Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 9TxvsgkBeMvn4oVFgR8kr8zgFW3ekAQzWDzAi3jf+1c=
Subject key identifier: 1F:93:5B:E8:C3:3D:75:01:D5:05:20:33:0F:6E:18:2E:A5:A0:4F:3F
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01958CC586527C9911880D4979F099BE907D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 050C
Signing time: Wed 12 Mar 2025 23:51:49 +0000
Manifest this update: Wed 12 Mar 2025 23:51:49 +0000
Manifest next update: Thu 13 Mar 2025 23:51:49 +0000
Files and hashes: 1: 6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa (hash: Q3eJR3BSlZ4JFHQreAzZwVy1P41pR11wDqAIlfL2GPo=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: x5PCnCnTtd8oX0/6zNgY5bPGwr71AjVjMB77Agzch7w=)
3: jrvfRpZvRBtk_Yg60PvxHmKAprU.roa (hash: Hyd8SOBLyLw3LBdkd19m4cdLrzfDjpQ+9epp8rr0M9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:c5:86:52:7c:99:11:88:0d:49:79:f0:99:be:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Mar 12 23:51:49 2025 GMT
Not After : Mar 13 23:51:49 2025 GMT
Subject: CN=1f935be8c33d7501d50520330f6e182ea5a04f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:15:a6:29:f8:7f:46:80:2f:df:83:fc:1d:
60:b0:ba:76:c5:bb:9b:2d:77:59:21:ed:73:0b:04:
73:ef:12:33:93:8e:ca:80:56:64:65:e6:fb:8b:25:
af:ee:37:5c:2f:78:ba:5f:d5:a1:23:0a:a2:41:d5:
f8:aa:f6:9d:28:bd:f9:30:9e:40:a1:8f:ef:ec:f5:
f4:82:00:8d:0a:d4:e5:a3:af:f6:16:55:d2:db:9a:
c8:75:8a:b3:05:21:8a:85:7e:79:69:ed:7d:ff:c8:
41:d1:5b:bc:54:a7:4a:5e:c2:a4:a1:5d:f1:f8:70:
d4:c6:78:e3:c5:a0:31:f0:92:e8:0e:cc:4c:6a:6f:
8f:ab:1b:28:d1:6d:80:7d:80:6d:43:75:aa:13:4b:
10:8c:4c:08:e0:e3:79:63:bb:b5:b0:b6:df:df:e6:
d5:bb:4d:d1:4c:ed:77:65:70:7a:5a:d0:59:d6:9a:
e7:8a:90:5f:f1:5d:c3:83:b8:06:13:6f:7a:57:89:
66:27:5b:95:ff:ed:b3:2f:f5:92:74:42:70:48:25:
5a:e6:3c:b5:92:47:b1:35:75:9c:1d:3e:4c:59:6f:
e5:0e:dc:02:f5:24:f7:23:fb:cc:1c:39:01:4f:1c:
b2:c8:ce:ba:fa:29:64:2d:db:a0:eb:01:12:dd:43:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:5B:E8:C3:3D:75:01:D5:05:20:33:0F:6E:18:2E:A5:A0:4F:3F
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a1:9c:06:c9:e2:05:64:c7:68:71:27:76:df:ab:07:c7:04:
ad:c9:87:91:68:4f:42:60:27:dc:a9:28:07:50:7d:a7:38:65:
9c:54:86:ae:08:9d:36:c8:09:d4:e0:89:88:68:60:dc:0e:89:
5e:d0:3d:da:68:e6:72:e8:ef:f9:a8:da:c6:fc:09:88:1f:23:
d9:39:99:11:f9:7b:95:d9:75:8e:65:92:29:e1:8a:1d:fe:0e:
c8:a4:ca:e9:79:b1:c0:71:96:f0:d7:a6:ec:50:4c:25:fb:d5:
ea:80:5b:63:cd:e8:d2:c4:6f:81:b1:9e:ff:e1:04:93:66:10:
8e:06:8e:38:c2:d4:f2:5a:9a:34:db:4d:d8:73:1e:e0:94:81:
81:9d:6e:e9:44:ee:a7:e2:8a:e1:ec:74:20:df:c6:0c:a1:94:
30:c8:c0:09:7d:19:4f:20:57:6d:3f:b4:b4:5f:ba:67:82:64:
da:30:05:29:8e:a6:77:89:31:da:47:62:a4:55:e3:53:fb:fe:
42:7b:d7:aa:f5:76:71:10:60:f6:33:e7:01:e7:6e:58:2d:ec:
99:b4:21:35:39:ee:0f:b1:fd:69:53:05:12:cc:2e:c9:c7:0a:
b0:53:2e:1a:21:2c:87:79:71:b1:ad:ea:3a:b9:26:87:74:c5:
94:6f:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:48 2025 by rpki-client