Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: NW+FeGkmjN+ZUkFt06gcdlyjej4MAiTnhQFXBXKIiFA=
Subject key identifier: 00:A8:3E:AA:DE:FA:93:C1:C5:17:99:B6:10:38:6C:CA:9F:02:A6:C4
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019757C827B1288F2722B5288F8BAC982045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 12A2
Signing time: Tue 10 Jun 2025 03:00:24 +0000
Manifest this update: Tue 10 Jun 2025 03:00:24 +0000
Manifest next update: Wed 11 Jun 2025 03:00:24 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: 7gNaMckRcG7NA4ctQPoF8nW+eEbg6rpSvz2SnIdHfPk=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:27:b1:28:8f:27:22:b5:28:8f:8b:ac:98:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jun 10 03:00:24 2025 GMT
Not After : Jun 11 03:00:24 2025 GMT
Subject: CN=00a83eaadefa93c1c51799b610386cca9f02a6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:c3:1a:f6:7e:b1:b2:a8:c9:a3:d4:62:f3:
7d:ea:3b:30:5f:f9:df:40:20:bd:bc:e6:66:63:98:
93:16:25:8f:5c:e7:72:48:1f:a3:de:a4:21:ac:8b:
4e:37:52:f4:83:6d:29:1f:f6:af:de:3e:2e:43:94:
42:ac:b9:c6:19:d6:6e:e3:98:e4:eb:17:1c:c7:bd:
c5:90:79:4f:ca:85:0f:69:d5:5a:f6:6c:0d:01:13:
10:29:32:77:66:65:18:c8:73:59:9a:a4:83:99:38:
71:9a:90:f0:86:bb:72:b9:7b:1e:4b:f7:1e:51:2b:
d5:56:10:ab:2c:c9:6e:97:83:0d:da:17:90:46:92:
a9:79:bd:71:33:63:a2:2f:6a:bb:b0:75:76:3e:05:
04:28:70:65:c7:bf:c3:97:b4:65:74:0a:ec:f5:8f:
9b:64:f4:cd:1d:da:26:9a:37:a2:74:59:8c:83:17:
aa:87:8a:6d:6c:4e:02:b8:4c:1c:35:c5:b2:a3:df:
10:e7:86:f6:9b:2d:71:d8:3d:0c:c5:58:43:78:d6:
67:c7:17:36:38:0a:c4:2d:16:01:b5:0e:16:2c:03:
d9:c6:6f:6c:bf:3a:e3:6c:37:02:ca:33:79:08:a7:
3e:07:03:75:9d:47:23:95:55:28:49:63:dd:df:0a:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:3E:AA:DE:FA:93:C1:C5:17:99:B6:10:38:6C:CA:9F:02:A6:C4
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fc:89:09:1a:d2:fe:5d:34:ab:12:b5:57:2f:c4:7c:41:5a:
1d:8f:5f:e1:4f:15:05:2d:a4:b2:e5:87:f7:e3:08:83:a5:b9:
51:88:f8:b9:fc:25:8d:4b:44:f7:75:0d:15:21:19:57:3b:e2:
2d:66:14:5a:ef:3d:e4:ea:6e:95:06:d4:9b:dd:9c:00:5a:c1:
0f:8f:e6:2b:98:6d:7c:39:a2:a5:f2:b1:9b:0d:87:77:00:f4:
e8:d4:d5:89:b2:89:89:68:18:d7:9d:86:86:01:43:a2:d8:66:
ed:8b:b7:12:82:cf:37:01:92:e1:7b:1e:24:a4:29:48:25:8c:
3f:e3:8e:31:04:f4:ac:b6:fa:b9:84:08:6a:61:2a:58:a2:9e:
92:64:83:86:44:77:2f:f1:af:72:a0:6a:3c:c5:23:b5:03:e5:
fb:19:1c:ca:27:ed:31:29:e8:28:b4:ed:e0:f0:1e:e4:5d:39:
5f:12:b7:b2:68:29:0a:a7:15:5a:45:38:de:5f:9b:7c:7d:de:
de:e8:54:ac:e4:42:8d:c5:ac:0b:ea:d5:e2:57:be:4c:6a:1b:
b4:18:e2:cd:65:f8:0a:8c:46:29:d1:2e:47:9c:2f:c1:30:3c:
66:d2:f0:e8:15:61:59:bc:65:19:d6:6f:c9:9a:c3:bc:dc:7d:
23:fe:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:18:43 2025 by rpki-client