Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: oLhGZmgq42rns8GC8f+YVtfB8BX9vA4t672XvsLpzrY=
Subject key identifier: 39:82:39:6A:42:E8:8F:40:95:3F:35:AA:A1:FC:12:FE:66:1D:92:CC
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0199FB0F03BE5FB20D8F86A02046CE21329C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: RUEDatykDet3Yyb2HhlKnoo6EhtEwQ8b1SAsKrYOIos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:03:be:5f:b2:0d:8f:86:a0:20:46:ce:21:32:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=3982396a42e88f40953f35aaa1fc12fe661d92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:2e:de:0b:41:fc:f9:39:01:97:49:6d:a7:
5a:d4:66:28:9f:7e:2d:35:52:6e:18:d1:4c:62:de:
80:7f:09:ff:a4:cd:49:77:c0:85:e1:8b:39:81:e0:
1a:0a:cd:db:6a:a1:20:2f:8d:c3:53:e3:04:90:ea:
fb:5a:1d:60:08:0d:e6:39:8d:c7:23:9c:34:7c:87:
93:09:9b:68:4d:2d:e4:ee:a9:c4:c5:6e:d3:2c:50:
7b:ec:de:d0:37:c1:bb:91:90:63:e3:d4:d6:fa:40:
d6:06:42:e4:7c:99:da:6c:94:c5:b9:53:15:f0:73:
1d:5c:33:2e:d7:b6:db:dd:9c:ae:1e:c3:ee:0e:d2:
d9:c2:88:2d:fc:05:53:dd:ae:8a:53:be:ea:9b:71:
29:02:5a:88:f3:f2:db:f2:eb:c1:b3:77:2b:20:cc:
ec:91:93:8d:e1:2f:32:be:cf:d2:08:de:dd:2e:dd:
87:ca:5c:94:a0:5c:12:2a:5e:b6:7d:7a:4f:77:ef:
37:c7:8a:c9:00:ac:c8:58:3c:d2:66:65:b2:c8:57:
56:3b:35:d9:d4:29:59:f2:76:3a:f8:74:53:a3:60:
f0:d8:f6:56:40:70:0c:7b:9d:67:e4:44:90:c2:cb:
6b:a9:81:98:c9:28:b8:5b:5c:3a:07:b0:c0:9b:2f:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:39:6A:42:E8:8F:40:95:3F:35:AA:A1:FC:12:FE:66:1D:92:CC
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:4b:2b:24:2c:d7:eb:ed:ca:4a:87:3d:e3:71:c2:bf:84:
56:87:cd:fc:f8:ad:54:8b:92:d5:a7:0b:5e:3e:1b:7d:0e:20:
73:ee:4e:41:47:66:73:f5:c0:d5:81:3c:2d:ce:ba:8c:84:f5:
2c:c6:8a:f8:1a:4f:d4:d8:95:43:e0:2e:bf:85:fc:e4:2d:de:
ee:dc:42:85:60:df:c9:a3:95:25:3b:99:d5:2e:81:f1:f2:af:
3b:3e:cf:b9:0e:91:fd:f1:cd:7e:37:2a:e7:1e:ed:fe:4d:1a:
f7:48:4c:df:e2:44:86:f4:48:0c:08:0c:2d:f2:ef:0a:ae:e9:
8b:7f:67:14:78:62:c3:d3:db:eb:53:d7:ec:2e:24:7f:ef:ba:
a7:a3:a1:bf:c2:31:31:63:fe:12:f4:5c:2a:25:ef:a0:ab:a6:
db:db:a7:8d:af:dc:0d:07:76:c6:c9:ff:65:c2:b2:d4:16:38:
5c:ce:20:33:71:a6:0c:d8:90:47:a9:92:be:06:a8:d0:61:4d:
58:79:4d:4c:ae:82:bb:e6:d1:d5:37:c5:7c:c3:fd:e1:b3:59:
3b:88:12:29:f1:0d:31:92:29:44:2d:3c:3f:79:6e:69:54:61:
70:32:5f:8b:af:1b:99:f4:6c:22:04:53:9a:4e:ba:bc:eb:b6:
44:74:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:07 2025 by rpki-client