Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: i2CdrtUcR3LXnRqg+a77qY71i+VcZEVFdvugGdLBVaA=
Subject key identifier: A5:E5:2F:7F:6B:D2:77:B7:A2:1D:22:CB:2D:EA:D4:BA:B2:B1:B3:E9
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 01974A43DB1054EAA97AE4E07F68CA9FE4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1101
Signing time: Sat 07 Jun 2025 12:00:50 +0000
Manifest this update: Sat 07 Jun 2025 12:00:50 +0000
Manifest next update: Sun 08 Jun 2025 12:00:50 +0000
Files and hashes: 1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: fIbwwP8zSO8tQDJ7G5R/QfYIwUWwDOvAufQsXVHxrIs=)
2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:db:10:54:ea:a9:7a:e4:e0:7f:68:ca:9f:e4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Jun 7 12:00:50 2025 GMT
Not After : Jun 8 12:00:50 2025 GMT
Subject: CN=a5e52f7f6bd277b7a21d22cb2dead4bab2b1b3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:11:22:e9:ac:79:ac:25:b9:ed:12:04:1d:
83:3f:18:7b:ad:f1:de:47:91:3a:9c:bd:de:9d:5e:
33:b6:f1:f5:3c:9c:7e:43:14:28:01:5e:d6:44:f9:
37:56:a7:1b:8c:03:3d:bc:4b:07:3f:6a:58:fa:a1:
4c:da:69:bc:21:27:14:bf:42:af:da:06:5a:eb:36:
6d:01:72:d7:b7:da:72:46:14:87:b9:f1:6f:21:4e:
75:2a:cc:e4:d1:79:3c:85:89:04:3a:a2:1a:b0:d2:
03:16:56:e3:d3:66:dd:7a:28:a5:d8:37:da:3d:35:
42:fc:70:f9:a0:2a:5c:9e:2e:ca:bf:b7:24:e0:36:
4c:08:e1:2a:cf:44:4c:9a:21:ea:2c:d9:f2:27:eb:
2e:5f:23:35:bc:0d:8f:5c:d3:d9:ea:dd:3a:71:f1:
32:45:f3:e8:03:da:f7:b4:ba:fa:13:8c:38:72:1c:
69:2e:14:52:5a:5b:06:72:5e:81:da:ad:71:85:af:
7b:e7:31:c3:11:4c:66:f1:6b:fa:50:0c:35:06:41:
dc:82:90:19:6e:fd:60:fc:88:b8:8a:3b:56:40:6c:
bb:f7:ef:d5:01:9f:46:8f:63:7c:28:fa:9e:2f:1f:
8d:48:a8:3e:ea:2d:26:35:fa:5c:5a:f2:78:c5:64:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:2F:7F:6B:D2:77:B7:A2:1D:22:CB:2D:EA:D4:BA:B2:B1:B3:E9
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c7:b6:4d:4d:0a:af:5f:ef:1f:43:43:c5:56:59:28:4b:b8:
e4:1c:47:03:14:da:d8:84:2a:90:b7:b1:6c:a8:de:ca:94:8c:
cb:af:98:fb:7b:a3:ed:a5:9f:6a:09:9f:0e:3f:f8:27:52:ae:
bc:8c:13:94:00:85:26:a5:ba:64:5a:98:75:ee:81:3c:78:4c:
6c:c3:ca:c1:15:56:12:a3:69:e9:a5:e9:4c:47:7e:cf:0a:2c:
61:a8:79:74:dd:5c:ce:9c:85:f1:77:1b:b9:4e:1c:0e:5d:ae:
3f:63:c3:16:0a:16:01:bf:3d:97:88:31:e7:16:17:11:a1:13:
4e:f4:41:d0:b0:be:91:cc:11:48:8a:08:5c:0b:c1:89:41:f1:
eb:c3:1a:e0:3f:a2:93:b5:dd:00:97:e5:1a:64:73:a9:29:27:
3e:f4:3e:a7:f2:e5:1e:cd:c2:93:57:72:cb:83:dd:53:dd:d9:
46:a5:2a:98:57:ea:bf:e4:4a:3e:73:c5:aa:e0:2b:6c:0a:90:
12:fc:7e:4b:d3:ff:df:c7:22:99:e5:9f:cd:0e:99:e1:41:de:
43:1f:21:8e:b5:10:2a:e1:9c:be:d6:ed:17:05:b8:ac:d5:a5:
7d:9b:5a:58:19:e1:79:8c:fa:c1:7c:0c:0a:40:93:41:b0:24:
f8:ba:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:40:20 2025 by rpki-client