Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: 9fbV0M+hbPkkZ3+Z3Y8U7iyHF8zg0BO1MzPRLnVbvjQ=
Subject key identifier: 9A:A6:B4:22:18:53:2D:EB:1B:95:C7:72:49:ED:39:3C:56:CB:4B:7F
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0197B7B34DA2F5242773E2EDC64B5F3286E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: ixVQh66eSS/HwFnQhZfUotVVKZt31AAr8AmVmHqBPVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4d:a2:f5:24:27:73:e2:ed:c6:4b:5f:32:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=9aa6b42218532deb1b95c77249ed393c56cb4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:1b:80:da:df:33:92:a7:01:a2:51:4c:83:
bf:de:5d:16:a7:c2:e1:bf:49:aa:e4:e8:e3:64:97:
b3:2b:35:9c:0a:43:58:81:5c:1f:5e:20:cf:4f:6f:
38:e3:8c:5c:18:32:b3:81:dc:33:f6:34:c9:63:91:
b3:b5:da:3a:d4:d8:3e:93:b8:ff:90:48:54:e8:13:
bd:77:09:a2:52:33:47:de:1e:89:1f:eb:12:98:e8:
56:12:23:c1:01:97:aa:0c:26:ea:db:f8:b2:d3:80:
47:db:66:7b:5d:92:7a:ec:ce:48:49:cb:eb:c2:10:
6a:d6:93:82:11:51:de:53:67:11:7d:b3:d7:e1:28:
ea:18:c6:20:52:78:91:c8:39:92:07:bd:b6:a2:aa:
76:99:4c:ee:a2:2a:b9:ee:f7:fe:f2:a7:74:18:32:
4b:eb:bb:d4:a4:b6:05:50:89:70:1b:6c:ca:6a:c4:
ed:88:f5:30:e0:e2:e7:5e:e3:aa:ec:c7:ea:8d:b8:
6d:c3:e4:f5:51:3e:a1:29:34:d5:e2:54:b4:51:de:
94:e4:8d:7c:c2:23:16:91:e6:eb:c5:47:e8:d3:f5:
6b:38:e3:19:04:3c:59:78:b0:c8:0f:20:13:88:b8:
2b:95:7e:06:49:e6:80:fb:56:41:fe:97:22:be:c5:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:B4:22:18:53:2D:EB:1B:95:C7:72:49:ED:39:3C:56:CB:4B:7F
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:98:1e:fb:2b:c9:74:f1:10:69:96:99:94:e1:01:c1:e1:
a7:d4:0a:d5:67:43:33:06:7a:33:b7:5c:7c:67:cd:71:ac:d4:
ec:3f:df:6d:a5:28:fa:48:51:44:72:b6:8e:42:67:f9:ec:cc:
43:d5:bb:31:34:bc:1c:bf:fe:6d:22:ef:2c:69:2e:f0:b0:88:
f8:88:6d:e6:14:fa:3e:a8:cb:dd:af:e2:66:a5:be:d9:50:8c:
b8:9d:e5:ae:68:20:16:f0:ee:b9:b8:d9:6c:3f:35:f6:0c:31:
d6:e1:90:3f:62:0d:2f:19:37:73:fb:f2:d6:51:9b:1a:36:80:
28:35:35:f2:0a:a5:18:ce:21:73:58:53:c4:1c:ce:da:3f:b1:
82:3f:b1:da:e0:90:c7:c0:71:ef:27:b8:fc:d9:21:93:96:67:
65:8a:4b:87:8e:20:15:37:df:bc:ef:c3:dc:b9:48:c9:3a:9e:
e4:a0:b1:58:08:f1:72:7b:18:90:f4:73:0d:11:be:5d:5f:8f:
ae:17:dc:7d:5f:fd:65:cd:95:6c:fb:f0:6e:ce:3b:26:ad:3a:
8a:e5:cb:96:9e:ee:5e:ef:08:bb:47:37:f3:ef:03:e5:e6:f6:
93:df:c3:35:0c:18:ca:0e:8e:6b:09:32:49:82:9c:48:0e:f1:
e7:c8:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:49 2025 by rpki-client