Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: s+0TMBnse2zUwSrtpbsyiC1OHn7xssx2CA3vcnVpHa4=
Subject key identifier: 07:A5:C7:A0:DD:79:83:4B:C9:AF:9C:38:F7:2B:DE:3D:7A:22:4B:0E
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01974EFC5F81EB3A0F9E19361B28A86B5BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 05F8
Signing time: Sun 08 Jun 2025 10:00:51 +0000
Manifest this update: Sun 08 Jun 2025 10:00:51 +0000
Manifest next update: Mon 09 Jun 2025 10:00:51 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 9BBH32EPZSA9Koa3sqWVBf5W12g/DN5UU7T2odghwS8=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:5f:81:eb:3a:0f:9e:19:36:1b:28:a8:6b:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jun 8 10:00:51 2025 GMT
Not After : Jun 9 10:00:51 2025 GMT
Subject: CN=07a5c7a0dd79834bc9af9c38f72bde3d7a224b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:06:1e:f6:02:0d:7a:55:fc:f2:b6:53:f9:
1b:cc:41:76:69:77:14:0b:e8:14:35:4a:37:e7:ab:
fb:34:c0:71:11:67:c7:3a:5c:2a:f3:82:5d:17:13:
02:de:b3:d6:22:57:74:bc:96:bb:bf:84:68:f1:10:
75:d1:50:4b:6b:2e:74:67:6d:83:61:ed:bd:95:42:
78:ab:e4:7f:df:c1:b8:0e:b1:ab:ce:09:ad:f8:f1:
7f:4a:f3:c7:27:a2:94:37:81:3e:08:70:5c:46:32:
a1:2e:5f:c0:33:46:97:da:21:36:48:6a:45:a1:4b:
13:de:03:db:18:49:43:b4:28:3a:85:49:3e:61:42:
80:a5:27:fd:93:e9:5f:8c:00:0f:c1:18:83:a1:b8:
95:7a:8b:03:f7:f5:3b:b4:22:2d:e3:19:37:5e:73:
9e:3b:49:7c:f4:89:55:bb:ed:b9:49:80:17:66:26:
cc:3b:ea:a8:86:9b:2d:99:b9:47:0d:70:1f:b3:8f:
29:f0:01:45:38:35:f3:0d:ff:0c:6e:b2:76:eb:3b:
05:8b:55:eb:55:e9:90:9e:c6:66:29:a6:f1:c9:73:
41:55:f6:0f:d9:cd:86:85:9b:cb:e4:e3:d2:fe:dc:
f3:02:d0:93:a9:91:92:aa:ad:84:83:99:10:ae:92:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:C7:A0:DD:79:83:4B:C9:AF:9C:38:F7:2B:DE:3D:7A:22:4B:0E
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:34:7e:b6:5f:d8:db:09:e5:56:36:f0:8c:62:5f:0b:56:a8:
d6:00:b4:40:d8:09:ec:f2:22:af:44:b1:1a:f8:42:c3:3d:be:
ef:bf:e7:98:76:d1:ef:5e:51:26:19:23:1d:c1:dd:2d:df:84:
a8:d3:dc:41:ae:55:fa:f4:ed:ab:52:9a:b5:ff:9a:e9:16:5c:
fe:f9:a7:a8:3a:bd:e9:06:ec:1c:79:0b:7b:a9:d6:97:a7:2d:
34:7c:0c:f3:38:78:a0:18:7f:da:6d:70:23:85:65:ab:0e:5f:
99:77:8c:d4:c4:7b:e9:4f:fa:12:2d:71:63:86:ab:07:82:66:
b2:49:d5:54:40:4a:a3:d0:92:d8:b4:f6:dd:1c:dd:82:52:93:
10:4f:4e:2a:53:41:09:5d:6c:cb:e3:a5:da:27:4a:bc:aa:e4:
97:05:9c:db:f0:49:d1:91:d0:ad:42:47:6b:3a:9a:78:55:78:
1a:99:3d:52:72:bd:de:5d:d1:36:71:e7:fe:a0:68:04:cc:6a:
3e:50:6d:ac:9f:ae:09:6c:7e:ff:4c:0d:f0:7e:d1:7d:b7:8a:
e5:71:37:dd:c8:0d:41:5d:25:6e:80:9b:6f:2e:66:38:88:5d:
7c:a6:a0:cc:6f:e3:0b:39:9d:43:b8:ee:3a:02:ff:98:2b:b8:
23:b9:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:59 2025 by rpki-client