Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: ev1DaTutnJ0lEMJE/cLMhH/czE9nlaRfosDhFaFHUhs=
Subject key identifier: 89:F8:31:E3:A6:74:9B:E5:68:FE:51:31:45:75:A2:E6:7D:56:A8:45
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0198D773BE3DB065BCE790B7EDCB1C3FC061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 15:02:23 +0000
Manifest this update: Sat 23 Aug 2025 15:02:23 +0000
Manifest next update: Sun 24 Aug 2025 15:02:23 +0000
Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: rdkFY1JE2258lUhv86X4mz57o0cs1DE351GNOA75HNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:be:3d:b0:65:bc:e7:90:b7:ed:cb:1c:3f:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Aug 23 15:02:23 2025 GMT
Not After : Aug 24 15:02:23 2025 GMT
Subject: CN=89f831e3a6749be568fe51314575a2e67d56a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:a7:df:f5:e0:cc:8f:98:6c:09:6f:3e:91:
e4:54:31:e9:c1:5e:52:39:ac:61:ca:f3:65:95:e7:
5b:07:11:b8:63:a9:71:4a:a9:52:42:bc:45:a8:84:
9f:30:fa:f1:9c:5b:7a:ee:94:86:69:e6:ab:6f:41:
50:ff:cc:03:fa:3a:2e:b2:4f:d8:14:a5:4b:2d:e9:
24:a5:9a:48:f3:4f:56:65:34:8c:c5:9b:b7:72:7d:
f5:2a:98:34:c3:5d:5c:7c:bc:32:b1:5f:d9:bc:07:
29:50:22:c4:32:c1:e4:0e:4e:e0:ca:0e:49:a7:e0:
52:b5:3e:31:e7:69:81:d3:a4:e5:f3:b7:cc:06:cc:
34:ae:52:09:0a:e5:77:7d:34:d2:94:ac:82:1b:65:
bd:65:d7:57:9d:c6:af:08:d1:b6:75:71:d9:e8:60:
9d:a9:4a:a1:4d:e3:6d:be:05:8b:0a:78:2a:86:d8:
76:fc:bb:45:e9:d6:28:b3:f0:2e:e6:40:a1:61:ab:
58:9e:2f:4f:b9:ae:3e:ac:50:31:e0:ed:4e:a7:79:
fa:60:30:17:0f:cf:7a:5a:ed:88:54:a9:44:f9:0f:
d5:02:f5:d5:3d:8d:b5:55:15:10:f0:7c:5e:68:4a:
49:ac:5e:e8:b7:1f:19:d7:00:4c:7a:6c:27:40:26:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:31:E3:A6:74:9B:E5:68:FE:51:31:45:75:A2:E6:7D:56:A8:45
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:98:e0:f6:4f:99:b5:57:8b:1f:2a:92:f2:f8:f9:4a:d9:
e1:06:df:f8:a2:9a:9c:fc:aa:29:21:d1:dc:a2:6f:3d:05:07:
81:85:5f:42:fb:eb:55:f3:03:84:5a:7e:10:21:54:7b:8d:ca:
25:f1:c4:ac:eb:2b:04:e4:41:4e:b9:dc:66:2d:1c:ef:91:39:
15:5e:59:1d:ed:a2:fa:2a:dd:80:29:a8:bc:37:01:8e:25:42:
f6:64:9c:2f:d6:fd:86:0e:4a:92:06:10:09:16:27:2e:a4:dc:
2f:37:e7:38:f1:1f:0a:7e:7d:93:98:9d:c7:17:81:85:ab:4c:
e5:24:94:54:fd:37:b1:35:60:90:86:7d:cd:e6:2c:8c:d8:86:
4a:c5:4d:34:b0:18:c3:3b:cf:f2:70:a6:8a:ee:43:72:50:8e:
28:a4:18:2f:2d:f8:25:df:aa:87:97:a5:86:21:00:e6:67:c4:
1a:f2:ea:26:1c:d7:7f:dd:44:bd:a9:68:bd:32:84:ea:be:3e:
c0:4f:f7:03:53:86:01:39:74:a8:49:e4:2e:bf:f3:ea:76:1a:
b0:14:d2:ea:b0:54:de:90:b8:3f:f1:55:b3:bd:84:15:2f:56:
ef:41:26:d5:03:a6:a9:c9:6c:c6:65:30:67:da:d2:f7:1d:91:
43:d3:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:57 2025 by rpki-client