Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: dOoPnvzCex5rIspINPfTsXknAjCQYiEXxxj2f/bJkUY=
Subject key identifier: 6B:0E:A9:2C:E9:60:57:70:1B:68:DC:48:C8:AD:70:3C:3A:EC:38:EA
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 01958B4DAA1D59E3E726F5D09355606F2D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 17:01:17 +0000
Manifest this update: Wed 12 Mar 2025 17:01:17 +0000
Manifest next update: Thu 13 Mar 2025 17:01:17 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: zAcZnXzE0WMA/KYyRBKOA0c9ribo4iaiyPuHgnzdVp8=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:aa:1d:59:e3:e7:26:f5:d0:93:55:60:6f:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Mar 12 17:01:17 2025 GMT
Not After : Mar 13 17:01:17 2025 GMT
Subject: CN=6b0ea92ce96057701b68dc48c8ad703c3aec38ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:d4:df:23:1f:a4:50:c7:87:70:ef:18:76:
6c:f0:54:33:3a:65:90:ff:03:77:a1:5f:50:a0:f3:
3e:c0:cf:ff:26:62:2e:f9:9e:c4:c6:83:fc:e2:4f:
22:96:92:dc:6c:b1:87:05:5b:e3:bf:42:ac:8a:5b:
a1:6e:2a:8a:0d:49:18:f8:85:f4:02:c1:fd:48:96:
70:ef:ef:af:7d:66:ed:78:e0:ce:e5:ca:b6:8d:e9:
39:5a:49:ae:31:1a:69:53:69:9c:15:60:d8:65:ab:
97:c4:c3:7c:c1:63:f3:85:98:30:90:8a:9d:96:28:
34:0e:0a:3d:52:0e:e8:dd:dd:17:3c:e1:48:a2:93:
8d:92:36:34:57:87:d3:0c:8f:fe:3c:42:05:1f:b8:
51:4a:eb:3e:03:a2:2f:06:7f:eb:5b:c4:65:78:d6:
00:27:94:34:cb:db:99:56:12:bc:31:68:aa:61:1b:
c1:c2:48:8c:a9:07:e4:f9:5f:ef:ee:2e:ce:b4:d1:
cc:b1:fd:79:ea:73:83:de:9a:3f:eb:2f:34:f8:07:
fe:65:fc:2c:00:bc:69:75:a6:72:e9:02:01:d1:3c:
ae:d7:15:ab:db:8e:bb:3c:9c:9c:39:c7:07:31:dc:
6b:93:4e:06:20:91:08:76:b4:55:9f:7c:25:a6:be:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:A9:2C:E9:60:57:70:1B:68:DC:48:C8:AD:70:3C:3A:EC:38:EA
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:8b:a3:e6:1c:15:f8:bc:ee:ef:54:67:fd:d8:53:5c:0c:
c5:e6:e2:d2:16:d0:d1:c5:80:f0:38:56:09:b3:cd:4e:7e:8c:
2d:25:e6:4a:8f:95:56:24:7a:67:62:a1:3b:1b:47:46:82:58:
e8:63:b7:21:c1:e2:05:3f:d3:a2:07:be:60:67:68:90:48:cf:
f5:4b:b7:c8:1b:9b:b0:79:5d:95:04:1e:91:d9:03:68:64:bd:
27:8a:9e:66:99:66:86:de:cf:68:b6:ff:ab:5b:ac:1f:2b:1d:
00:17:5e:c0:78:72:66:af:c3:d6:36:31:4f:1e:4b:48:16:db:
a4:6d:3d:1d:72:0e:bc:0e:6c:d3:1e:f3:99:0f:3a:a1:22:f5:
93:ea:5a:a8:00:67:90:e1:01:ce:86:6b:2b:78:a4:8e:5a:9c:
b4:2b:43:6b:53:23:10:63:f3:cf:aa:2e:9e:dc:2f:2a:2f:bd:
a6:3a:f1:05:c6:3b:aa:d4:79:4c:5b:90:9a:00:ea:38:74:1f:
46:eb:b9:9e:ea:e1:c6:50:2f:21:81:87:4c:0a:2f:03:b5:ba:
43:1a:39:24:a5:d6:6c:c1:08:58:5b:8c:7a:ef:bd:48:43:5f:
8d:55:e3:5f:6c:e7:6d:19:f2:e6:7f:54:28:89:fe:40:71:63:
85:25:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:07 2025 by rpki-client