a:ca:77:a2:e5:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Apr 10 00:01:04 2025 GMT
Not After : Apr 11 00:01:04 2025 GMT
Subject: CN=8d11b2f2eb0ff65026704676e71c9aecd5eeba20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:97:cc:40:5f:09:39:65:11:5c:56:57:ad:
a3:89:72:6c:9b:05:ef:6c:73:3c:a5:c4:f0:5b:b0:
57:18:73:06:26:89:ca:46:6a:a4:ed:87:7c:a2:ed:
d9:70:6f:0f:c1:65:c9:5b:39:da:df:20:29:54:f8:
9e:61:45:66:c2:97:8a:c0:09:e4:ea:51:3e:eb:a3:
5f:04:42:d9:ab:ae:d8:bf:4f:13:20:12:db:cc:ad:
76:ae:8a:7c:f8:d1:f9:a7:3b:86:57:07:8b:59:88:
9f:7a:73:f0:8b:11:b8:4b:de:2a:b3:35:fe:4c:04:
9b:64:77:ba:5e:32:bf:d1:ec:00:a0:f3:62:4f:77:
4c:02:65:68:5b:01:f6:a3:8c:4c:67:77:36:a6:2c:
26:40:c3:61:10:6a:dd:94:06:73:c2:e1:98:71:eb:
5f:be:c6:dd:af:0b:b9:aa:6e:ee:fb:cb:fe:af:2a:
bf:81:4a:bf:ba:2e:e7:2d:eb:b0:f3:d0:7d:c5:67:
7d:ac:7f:30:16:8f:50:74:c3:d6:c6:e1:5b:d7:9c:
7e:1f:96:22:98:bf:fe:89:ae:f2:1f:bf:b1:47:98:
36:d2:80:88:df:61:80:e2:f1:81:80:4f:59:ab:10:
9e:4a:a7:8a:ec:e0:00:a0:03:bd:c3:1a:10:01:7a:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:B2:F2:EB:0F:F6:50:26:70:46:76:E7:1C:9A:EC:D5:EE:BA:20
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:41:af:5e:2f:6e:ba:dc:63:1b:a0:9d:fc:f6:16:5f:63:
68:6b:eb:1a:b1:e9:4b:4b:7b:4b:46:eb:5a:80:5d:1e:9e:81:
30:6a:98:0c:18:52:fd:e0:15:2c:cd:57:e1:00:9f:d2:91:5c:
d7:58:88:3f:a0:16:11:d6:7f:c1:6b:c4:10:36:1a:f1:1e:f1:
30:e5:6d:d5:ce:38:d3:f3:06:69:4b:df:60:ec:b4:8d:81:94:
04:42:6a:db:e9:ed:99:f1:c6:de:76:d7:42:98:c6:a7:93:bb:
f0:d8:20:67:5e:51:82:61:d3:b7:96:12:c8:ce:7a:04:d7:24:
1c:31:22:04:76:67:bc:81:1c:b4:7e:36:48:ea:6b:9a:9f:4d:
ed:38:19:ee:8a:38:cf:35:d4:19:46:30:fb:a6:f8:08:0c:30:
85:66:f4:d3:10:51:fb:38:81:45:67:03:3e:88:f7:79:3e:7c:
d7:dc:27:35:54:9f:83:3c:5f:0c:f8:8d:04:37:16:b5:c0:e0:
de:07:cc:76:77:86:2e:b7:fd:31:74:2c:b0:e8:fb:71:de:b7:
3d:ff:c8:57:43:67:8c:78:f4:8a:67:58:20:7a:78:73:eb:32:
f8:07:c2:34:90:46:5d:06:f4:bf:21:8c:e7:f1:35:22:cf:37:
2e:79:a5:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYdAA3+uIWOuV6aynei5edKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0
Zjk2MjQwHhcNMjUwNDEwMDAwMTA0WhcNMjUwNDExMDAwMTA0WjAzMTEwLwYDVQQD
Eyg4ZDExYjJmMmViMGZmNjUwMjY3MDQ2NzZlNzFjOWFlY2Q1ZWViYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCCXzEBfCTllEVxWV62jiXJsmwXv
bHM8pcTwW7BXGHMGJonKRmqk7Yd8ou3ZcG8PwWXJWzna3yApVPieYUVmwpeKwAnk
6lE+66NfBELZq67Yv08TIBLbzK12rop8+NH5pzuGVweLWYifenPwixG4S94qszX+
TASbZHe6XjK/0ewAoPNiT3dMAmVoWwH2o4xMZ3c2piwmQMNhEGrdlAZzwuGYcetf
vsbdrwu5qm7u+8v+ryq/gUq/ui7nLeuw89B9xWd9rH8wFo9QdMPWxuFb15x+H5Yi
mL/+ia7yH7+xR5g20oCI32GA4vGBgE9ZqxCeSqeK7OAAoAO9wxoQAXpAUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0RsvLrD/ZQJnBGduccmuzV7rogMB8GA1UdIwQY
MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt
OWMxNWZiZDVlZTVlLzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl
LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsZBr14v
brrcYxugnfz2Fl9jaGvrGrHpS0t7S0brWoBdHp6BMGqYDBhS/eAVLM1X4QCf0pFc
11iIP6AWEdZ/wWvEEDYa8R7xMOVt1c440/MGaUvfYOy0jYGUBEJq2+ntmfHG3nbX
QpjGp5O78NggZ15RgmHTt5YSyM56BNckHDEiBHZnvIEctH42SOprmp9N7TgZ7oo4
zzXUGUYw+6b4CAwwhWb00xBR+ziBRWcDPoj3eT5819wnNVSfgzxfDPiNBDcWtcDg
3gfMdneGLrf9MXQssOj7cd63Pf/IV0NnjHj0imdYIHp4c+sy+AfCNJBGXQb0vyGM
5/E1Is83Lnmlqw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:15:07 2025 by rpki-client