Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: 1gdE9RRpUCbq1L+tzCJZWf3ZC4spqBpGMWQpnBP0URE=
Subject key identifier: 4B:9C:62:20:AB:0A:13:93:22:42:1B:BD:57:14:09:C1:78:B4:14:55
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019921B149A22F606B7C2208DC1440954867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 11F5
Signing time: Sun 07 Sep 2025 01:01:30 +0000
Manifest this update: Sun 07 Sep 2025 01:01:30 +0000
Manifest next update: Mon 08 Sep 2025 01:01:30 +0000
Files and hashes: 1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: TKFanyg1e2uOHodZNtBGTwYjeAMEtXr7tIiviRlEqXE=)
2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:49:a2:2f:60:6b:7c:22:08:dc:14:40:95:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Sep 7 01:01:30 2025 GMT
Not After : Sep 8 01:01:30 2025 GMT
Subject: CN=4b9c6220ab0a139322421bbd571409c178b41455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:01:c5:fb:39:ab:bb:1e:10:18:d3:fb:8b:
82:71:a5:3e:5f:c6:5c:ce:b2:29:1d:fa:08:7d:0e:
b3:e3:eb:86:c7:cf:da:15:75:2c:4f:6d:57:96:be:
eb:fc:66:9a:05:79:5b:e0:b6:dd:61:f6:af:f5:9f:
1c:98:0b:c0:88:bd:73:1a:57:c9:b7:ea:35:fb:d7:
fd:2c:ab:37:40:c0:9f:fc:ee:7d:0f:58:22:6e:17:
1e:4b:5a:23:7e:72:cb:ab:3a:15:77:d6:51:88:c9:
17:85:df:e4:55:7c:19:ca:cf:6f:87:1f:08:1e:68:
2e:11:0d:fe:17:2f:91:c1:63:62:83:ab:28:15:5a:
70:bc:39:c2:a6:44:66:93:3e:61:d0:e2:a5:5d:84:
a1:b1:9a:b7:45:34:b2:f6:98:08:bc:cb:5a:eb:78:
57:33:43:da:eb:2f:97:f5:92:da:55:d2:7b:70:4b:
da:1a:94:c1:00:19:fe:2a:ff:e7:96:85:ba:84:a3:
c0:1b:f3:a1:a1:59:2f:3a:1d:9d:8b:b2:b8:58:4d:
09:d5:33:23:5e:28:45:94:fe:63:98:80:6e:f8:ad:
93:31:8e:63:24:95:5e:dd:20:c3:ec:01:f7:7b:66:
7f:65:7a:95:bb:b1:b2:93:fa:20:ca:6b:0a:43:42:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:62:20:AB:0A:13:93:22:42:1B:BD:57:14:09:C1:78:B4:14:55
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6e:47:19:77:61:db:35:e9:9e:4f:f9:79:6d:e4:04:ec:08:
d0:d9:c4:4d:7f:5a:fe:b5:52:50:9f:9b:b2:ba:3b:f4:00:82:
af:b4:95:31:b8:4e:51:96:a1:df:f1:63:47:09:0f:0c:10:56:
18:f5:8f:ff:97:42:3c:1e:4c:27:73:ab:d9:93:b0:ef:b6:2f:
22:fa:c6:af:86:1e:56:76:3a:af:bf:5e:52:02:d4:b0:ca:27:
61:a1:9a:f9:88:0d:38:58:86:93:3b:db:d3:1b:6b:f0:e8:36:
88:20:91:73:9a:a6:0e:5f:a7:4a:13:b6:9e:cf:d1:ea:d8:d1:
62:20:3e:bd:78:a5:e7:17:b0:d1:52:d2:2f:aa:10:06:99:a4:
a6:00:6c:1a:bf:b8:16:27:dd:af:c1:c0:8d:02:b1:13:f5:cb:
ce:47:90:f5:a6:f7:0a:86:ff:e5:29:70:72:d4:6a:be:c1:43:
10:91:33:7b:6e:29:63:de:2b:3a:00:84:2b:2e:cc:de:c5:22:
de:b6:4b:6b:b6:10:b8:1f:67:fa:b7:29:52:ee:71:30:e5:78:
77:4b:b3:5e:d9:97:ab:47:18:8f:32:71:77:06:1a:e8:b1:02:
47:c7:35:d8:fe:d8:63:94:55:a9:42:e4:22:8b:6e:1f:b7:81:
9c:84:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:36 2025 by rpki-client